MCP Catalog: Visibility and Risk Assessment
The MCP Catalog serves as a central repository for viewing publicly available MCP servers and their associated risk profiles.
- Accessing the Catalog: Navigate to App Catalog > Generative AI > MCP Servers in the left navigation panel.
- Expanded Inventory: The catalog now includes 13 publicly available MCP servers (official and community-developed) that support popular data sources.
- Granular Attributes: For each server, you can view detailed informational attributes and risk-scoring metrics to make informed security decisions.
- Policy Integration: Data from the MCP Catalog, including risk scores, can be used directly to create real-time access control policies.
In the app catalog, you now have a new section, the generative AI section, which has a list of MCP servers.
Netskope Console Left Navigation Bar: A new Generative AI section with a list of public MCP Servers
These are a list of publicly available MCP servers such as remote MCP servers or MCP server code that is hosted on code repositories in locations such as GitHub.
AppCatalog – MCP Servers: List of public MCP servers
Risk Assessment Capabilities
- Filtering: Filter servers by confidence level, type, and classification (Official vs. Community Edition).
- Capability Analysis: Identify if a server includes “non-read-only” tools.
- Note: Tools capable of Update or Delete operations pose a higher risk than read-only tools.
- Strategic Authorization: Use this data to authorize only those MCP servers that meet specific enterprise risk criteria.
You can filter on this list based on the confidence level, the type, and its classification such as whether it’s an official MCP server or whether it’s a community edition.
AppCatalog – MCP Servers – Confidence Level Filter: Filter for public MCP Servers using the MCP Confidence Level filter
AppCatalog – MCP Servers – Confidence Level Filter: Filtered list for MCP Confidence Level of High
Click CLEAR to create the filter criteria.
AppCatalog – MCP Servers – Clear Button: Click to clear filters
AppCatalog – MCP Servers – Type Filter: Filter for public MCP Servers using the MCP Type filter for the type of data source, e.g., Developer and Coding Tools.
AppCatalog – MCP Servers – Type Filter: Filtered list of public MCP Servers using the MCP Type filter for the type of data source, e.g., Developer and Coding Tools.
AppCatalog – MCP Servers – Classification Filter: Filter for public MCP Servers using the MCP Classification filter for whether the MCP server is an official remote server/code repository or a community managed code repository.
AppCatalog – MCP Servers – Classification Filter: Filtered list of public MCP Servers using the MCP Classification filter for the official MCP Servers.
Clicking an MCP server, you can see information about it such as its capabilities. You can see whether it has tools that are non-read only and properties such as the authentication types it supports, the deployment model, whether it supports encryption and what type.
AppCatalog – MCP Servers – MCP Server Detail Page: Click on an MCP Server to see the details such as its URL, repo link, non-read only tools, number of tools, types of tools and risk attributes.
Non-read only tools are either tools that can do update operations or they can do delete operations and there may be situations where you might only want to authorize MCP servers that do read only operations. or you may want to specifically block tools that do delete operations. So knowing this information allows you to make decisions about the kind of access controls you want to put in place for the use of this MCP server within your enterprise. You can use this information to make a decision on whether the risk profile of an MCP server public MCP server meets your criteria for whether you want to approve its use uh for connection as a remote MCP server and in other cases whether you want to approve the download of the code of an MCP server from specific GitHub repositories.
AppCatalog – MCP Servers – MCP Server Detail Page: Attributes, supported values and associated confidence level. A weighted average is taken to generate the composite score.
Customizing MCP Server Attributes for an updated Risk Assessment
Navigation and Configuration:
- Navigate to the App catalog and then select MCP Servers.
- Choose a specific MCP Server from the list.
- Click on the Configure attributes option.
AppCatalog – MCP Servers – MCP Server Detail Page: Configure Attributes Button (bottom right) to recompute confidence level based on specific MCP Server attribute settings.
Customization and Recalculation:
- When configuring attributes, look for the relevant field. The dropdown menu for customization will only become enabled if the current attribute value is set to Yes.
- Once enabled, you will have the option to select No to modify the attribute.
AppCatalog – MCP Servers – MCP Server Detail Page: Select from dropdown to change .
- After making the necessary customized changes, click the Calculate button.
- The system will then compute a new, updated score based on the applied customizations.
The recalculated score is a point-in-time computation based on the values chosen by the user to aid in decision making on whether to allow this remote MCP server or code repo to be used in the enterprise.
Score Management and Reset:
- Users have the ability to Reset the customized values, reverting all attributes back to their original configuration.
- Following a reset, the score can be recalculated again to reflect the original, default values.
Click play to watch a video.