What goes into a solid MCP registry?

Bill Doerrfeld | March 31, 2026

My latest for InfoWorld explores what an MCP registry is and what makes an enterprise-grade MCP registry production-ready for AI agents.

How do you govern hundreds of MCP servers in an enterprise? MCP registries are emerging as a way to unify and manage a catalog of approved tools, helping with discovery, governance, and safe usage in agentic systems.


But there is a right way to do it at scale. As Christian Posta says, if you're treating an MCP registry as "just another static catalog," you're doing it wrong.


A quality MCP registry requires rich, semantic tool metadata, developer-friendly controls, clear privilege boundaries, and thoughtful decisions around public versus private registries.


In short, MCP registries are becoming a core control plane for governing how AI agents discover and use tools across enterprise systems.


I got a ton of interest from sources on this one, which says a lot about the development energy around MCP and agentic infrastructure right now.

Read: How to build an enterprise-grade MCP registry

Other Blog Posts

Taking a least privilege mindset to MCP

By Bill Doerrfeld • September 15, 2026
Does your agent really need access to every tool call under the sun?

The Road to KubeCon

By Bill Doerrfeld • September 8, 2026
I'll be writing a weekly series for The New Stack this fall covering Kubernetes, cloud native, and everything happening on the road to KubeCon in November.

Just announced: MCP Security Conference

By Bill Doerrfeld • September 1, 2026
I'm teaming up with Dan Barahona and AI Security University to put together the MCP Security Conference, a free half-day virtual event dedicated to MCP security .

Inside Shopify's "high-intensity" engineering culture

By Bill Doerrfeld • August 27, 2026
My latest DirectorPlus edition interviews Shopify's head of engineering, Farhan Thawar, on their unique internal engineering culture.

The rise of neoclouds in AI compute

By Bill Doerrfeld • August 24, 2026
Neoclouds promise cheaper GPUs and AI-optimized infrastructure, but can they really challenge hyperscalers? My feature on InfoWorld explores their advantages, risks, and likely role in AI compute.

Can AI finally stop software knowledge decay?

By Bill Doerrfeld • July 29, 2026
My latest for LeadDev interviews IBM's Neel Sundaresan on how to prevent a decades-old issue in software engineering.

Can zero standing privilege secure agentic AI?

By Bill Doerrfeld • July 13, 2026
The latest advancement in identity and access management (IAM) is something called zero standing privilege. It's a response to new agentic AI risks.

Are shared libraries on their way out?

By Bill Doerrfeld • July 7, 2026
Big surprise: it's way easier to generate new code with AI than to reuse old code. But what are the long-term effects?

AI coding agents are now the default

By Bill Doerrfeld • June 25, 2026
Agentic coding tools have become the default. "When we've taken that away accidentally from people, they scream."

Your AI model might disappear tomorrow: what now?

By Bill Doerrfeld • June 17, 2026
My latest for LeadDev considers how engineering leaders should respond in the wake of uncertainty in the AI model market.