MCP Server Controls Settings

{
  "enableAllProjectMcpServers": false,
  "enabledMcpjsonServers": ["memory", "github"],
  "disabledMcpjsonServers": ["filesystem"],
  "allowedMcpServers": [
    { "serverName": "github" },
    { "serverName": "memory" }
  ],
  "deniedMcpServers": [
    { "serverName": "filesystem" }
  ]
}

enableAllProjectMcpServers — auto-approve ALL servers listed in project .mcp.json files.
enabledMcpjsonServers — approve only specific servers from .mcp.json.
disabledMcpjsonServers — explicitly reject specific servers from .mcp.json.
allowedMcpServers (Managed Settings only) — allowlist of MCP servers users may configure. Undefined = no restrictions. Empty array = lock down all MCP servers.
deniedMcpServers (Managed Settings only) — denylist, takes precedence over allowedMcpServers.