@@ -116,7 +116,7 @@ The relevant excerpt from the project's file is:
 
 This is an excerpt, not a replacement for the generated file. Maya keeps its AppHost, SDK, package, and other project-owned settings.
 
-Only [allowlisted top-level settings](cli-config-sources.md#materialize-an-allowlist-into-the-app-configuration) are copied, not the entire source JSON. Currently only `skillSources` is allowed, and it is copied in full when supplied. Other source values, including `docs`, AppHost paths, SDK/channel selection, packages, and arbitrary feature settings, are not imported.
+Only [allowlisted top-level settings](cli-config-sources.md#materialize-an-allowlist-into-the-app-configuration) are copied, not the entire source JSON. `skillSources` and `integrationSources` are allowed, and each is copied in full when supplied. Other source values, including `docs`, AppHost paths, SDK/channel selection, packages, and arbitrary feature settings, are not imported.
 
 Maya commits the resulting app file with the application. It contains neither Git credentials nor an absolute tracking path, so another machine can use the saved values immediately.
 
 
@@ -1,6 +1,6 @@
 # Aspire CLI config sources
 
-**Status:** Configuration acquisition, allowlisted app-file materialization, and named agent skill sources are implemented in the CLI. Other content-acquisition customizations remain proposed.
+**Status:** Configuration acquisition, allowlisted app-file materialization, named agent skill sources, and named integration sources are implemented in the CLI. Other content-acquisition customizations remain proposed.
 
 For example developer journeys, see [Microsoft first-party config-source scenarios](cli-config-sources-1p-scenarios.md).
 
@@ -133,6 +133,7 @@ Only explicitly allowlisted top-level settings may be copied. Each supplied sect
 | Setting | Purpose |
 |---|---|
 | `skillSources` | Named agent skill sources and all their settings |
+| `integrationSources` | Named NuGet integration feeds and allowed package patterns |
 
 Use the same root-only normalization for local settings and source files before matching the allowlist, and match top-level names case-insensitively like other CLI settings. Root-level flat colon-separated keys merge into existing nested sections regardless of casing. Normalize source files before configuration-provider validation; genuine duplicate nested leaves remain validation errors. Nested colon keys remain literal, including profile names, environment-variable names, and custom skill-source keys such as `{"skillSources":{"team":{"custom:key":"..."}}}`. These keys are copied unchanged when their top-level section is allowed. There is no source-specific normalization.
 
@@ -353,6 +354,32 @@ The allowlist copies the entire supplied `skillSources` section, including arbit
 |---|---|---|
 | Skills | `aspire agent init` registers all configured native sources by default; `--aspire-source embedded` installs bundled skill files | Additional validated bundles, selected/default skills, and workspace installation destinations |
 | Templates | .NET templates are installed from NuGet; CLI-native starters use embedded files or scaffolding | Template catalogs, package identities, versions, and feeds; external starter content could follow later |
-| Integrations | Templates declare dependencies; `aspire add` and integration list/search discover NuGet packages | Additional catalog entries, package versions, feeds, and package-source mappings |
+| Integrations | Templates declare dependencies; `aspire add` and integration list/search discover packages from all configured NuGet integration sources | Additional catalog metadata and package-version constraints |
+
+### Named integration sources
+
+Configure integration discovery independently of the AppHost's SDK channel:
+
+```json
+{
+  "integrationSources": {
+    "default": {},
+    "team": {
+      "source": "https://packages.example.com/v3/index.json",
+      "patterns": ["Contoso.Hosting.*", "Contoso.SpecialIntegration"]
+    }
+  }
+}
+```
+
+The implicit `default` entry retains existing channel and ambient NuGet discovery, including official and Community Toolkit packages. Set `default.enabled` to `false` to search only explicitly configured sources. An entry with a `source` can omit `patterns` to discover all packages from that feed, equivalent to `["*"]`; an explicitly supplied array must be non-empty. Override `default.source` to replace built-in discovery with a different feed, optionally specifying `default.patterns` to restrict its packages.
+
+Each enabled source is searched for matching package IDs, regardless of their namespace. Patterns use case-insensitive NuGet matching: an exact ID, a prefix ending in `*`, or `*` for every package. Other wildcard positions are invalid. Sources may be HTTP(S) NuGet service indexes or local package directories; relative directories resolve against the selected AppHost directory. Embedded credentials are rejected. Configure private-feed credentials using NuGet's existing credential mechanisms.
+
+Named entries referring to the same feed identity are combined before discovery. Their allowed patterns are unioned case-insensitively, disabled entries do not contribute patterns, and the first entry supplies the display name and source spelling. Integration discovery performs one search per feed using the patterns' common prefix (an empty query for unrelated prefixes), following pagination as needed, then filters results against the merged patterns. Local feeds are likewise enumerated once. The implicit built-in discovery entry remains separate.
+
+`aspire add`, `aspire integration list`, `aspire integration search`, and MCP integration discovery use the same configured sources. Stable and prerelease packages are included for custom sources, and the existing deprecated-package and optional polyglot-compatibility filters still apply. The selected source is used for version lookup. Adding a package persists an exact package-to-feed mapping in the AppHost's NuGet configuration, preserving ambient SDK and dependency feeds so subsequent restores can resolve the package. This does not change the AppHost's SDK channel. An explicit `aspire add --source` continues to override discovery.
+
+Sources and their fields merge case-insensitively across global and selected-app settings. As with `skillSources`, `configSource` can supply the entire `integrationSources` section. Materialization replaces a supplied section in full and preserves an omitted section. Refreshing configuration does not add packages or remove previously persisted NuGet mappings.
 
