MCP supply-chain checklist for platform teams

Control objectives

Inventory every server name in use. Gate installs on identity and health. Re-check continuously. Keep a human override path.

Minimum viable gate

• Default deny unknown names
• Allowlist Official vendor servers where required
• Fail closed on archived, deprecated, or impersonation flags (policy choice — document it)
• CI calls census_lookup / search before merge of agent configs

Where census fits

Registry-wide evidence feed + API. Not your secret store, not your sandbox.

Next step

API for automation · methodology for auditors · email [email protected] for volume quotes.