Not sure. Our big org, banned MCPs because they are unsafe, and they have no way to enforce only certain MCPs (in github copilot).
Isn’t it possible to proxy LLM communication and strip out unwanted MCP tool calls from conversations? I mean if you’re going to ban MCPs, you’re probably banning any CLI tooling too, right?
Shameless plug: im working on a product that aims to solve this: https://www.gatana.ai/
We only allow custom MCP servers.
But skills where you tell the LLM to shell out to some random command are safe? I'm not sure I understand the logic.