Microsoft Agent 365 Control Plane: Least-Privilege Enforcement and MCP Server Scoping for Enterprise Agents

Microsoft Security Blog·medium signal

Microsoft Agent 365, GA on May 1 at $15/user/month, provides the first enterprise-grade agent governance layer with IT-controlled agent onboarding, policy templates, and explicit MCP server allow-listing so agents cannot connect to unapproved tool endpoints. Defender, Entra, and Purview integration adds identity-aware access control, data oversharing prevention, and full audit trails of agent actions. Security teams can use the MCP server inventory flow to discover what servers are connected across the org before the first breach.