Microsoft Just Shipped MCP Governance for .NET. Here's What It Actually Enforces.

Microsoft released Microsoft.AgentGovernance.Extensions.ModelContextProtocol in public preview for .NET MCP apps.

The package adds a single governance hook to scan tools at startup, enforce runtime policies, sanitize responses, and record audit metrics.

It aims to close key security gaps in MCP agent apps, including unsafe tools, malicious outputs, prompt injection, and unauthorized calls.

The feature is delivered as a NuGet package for .NET 8 and uses YAML-based policies via WithGovernance.