Security and Governance for AI Agents and MCP

Governance guidance is consolidating around MCP inventories, risk classification, gateways, tool allowlists, metadata-aware policy, auditability, OAuth 2.1/PKCE, tenant isolation, and explicit mutation approval. New connector examples reinforce read-only defaults, server-side write gating, dry runs, credential review, and human approval for consequential changes.