本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

Q 开发者的 MCP 管理

使用 IAM Identity Center 作为登录方法的专业级客户可以控制其组织内用户的 MCP 访问权限。默认情况下，您的用户可以在其 Q 客户端中使用任何 MCP 服务器。作为管理员，您可以完全禁止用户使用 MCP 服务器，也可以指定允许您的用户使用的 MCP 服务器的经过审查的列表。

这些限制分别通过 MCP on/off 开关和 MCP 注册表进行控制。MCP 切换和注册表属性是 Q Developer 配置文件的一部分，可以在组织级别或账户级别定义，账户级别的配置文件取代组织级别的配置文件。这使您可以为整个组织指定默认 MCP 策略，然后为特定帐户覆盖该默认策略；例如，为整个组织禁用 MCP，但为某些团队（帐户）启用允许名单。

为您的组织禁用 MCP

要为您的账户或组织禁用 MCP，请执行以下操作：

为您的组织指定 MCP 允许名单

要控制允许组织中的用户使用哪些 MCP 服务器，您可以在 JSON 文件中指定允许的 MCP 服务器列表，通过 HTTPS 提供此 JSON 文件，然后在所需的 Q 开发者配置文件中输入该 URL。然后，任何使用此配置文件的 Q Developer 客户端都将强制用户只能使用你在 JSON 文件中列入许可名单的 MCP 服务器。

指定 MCP 注册表 URL

请注意，根据我们的数据加密政策，MCP 注册表 URL 在传输过程中和静态时都经过加密。

MCP 注册表文件格式

注册表 JSON 文件的格式是 MCP 注册表标准 v0.1 中服务器架构 JSON 的子集。Q Developer 支持的子集的 JSON 架构定义可在本文档末尾的注册表架构部分中找到。

下面是一个简单的、人为的 MCP 注册表文件示例，其中包含远程 (HTTP) 和本地 (stdio) MCP 服务器定义。

{
  "servers": [
    {
      "server": {
        "name": "my-remote-server",
        "title": "My server",
        "description": "My server description",
        "version": "1.0.0",
        "remotes": [
          {
            "type": "streamable-http",
            "url": "https://acme.com/my-server",
            "headers": [
              {
                "name": "X-My-Header",
                "value": "SomeValue"
              }
            ]
          }
        ]
      }
    },
    {
      "server": {
        "name": "my-local-server",
        "title": "My server",
        "description": "My server description",
        "version": "1.0.0",
        "packages": [
          {
            "registryType": "npm",
            "registryBaseUrl": "https://npm.acme.com",
            "identifier": "@acme/my-server",
            "transport": {
              "type": "stdio"
            },
            "runtimeArguments": [
              {
                "type": "positional",
                "value": "-q"
              }
            ],
            "packageArguments": [
              {
                "type": "positional",
                "value": "start"
              }
            ],
            "environmentVariables": [
              {
                "name": "ENV_VAR",
                "value": "ENV_VAR_VALUE"
              }
            ]
          }
        ]
      }
    }
  ]
}

下表描述了注册表 JSON 文件的每个属性。除非另有说明，否则所有属性均为必填项。有关完整的 JSON 架构，请参阅注册表架构部分。

嵌套属性以与其父项的水平偏移量显示。例如，“标题” 是 “远程” 的子属性，“名称” 和 “值” 是 “标题” 的子属性。

提供 MCP 注册表文件

MCP 注册表 JSON 文件必须通过 HTTPS 提供。你可以随心所欲地提供这个，例如，使用 S3、Apache/nginx 等。在您的用户上运行的 Q Developer 客户端必须可以访问此 URL PCs。但是，它不必可以从 AWS 控制台进行访问，这意味着它可以专用于您的公司网络。

出于安全考虑，HTTPS 端点必须具有由可信证书颁发机构签署的有效 SSL 证书。特别是，您不能将自签名证书用于注册表端点。

Q 将在启动时定期获取 MCP 注册表（每 24 小时一次）。在定期同步期间，如果 Q 注意到注册表中不再存在本地安装的 MCP 服务器，它将终止该服务器并禁止用户将其添加回来。如果它注意到本地安装的服务器的版本与注册表中的服务器版本不同，它将使用注册表中定义的版本重新启动服务器。

Q 开发者插件

当用户启动 Q Developer 时，它将检查配置文件中是否定义了注册表 URL。如果是，它将检索该网址上的注册表 JSON，并强制用户只能使用注册表中定义的 MCP 服务器。当用户尝试添加 MCP 服务器时，他们将看到注册表中定义的服务器列表，他们可以从中进行选择。

