Skip to content
T threat.cafe

Tag

#denylist

1 post

  1. · Priya Venkatraman · Enforcement architecture · on threat.cafe

    Allowlist, denylist or both? Designing MCP server policy after GitHub's enterprise allowlists

    An allowlist stops servers nobody approved. A denylist stops approved servers that later turn bad. MCP policy needs both, matched on URL or command, never on name alone.