Skip to content

Conversation

@saurabhjain1592
Copy link
Member

Summary

MCP policy enforcement enhancements for v3.2.0 release.

Exfiltration Detection (#966)

  • Row count limits (default: 10,000 per query)
  • Data volume limits (default: 10MB per response)
  • HTTP 403 blocking with clear error details
  • Configuration via MCP_MAX_ROWS_PER_QUERY, MCP_MAX_BYTES_PER_QUERY

Dynamic Policy Evaluation (#968)

  • Optional Orchestrator integration for real-time policy evaluation
  • Rate limiting, budget controls, time-based access, role-based access
  • Graceful degradation when Orchestrator unavailable
  • Configuration via MCP_DYNAMIC_POLICIES_ENABLED

Documentation

  • Updated community/enterprise feature matrix
  • MCP connector architecture documentation
  • Updated ADR-022 with new policy features

Test Plan

  • go build ./platform/... passes
  • go test ./platform/shared/policy/... passes
  • HTTP examples in examples/mcp-policies/ work

@saurabhjain1592 saurabhjain1592 added the community-sync Sync from enterprise repository label Jan 14, 2026
@saurabhjain1592
Copy link
Member Author

Closing to re-sync after removing MCP_DYNAMIC_POLICIES_ENDPOINT from enterprise (PR #1003)

@saurabhjain1592 saurabhjain1592 deleted the sync/enterprise-20260114-185530-21006128806 branch January 27, 2026 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community-sync Sync from enterprise repository

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants