Skip to content
Open
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Enhance MCP allowlist enforcement limitations details
Updated the limitations section to include description and version matching for MCP allowlist enforcement. This is as per the current validation in the VS Code.
  • Loading branch information
manupk authored Jan 10, 2026
commit 6f1f95242320afa680bfa1cf6e91b8347f68da04
2 changes: 1 addition & 1 deletion content/copilot/reference/mcp-allowlist-enforcement.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ contentType: reference

MCP allowlist enforcement currently has the following limitations:

* Enforcement is based only on server name/ID matching, which can be bypassed by editing configuration files
* Enforcement is based only on server name/ID, description and version matching, which can be bypassed by editing configuration files
* Strict enforcement that prevents installation of non-registry servers is not yet available

For the highest level of security, you can **disable MCP servers in {% data variables.product.prodname_copilot_short %}** until strict enforcement is available.
Expand Down