MCP Approval Policy

Approval Flow

1. identify purpose
2. define scopes
3. start read-only
4. assign owner
5. document rollback

Default Rule

No unapproved MCP server should be used against private or production-adjacent systems.