Organization policy control of MCP servers deprecation

The custom constraint gcp.managed.allowedMCPServices and organization policy control of MCP use were deprecated on February 17, 2026 and shut down on March 17, 2026.

Use Identity and Access Management (IAM) deny policies to manage control over who can use Google and Google Cloud MCP servers. Users and agents must have the mcp.tools.call permission to use MCP tools in a Google Cloud project.

For more information, see Control MCP use with IAM.