# Restrict MCP server access to a custom registry
You can configure an MCP registry URL and access control policy to determine which MCP servers developers can discover and use in supported IDEs and CLI do Copilot.
> \[!IMPORTANT] This feature is in prévia pública and is not the recommended method for restricting access to MCP servers. The more secure, generally available method is to define settings in your enterprise's `managed-settings.json` file. See [Configuring an MCP server allowlist for your enterprise](/pt/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-enterprise-allowlist).
## Prerequisites
Before you can fully configure MCP server access for your company, you need to create an MCP registry. See [Configurar um registro MCP para sua organização ou empresa](/pt/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-mcp-registry).
## Configuring the MCP allowlist policy for an enterprise
To ensure uniform access, you can set and maintain your MCP registry URL and allowlist policy at the enterprise level. Otherwise, if your teams have different needs, you should configure separate policies for each organization.
1. Navegue até sua empresa. Por exemplo, na página [Enterprises](https://github.com/settings/enterprises?ref_product=ghec\&ref_type=engagement\&ref_style=text) em GitHub.com.
2. Na parte superior da página, clique em ** controles de IA**.
3. Na barra lateral, clique em **MCP**.
4. Ensure **MCP servers in Copilot** is set to **Enabled everywhere**.
5. In the **MCP Registry URL** section, enter the URL of your registry, then click **Save**.
> \[!NOTE]
> Se você configurar o registro do MCP usando o Azure API Center, insira a URL base do Azure API Center, incluindo o caminho do workspace, no formato:
>
> ```text
> https://SERVICE-NAME.data.REGION.azure-apicenter.ms/workspaces/WORKSPACE-NAME
> ```
>
> Por exemplo:
>
> ```text
> https://contoso-apic.data.eastus.azure-apicenter.ms/workspaces/default
> ```
>
> Incluir sufixos de rota adicionais, como `/v0.1/servers`, fará com que o registro apresente erro, pois GitHub Copilot acrescenta automaticamente o caminho do MCP v0.1.
6. In the **Restrict MCP access to registry servers** section, select the dropdown menu, then click one of the following options:
* **Allow all**: No restrictions. All MCP servers can be used.
* **Registry only**: Only servers from the registry may run.
Your chosen policy will immediately apply to developers in your enterprise.
## Configuring the MCP allowlist policy for an organization
1. No canto superior direito de GitHub, clique na foto de perfil e clique em ** Your organizations**.
2. Selecione uma organização clicando nela.
3. No nome da organização, clique em ** Settings**. Caso não consiga ver a guia "Configurações", selecione o menu suspenso **** , clique em **Configurações**.
4. Na barra lateral, em "Código, planejamento e automação", click ** Copilot**, then click **Policies**.
5. In the "Features" section, ensure **MCP servers in Copilot** is set to **Enabled**.
6. In the **MCP Registry URL (optional)** field, enter the URL of your registry, then click **Save**.
> \[!NOTE]
> Se você configurar o registro do MCP usando o Azure API Center, insira a URL base do Azure API Center, incluindo o caminho do workspace, no formato:
>
> ```text
> https://SERVICE-NAME.data.REGION.azure-apicenter.ms/workspaces/WORKSPACE-NAME
> ```
>
> Por exemplo:
>
> ```text
> https://contoso-apic.data.eastus.azure-apicenter.ms/workspaces/default
> ```
>
> Incluir sufixos de rota adicionais, como `/v0.1/servers`, fará com que o registro apresente erro, pois GitHub Copilot acrescenta automaticamente o caminho do MCP v0.1.
7. In the **Restrict MCP access to registry servers** section, select the dropdown menu, then click one of the following options:
* **Allow all**: No restrictions. All MCP servers can be used.
* **Registry only**: Only servers from the registry may run.
Your chosen policy will immediately apply to developers in your organization.
## Next steps
For detailed information on MCP allowlist enforcement and limitations, see [MCP private registry enforcement](/pt/copilot/reference/mcp-allowlist-enforcement).
## Further reading
* [Superfícies com suporte para políticas de GitHub Copilot](/pt/copilot/reference/supported-surfaces-for-policies)