AI Agents Inventory and Attributes

The MCP Servers Inventory governs, as first-class assets, the standardized servers an agent connects to over the Model Context Protocol. An agent’s connections to MCP servers are realized as integrations and counted in its Number of MCP Servers Connected attribute; the MCP Servers Inventory is a new Noun Type that governs those servers themselves — their identity, ownership, and the tools they expose.

The Regulatory Obligations and Regulatory Agencies inventories are reached through the Regulations relationship: obligations are the specific duties a regulation imposes on an agent, and agencies are the bodies that enforce them. Together they let an agent’s Regulatory Oversight Status and per-obligation compliance be governed precisely.

The Security Assets and Controls Inventory governs the guardrails, credentials, and controls that bound an agent — referenced by the agent’s security and behavioral-control attributes — and the Data Sensitivity Types Inventory classifies the sensitivity of the data an agent handles, resolving its Data Classification Handled attribute. Each of these five inventories is not yet published; until each is, refer to the IF4IT Enterprise Inventory Management Best Practices document for its current definition.