MCP Governance: Everyone's Launching It, Few Actually Understand It (5 minute read)

2026-03-26

At RSAC, at least six vendors announced MCP governance capabilities—but most aren't actually parsing or enforcing the protocol at a meaningful level. The result: “AI security” is being shipped as a checkbox feature while the underlying control layer (how agents interact with tools/data) remains largely unprotected, leaving real gaps like prompt injection and agent supply chain attacks.