Hub/AI Security/Admin allowlists
Which AI tools have admin allowlists?
Org admins can restrict which MCP servers, plugins or connectors are allowed
7 Yes2 Partial
Verified Yes: Claude Code, Claude apps (claude.ai / Desktop), ChatGPT (apps & connectors), Codex, Cursor, Windsurf / Devin Desktop, Kiro.
| Tool | Status | Notes | Source |
|---|---|---|---|
| ChatGPT (apps & connectors)OpenAI | Yes | Workspace admins control which apps and plugins members can install | Source |
| Claude apps (claude.ai / Desktop)Anthropic | Yes | On Team/Enterprise only Owners can add custom connectors | Source |
| Claude CodeAnthropic | Yes | Managed settings: MCP allowlists and denylists | Source |
| CodexOpenAI | Yes | Managed config can pin an MCP allowlist (name + identity must match) | Source |
| CursorAnysphere | Yes | Enterprise MCP allowlist (command / URL entries) | Source |
| KiroAWS | Yes | Disable MCP or allow-list vetted servers via an MCP registry | Source |
| Windsurf / Devin DesktopCognition | Yes | Admin MCP allowlist and private registries | Source |
| Gemini CLIGoogle | Partial | System settings file overrides user settings | Source |
| GitHub Copilot (VS Code)GitHub / Microsoft | Partial | Org MCP registry restriction (public preview, Business / Enterprise) | Source |
| ClineCline | Unknown | Not found in official docs checked 2026-11-04 | — |
| JetBrains AIJetBrains | Unknown | Not found in official docs checked 2026-11-04 | — |
| ZedZed Industries | Unknown | Not found in official docs checked 2026-11-04 | — |
Other AI Security features
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.