用户无法修改注册表 MCP 服务器的任何参数（URL、包标识符、runtimeArguments 等）。但是，他们仍然可以执行以下操作：

MCP 注册表 JSON 架构

以下是 Q Developer 支持的 MCP 注册表 JSON 文件的 JSON 架构定义。您可以使用此架构来验证您创建的任何注册表文件。

{
  "$schema": "https://json-schema.org/draft-07/schema",
  "properties": {
    "servers": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "server": {
            "$ref": "#/definitions/ServerDetail"
          }
        },
        "required": [
          "server"
        ]
      }
    }
  },
  "definitions": {
    "ServerDetail": {
      "properties": {
        "name": {
          "description": "Server name. Must be unique within a given registry file.",
          "example": "weather-mcp",
          "maxLength": 200,
          "minLength": 3,
          "pattern": "^[a-zA-Z0-9._-]+$",
          "type": "string"
        },
        "title": {
          "description": "Optional human-readable title or display name for the MCP server. MCP subregistries or clients MAY choose to use this for display purposes.",
          "example": "Weather API",
          "maxLength": 100,
          "minLength": 1,
          "type": "string"
        },
        "description": {
          "description": "Clear human-readable explanation of server functionality. Should focus on capabilities, not implementation details.",
          "example": "MCP server providing weather data and forecasts via OpenWeatherMap API",
          "maxLength": 100,
          "minLength": 1,
          "type": "string"
        },
        "version": {
          "description": "Version string for this server. SHOULD follow semantic versioning (e.g., '1.0.2', '2.1.0-alpha'). Equivalent of Implementation.version in MCP specification. Non-semantic versions are allowed but may not sort predictably. Version ranges are rejected (e.g., '^1.2.3', '~1.2.3', '\u003e=1.2.3', '1.x', '1.*').",
          "example": "1.0.2",
          "maxLength": 255,
          "type": "string"
        },
        "packages": {
          "items": {
            "$ref": "#/definitions/Package"
          },
          "type": "array"
        },
        "remotes": {
          "items": {
            "anyOf": [
              {
                "$ref": "#/definitions/StreamableHttpTransport"
              },
              {
                "$ref": "#/definitions/SseTransport"
              }
            ]
          },
          "type": "array"
        }
      },
      "required": [
        "name",
        "description",
        "version"
      ],
      "type": "object"
    },
    "Package": {
      "properties": {
        "registryType": {
          "description": "Registry type indicating how to download packages (e.g., 'npm', 'pypi', 'oci')",
          "enum": [
            "npm",
            "pypi",
            "oci"
          ],
          "type": "string"
        },
        "registryBaseUrl": {
          "description": "Base URL of the package registry",
          "examples": [
            "https://registry.npmjs.org",
            "https://pypi.org",
            "https://docker.io"
          ],
          "format": "uri",
          "type": "string"
        },
        "identifier": {
          "description": "Package identifier - either a package name (for registries) or URL (for direct downloads)",
          "examples": [
            "@modelcontextprotocol/server-brave-search",
            "https://github.com/example/releases/download/v1.0.0/package.mcpb"
          ],
          "type": "string"
        },
        "transport": {
          "anyOf": [
            {
              "$ref": "#/definitions/StdioTransport"
            },
            {
              "$ref": "#/definitions/StreamableHttpTransport"
            },
            {
              "$ref": "#/definitions/SseTransport"
            }
          ],
          "description": "Transport protocol configuration for the package"
        },

        "runtimeArguments": {
          "description": "A list of arguments to be passed to the package's runtime command (such as docker or npx).",
          "items": {
            "$ref": "#/definitions/PositionalArgument"
          },
          "type": "array"
        },
        "packageArguments": {
          "description": "A list of arguments to be passed to the package's binary.",
          "items": {
            "$ref": "#/definitions/PositionalArgument"
          },
          "type": "array"
        },
        "environmentVariables": {
          "description": "A mapping of environment variables to be set when running the package.",
          "items": {
            "$ref": "#/definitions/KeyValueInput"
          },
          "type": "array"
        }
      },
      "required": [
        "registryType",
        "identifier",
        "transport"
      ],
      "type": "object"
    },
    "StdioTransport": {
      "properties": {
        "type": {
          "description": "Transport type",
          "enum": [
            "stdio"
          ],
          "example": "stdio",
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    },
    "StreamableHttpTransport": {
      "properties": {
        "type": {
          "description": "Transport type",
          "enum": [
            "streamable-http"
          ],
          "example": "streamable-http",
          "type": "string"
        },
        "url": {
          "description": "URL template for the streamable-http transport. Variables in {curly_braces} reference argument valueHints, argument names, or environment variable names. After variable substitution, this should produce a valid URI.",
          "example": "https://api.example.com/mcp",
          "type": "string"
        },
        "headers": {
          "description": "HTTP headers to include",
          "items": {
            "$ref": "#/definitions/KeyValueInput"
          },
          "type": "array"
        }
      },
      "required": [
        "type",
        "url"
      ],
      "type": "object"
    },
    "SseTransport": {
      "properties": {
        "type": {
          "description": "Transport type",
          "enum": [
            "sse"
          ],
          "example": "sse",
          "type": "string"
        },
        "url": {
          "description": "Server-Sent Events endpoint URL",
          "example": "https://mcp-fs.example.com/sse",
          "format": "uri",
          "type": "string"
        },
        "headers": {
          "description": "HTTP headers to include",
          "items": {
            "$ref": "#/definitions/KeyValueInput"
          },
          "type": "array"
        }
      },
      "required": [
        "type",
        "url"
      ],
      "type": "object"
    },
    "PositionalArgument": {
      "properties": {
        "value": {
          "description": "The value for the input.",
          "type": "string"
        }
      },
      "required": [
        "value"
      ],
      "type": "object"
    },
    "KeyValueInput": {
      "properties": {
        "name": {
          "description": "Name of the header or environment variable.",
          "example": "SOME_VARIABLE",
          "type": "string"
        },
        "value": {
          "description": "The value for the input.",
          "type": "string"
        }
      },
      "required": [
        "name"
      ],
      "type": "object"
    }
  },
  "required": [
    "servers"
  ],
  "type": "object"
}