{ "title": "Enterprise MCP Reference Architectures", "schemaVersion": "1.0", "researchFreeze": "2026-08-26", "protocolRevision": "MCP 2026-07-28", "sourcePackage": "research/10", "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.", "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.", "checkedAt": "2026-08-26", "count": 8, "records": [ { "Architecture": "Approved local extension fleet", "Components": "Signed MCPB/packages, endpoint allowlist, sandbox, local logs", "Use case": "IDEs, files, desktop apps and localhost systems", "Control points": "Publisher verification, permissions, endpoint policy, update channel", "Sources": "S020 S021 S023 S027", "id": "R10-ENT001", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 1, "sourceIds": [ "S020", "S021", "S023", "S027" ], "raw": { "Architecture": "Approved local extension fleet", "Components": "Signed MCPB/packages, endpoint allowlist, sandbox, local logs", "Use case": "IDEs, files, desktop apps and localhost systems", "Control points": "Publisher verification, permissions, endpoint policy, update channel", "Sources": "S020 S021 S023 S027" } } }, { "Architecture": "Private remote single-tenant server", "Components": "Private endpoint, SSO/OAuth, gateway, tenant-specific compute/storage", "Use case": "Internal APIs and shared enterprise data", "Control points": "Network policy, workload identity, audit, DLP", "Sources": "S042 S047", "id": "R10-ENT002", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 2, "sourceIds": [ "S042", "S047" ], "raw": { "Architecture": "Private remote single-tenant server", "Components": "Private endpoint, SSO/OAuth, gateway, tenant-specific compute/storage", "Use case": "Internal APIs and shared enterprise data", "Control points": "Network policy, workload identity, audit, DLP", "Sources": "S042 S047" } } }, { "Architecture": "Multi-tenant vendor server", "Components": "Public HTTPS, OAuth, tenant partitioning, rate limits, central deploy", "Use case": "Official SaaS integration", "Control points": "Token audience, object authorization, isolation, SLO", "Sources": "S034 S036 S068", "id": "R10-ENT003", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 3, "sourceIds": [ "S034", "S036", "S068" ], "raw": { "Architecture": "Multi-tenant vendor server", "Components": "Public HTTPS, OAuth, tenant partitioning, rate limits, central deploy", "Use case": "Official SaaS integration", "Control points": "Token audience, object authorization, isolation, SLO", "Sources": "S034 S036 S068" } } }, { "Architecture": "Enterprise MCP gateway", "Components": "Catalog, reverse proxy, identity broker, tool allowlist, logs", "Use case": "Central control across many remote servers", "Control points": "Policy, token exchange, DLP, audit and revocation", "Sources": "S037 S043", "id": "R10-ENT004", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 4, "sourceIds": [ "S037", "S043" ], "raw": { "Architecture": "Enterprise MCP gateway", "Components": "Catalog, reverse proxy, identity broker, tool allowlist, logs", "Use case": "Central control across many remote servers", "Control points": "Policy, token exchange, DLP, audit and revocation", "Sources": "S037 S043" } } }, { "Architecture": "Local proxy to remote server", "Components": "stdio launcher/proxy, remote HTTPS/OAuth server", "Use case": "Legacy client or host without native remote auth", "Control points": "Proxy trust, command parsing, local token store, remote authorization", "Sources": "S067 S075", "id": "R10-ENT005", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 5, "sourceIds": [ "S067", "S075" ], "raw": { "Architecture": "Local proxy to remote server", "Components": "stdio launcher/proxy, remote HTTPS/OAuth server", "Use case": "Legacy client or host without native remote auth", "Control points": "Proxy trust, command parsing, local token store, remote authorization", "Sources": "S067 S075" } } }, { "Architecture": "Remote gateway to local bridge", "Components": "Cloud host/gateway, authenticated local agent, local capability", "Use case": "Cloud assistant needs private or device-local access", "Control points": "Device identity, user presence, narrow capability, no general network bridge", "Sources": "S026 S023", "id": "R10-ENT006", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 6, "sourceIds": [ "S026", "S023" ], "raw": { "Architecture": "Remote gateway to local bridge", "Components": "Cloud host/gateway, authenticated local agent, local capability", "Use case": "Cloud assistant needs private or device-local access", "Control points": "Device identity, user presence, narrow capability, no general network bridge", "Sources": "S026 S023" } } }, { "Architecture": "Serverless remote MCP", "Components": "Function/Worker endpoint, OAuth, external state store", "Use case": "Bursty stateless tools and cloud APIs", "Control points": "Execution limits, cold starts, token validation, durable state", "Sources": "S035 S045", "id": "R10-ENT007", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 7, "sourceIds": [ "S035", "S045" ], "raw": { "Architecture": "Serverless remote MCP", "Components": "Function/Worker endpoint, OAuth, external state store", "Use case": "Bursty stateless tools and cloud APIs", "Control points": "Execution limits, cold starts, token validation, durable state", "Sources": "S035 S045" } } }, { "Architecture": "Hybrid developer workstation", "Components": "Local IDE/filesystem servers plus remote SaaS servers", "Use case": "Software engineering assistant", "Control points": "Separate trust labels, provenance, confirmations and credentials", "Sources": "S024 S027", "id": "R10-ENT008", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485", "S467", "S468", "S471", "S472", "S473", "S474", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/enterprise_reference_architectures.json", "row": 8, "sourceIds": [ "S024", "S027" ], "raw": { "Architecture": "Hybrid developer workstation", "Components": "Local IDE/filesystem servers plus remote SaaS servers", "Use case": "Software engineering assistant", "Control points": "Separate trust labels, provenance, confirmations and credentials", "Sources": "S024 S027" } } } ] }