{"id":"AGT-006","section":"Agent & MCP Governance","requirement":"Discover the MCP servers and connectors employees attach to their AI clients","acceptance":"Inventory local and remote MCP servers reached from desktop, IDE and CLI AI tools with owner, scope and exposure.","tier":"AT3, AT4, AT6","whyItMatters":"MCP-capable clients now ship inside IDEs, terminals and desktop apps, and each connector is a new path to corporate data.","verificationMethod":"LT","verificationTest":"Local and remote MCP servers used by pilot users appear with client, owner, scope and exposure.","formerly":"DIS-007","alsoIn":["spm"],"sort":41,"adoptionContext":"Citizen-built, code-executing and MCP-extended workflows can attach external servers, so connector discovery must reach those integration paths.","mappings":[{"frameworks":["csf","rmf"],"explanation":"The MCP and connector inventory identifies third-party components and services, with owner, scope and exposure to inform supplier prioritization and component-risk mapping. Discovery alone does not assess their risks.","kind":"framework","references":{"csf":["GV.SC-04","ID.AM-04"],"rmf":["MAP 4.1"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"ISO/IEC 42001: The local and remote MCP/connector inventory documents resources relevant to AI activities, including their owner, scope and exposure, supporting A.4.2. External MCP servers and connectors also identify supplier relationships to govern under A.10.3; locally owned servers are not automatically suppliers. Inventory does not establish supplier due diligence or trustworthiness.","kind":"framework","references":{"iso":["A.4.2","A.10.3"]},"relation":null,"conditions":[]},{"frameworks":["owasp"],"explanation":"The inventory exposes external MCP servers and runtime-connected components relevant to agentic supply-chain compromise. It provides a review surface, not evidence that components are trustworthy.","kind":"framework","references":{"owasp":["ASI04"]},"relation":null,"conditions":[]},{"frameworks":["soc2","iso27001"],"explanation":"Owned connector records supply usable inventory/control information and inputs to supplier-risk review. Keeping the register current does not itself approve a connector or reduce its permissions.\nISO/IEC 27001: Maintain usable, owned inventory records. Internally owned servers are not automatically suppliers, and discovery does not assess supplier security.","kind":"framework","references":{"soc2":["CC2.1","CC9.2"],"iso27001":["A.5.9","A.5.19"]},"relation":null,"conditions":[]}],"area":"Agent & MCP Governance","areaSlug":"AGT","url":"/r/AGT-006","frameworkRefs":{"ISO27001":["A.5.9","A.5.19"],"ISO42001":["A.4.2","A.10.3"],"NIST-CSF":["GV.SC-04","ID.AM-04"],"NIST-AI-RMF":["MAP 4.1"],"SOC2":["CC2.1","CC9.2"],"OWASP-ASI":["ASI04"]}}