# Drop into .github/workflows/mcp-whitelist.yml to block unpinned or NO-GO MCP servers on every Pull Request
name: MCP Allowlist Gate (mcpwhitelist.com)
on:
  pull_request:
    paths:
      - '**/*mcp*.json'
      - '.cursor/**'
      - '.vscode/**'
  workflow_dispatch:

jobs:
  mcp_whitelist_gate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Verify MCP Config Against mcpwhitelist.com (30,995+ Indexed Records)
        run: curl -fsSL https://mcpwhitelist.com/cli.mjs | node -