Policy demoAllowlist skills and MCP servers
Most teams want to control which skills and MCP servers their agents use. With Qpoint, you keep a list of the approved ones, and anything that isn’t on the list is blocked. When you add a new one, it works right away, without restarting the agent or changing how anyone works.
Gaurav Mahajan
October 26, 2026
About this demo
Most teams know which skills and MCP servers they want their agents to use. In this demo, we define allowlists for both in a Qpoint policy file and enforce them with two static rules.
Claude Code loads an allowed skill normally. When it tries a skill that isn’t on the list, the call is rejected. We add the skill to the list and it works immediately, with no restart of the agent and no change to the environment. We then do the same with an MCP server: Playwright is blocked until it’s added to the list.
The same approach works for HTTP requests, files, and commands.
See Qpoint in action in your environment
Request access and we'll get you set up.