Feature request: enterprise MCP policy allowing local servers but allowlisting remote ones
Morpheis83 · ghdev · 2026-10-09
A new feature request on anomalyco/opencode proposes org-wide MCP security policy: allow local stdio MCP servers while restricting remote MCP connections to an admin-managed allowlist, enforced before connection and not overridable by user/project config. Includes config example and security considerations: redirect-aware destination validation, exact/wildcard domain matching, empty allowlist denies all, clear rejection diagnostics.
More from coding & agent
- Laude Institute launches FrontierCS 2: agents must beat deleted paper contributions blind — lateinteraction · 2026-10-23
- Index Network open-sources Social Discovery Protocol: agents negotiate fit on your behalf — carsonfarmer · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23