Add support for ACR (Azure Container Registry) and MCR (Microsoft Container Registry)

docs/guides/publishing/publish-server.md

@@ -317,6 +317,8 @@ The official MCP registry supports:
 - Docker Hub (`docker.io`)
 - GitHub Container Registry (`ghcr.io`)
 - Google Artifact Registry (any `*.pkg.dev` domain)
+- Azure Container Registry (`*.azurecr.io`)
+- Microsoft Container Registry (`mcr.microsoft.com`)
 
 </details>
 

docs/reference/faq.md

@@ -62,6 +62,9 @@ This applies to both locally-run and remote servers.
 - NuGet.org (.NET packages)
 - GitHub Container Registry (GHCR)
 - Docker Hub
+- Google Artifact Registry (`*.pkg.dev` domains)
+- Azure Container Registry (`*.azurecr.io` domains)
+- Microsoft Container Registry (MCR)
 
 More can be added as the community desires; feel free to open an issue if you are interested in building support for another registry.
 

docs/reference/server-json/official-registry-requirements.md

@@ -42,6 +42,8 @@ Only trusted public registries are supported. Private registries and alternative
   - Docker Hub (`docker.io`)
   - GitHub Container Registry (`ghcr.io`)
   - Google Artifact Registry (`*.pkg.dev`)
+  - Azure Container Registry (`*.azurecr.io`)
+  - Microsoft Container Registry (`mcr.microsoft.com`)
 - **MCPB**: `https://github.com` releases and `https://gitlab.com` releases only
 
 ## `_meta` Namespace Restrictions

internal/validators/registries/oci.go

@@ -33,7 +33,10 @@ var allowedOCIRegistries = map[string]bool{
 	"index.docker.io":      true, // Docker Hub index
 	// GitHub Container Registry
 	"ghcr.io": true,
+	// Microsoft Container Registry
+	"mcr.microsoft.com": true,
 	// Google Artifact Registry (*.pkg.dev pattern handled in isAllowedRegistry)
+	// Azure Container Registry (*.azurecr.io pattern handled in isAllowedRegistry)
 }
 
 // ValidateOCI validates that an OCI image contains the correct MCP server name annotation.
@@ -47,6 +50,7 @@ var allowedOCIRegistries = map[string]bool{
 //   - Docker Hub (docker.io)
 //   - GitHub Container Registry (ghcr.io)
 //   - Google Artifact Registry (*.pkg.dev)
+//   - Microsoft Container Registry (mcr.microsoft.com)
 func ValidateOCI(ctx context.Context, pkg model.Package, serverName string) error {
 	if pkg.Identifier == "" {
 		return ErrMissingIdentifierForOCI
@@ -149,5 +153,10 @@ func isAllowedRegistry(registry string) bool {
 		return true
 	}
 
+	// Azure Container Registry: *.azurecr.io
+	if strings.HasSuffix(registry, ".azurecr.io") {
+		return true
+	}
+
 	return false
 }

internal/validators/registries/oci_test.go

@@ -51,6 +51,18 @@ func TestValidateOCI_RegistryAllowlist(t *testing.T) {
 			expectError: true,
 			errorMsg:    "missing required annotation",
 		},
+		{
+			name:        "MCR should be allowed",
+			identifier:  "mcr.microsoft.com/dotnet/aspire-dashboard:9.5.0",
+			expectError: true,
+			errorMsg:    "missing required annotation",
+		},
+		{
+			name:        "ACR should be allowed",
+			identifier:  "azurearcjumpstart.azurecr.io/hello-arc:latest",
+			expectError: true,
+			errorMsg:    "missing required annotation",
+		},
 
 		// Disallowed registries
 		{