GitHub ships fail-closed enterprise MCP allowlists for Copilot
GitHub made enterprise allow and deny lists for Model Context Protocol servers generally available through Copilot managed settings. Policies can match canonicalized remote URLs or exact local commands and arguments, combine across layers, fail closed on malformed configuration and apply to the Copilot app, CLI and VS Code.
Why it matters: MCP server selection moves from developer convention into centrally testable policy. URL canonicalization, exact command matching and fail-closed evaluation reduce easy bypasses, but team overrides and client coverage still require configuration and…