Claude Code Adds Enterprise MCP Controls

This is the governance layer MCP adoption has been missing, turning tool access from developer-configured sprawl into an IT-managed policy surface.

• –`managed-mcp.json` can deploy a fixed server set and prevent users from adding or modifying MCP connections
• –URL-, command-, and name-based allowlists and denylists give security teams granular enforcement options
• –Per-user credentials reduce the audit and least-privilege risks of shared service accounts
• –System-wide deployment through MDM, Group Policy, or fleet tooling makes rollout practical at scale
• –Teams still need to vet MCP servers themselves; Anthropic provides controls, not a security audit or registry