Allow-list MCP servers before a company-wide rollout

Описание и применение

<p>Refuse any MCP server that is not on a reviewed allow-list. The agent client checks that identity before it connects, and a server that misses the list does not install. Scan shared prompt packages for hidden format-control characters, require a person to approve tools annotated destructive, and keep more than one model available.</p> <p><a href="https://chainofthought.show/guests/angie-jones/" rel="noopener noreferrer">Angie Jones</a>, then VP of Engineering for AI Tools and Enablement at Block, walked through those controls in a January 2026 episode. Her team had rolled Goose, Block's ope

Задача

<p>Refuse any MCP server that is not on a reviewed allow-list. The agent client checks that identity before it connects, and a server that misses the list does not install. Scan shared prompt packages for hidden format-control characters, require a person to approve tools annotated destructive, and keep more than one model available.</p> <p><a href="https://chainofthought.show/guests/angie-jones/" rel="noopener noreferrer">Angie Jones</a>, then VP of Engineering for AI Tools and Enablement at Block, walked through those controls in a January 2026 episode. Her team had rolled Goose, Block's ope

Результат

<p>Refuse any MCP server that is not on a reviewed allow-list. The agent client checks that identity before it connects, and a server that misses the list does not install. Scan shared prompt packages for hidden format-control characters, require a person to approve tools annotated destructive, and keep more than one model available.</p> <p><a href="https://chainofthought.show/guests/angie-jones/" rel="noopener noreferrer">Angie Jones</a>, then VP of Engineering for AI Tools and Enablement at Block, walked through those controls in a January 2026 episode. Her team had rolled Goose, Block's ope

Доказательства

Allow-list MCP servers before a company-wide rollout

Источник