Policy: GCP > Model Armor > Floor Setting > Settings > Enforce > Google Managed MCP Servers

Whether the floor's filters must be applied to traffic flowing through Google-managed MCP (Model Context Protocol) servers — the agent-to-tool calling layer.

Maps to the GOOGLE_MANAGED_MCP_SERVERS entry in the live floor's integratedServices list. When Enabled, the Settings control alarms unless GOOGLE_MANAGED_MCP_SERVERS is present, and the Set Floor Setting action appends it on Enforce: Enabled per ... (preserving any other entries already in the list). When Disabled, the entry is not required and the action does not add it.

Targets

This policy targets the following resource types:

GCP > Model Armor > Floor Setting

Primary Policy

This policy is used with the following primary policy:

GCP > Model Armor > Floor Setting > Settings > Enforce

Controls

Setting this policy configures this control:

GCP > Model Armor > Floor Setting > Settings

Policy Specification

Schema Type	`string`
Default	`Disabled`
Valid Values [YAML]	`Enabled` `Disabled`
Examples [YAML]	Enabled

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceGoogleManagedMcpServers

GraphQL

query policyType(id: "tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceGoogleManagedMcpServers") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceGoogleManagedMcpServers'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceGoogleManagedMcpServers'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceGoogleManagedMcpServers"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-modelarmor#/policy/types/floorSettingSettingsEnforceGoogleManagedMcpServers"