Analysis · curated 29 Aug 2026
Going Deeper: The MCP Inventory Gap - by Rod Trent
First reported substack.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
Incomplete and inconsistent inventory of MCP servers means defenders cannot see or govern the full attack surface of AI agents and Copilot connectors, leaving MCP-based data access and tool abuse unmonitored.
Rod Trent's post examines the 'MCP inventory gap' in Microsoft environments, where different consoles report wildly different counts of MCP servers/connections — 122 Copilot connectors in the M365 admin center versus 5 MCP servers shown in the Security Dashboard for AI and Defender Applications. The piece argues each console answers a different governance question rather than being reconcilable views of one list, and offers guidance on how defenders should interpret and assess MCP visibility for Copilot governance.