 Keep standard content available initially and preserve explicit user selections and suppression options. Future source-driven content settings must be explicitly added to the allowlist and materialized before they affect acquisition choices. An availability notice never changes those choices. An explicit configuration update does not automatically regenerate applications or reinstall skills. Git access does not grant access to private package feeds, and all acquired content must retain its existing validation and authentication requirements.
@@ -306,6 +306,40 @@
       },
       "additionalProperties": false
     },
+    "integrationSources": {
+      "description": "Named NuGet integration sources and allowed package patterns, merged across configuration layers.",
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "description": "Whether to search this source. Defaults to true. Disable default to omit built-in channel and NuGet discovery.",
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "true",
+                  "false"
+                ]
+              }
+            ]
+          },
+          "source": {
+            "description": "NuGet service index URL or local package directory. The default entry uses built-in discovery when omitted.",
+            "type": "string"
+          },
+          "patterns": {
+            "description": "Optional allowed package IDs: exact IDs, prefixes ending in *, or * for all packages. Defaults to * when omitted.",
+            "type": "array",
+            "items": {}
+          }
+        },
+        "additionalProperties": false
+      }
+    },
     "packages": {
       "description": "Package references for the AppHost. Value is either a string (NuGet, short form — empty = SDK version, otherwise explicit version) or an object with a required \"source\" discriminator (\"nuget\", \"project\", or \"npm\") and per-source fields (version for nuget, path for project/npm).",
       "type": "object",
 
@@ -208,6 +208,40 @@
       },
       "additionalProperties": false
     },
+    "integrationSources": {
+      "description": "Named NuGet integration sources and allowed package patterns, merged across configuration layers.",
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "description": "Whether to search this source. Defaults to true. Disable default to omit built-in channel and NuGet discovery.",
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "true",
+                  "false"
+                ]
+              }
+            ]
+          },
+          "source": {
+            "description": "NuGet service index URL or local package directory. The default entry uses built-in discovery when omitted.",
+            "type": "string"
+          },
+          "patterns": {
+            "description": "Optional allowed package IDs: exact IDs, prefixes ending in *, or * for all packages. Defaults to * when omitted.",
+            "type": "array",
+            "items": {}
+          }
+        },
+        "additionalProperties": false
+      }
+    },
     "language": {
       "description": "The language identifier for this AppHost (e.g., \"typescript\", \"python\"). Used to determine which runtime to use for execution.",
       "type": "string"
 
@@ -224,6 +224,40 @@
       },
       "additionalProperties": false
     },
+    "integrationSources": {
+      "description": "Named NuGet integration sources and allowed package patterns, merged across configuration layers.",
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "enabled": {
+            "description": "Whether to search this source. Defaults to true. Disable default to omit built-in channel and NuGet discovery.",
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "true",
+                  "false"
+                ]
+              }
+            ]
+          },
+          "source": {
+            "description": "NuGet service index URL or local package directory. The default entry uses built-in discovery when omitted.",
+            "type": "string"
+          },
+          "patterns": {
+            "description": "Optional allowed package IDs: exact IDs, prefixes ending in *, or * for all packages. Defaults to * when omitted.",
+            "type": "array",
+            "items": {}
+          }
+        },
+        "additionalProperties": false
+      }
+    },
     "language": {
       "description": "The language identifier for this AppHost (e.g., \"typescript\", \"python\"). Used to determine which runtime to use for execution.",
       "type": "string"
 
@@ -376,6 +376,25 @@ bool MatchesIntegrationName((string FriendlyName, NuGetPackage Package, PackageC
                 }
             }
 
+            if (source is null && selectedNuGetPackage.Channel.IntegrationSource?.Source is { } integrationSource)
+            {
+                // Persist an exact package mapping so later builds can still restore the integration.
+                // Unlike --source, this keeps ambient feeds available for the SDK and dependencies.
+                var configuration = _nugetService.BuildConfiguration(
+                    effectiveAppHostProjectFile.Directory!,
+                    "integration-add",
+                    [new PackageMapping(selectedNuGetPackage.Package.Id, integrationSource)],
+                    restrictToSelectedSources: false,
+                    cancellationToken: cancellationToken);
+                await new DotNetAppHostNuGetConfigMerger(_nugetService).CreateOrUpdateAsync(
+                    effectiveAppHostProjectFile.Directory!,
+                    configuration,
+                    createIfMissing: true,
+                    globalPackagesFolder: null,
+                    confirmationCallback: null,
+                    cancellationToken);
+            }
+
             context = new AddPackageContext
             {
                 AppHostFile = effectiveAppHostProjectFile,
@@ -479,6 +498,11 @@ bool MatchesIntegrationName((string FriendlyName, NuGetPackage Package, PackageC
         string packageId,
         string? source)
     {
+        if (channel.IntegrationSource is not null)
+        {
+            // Named integration sources select the package feed, not the AppHost's SDK channel.
+            return null;
+        }
         if (channel.Type is PackageChannelType.Explicit)
         {
             return channel.Name;
 
@@ -8,6 +8,7 @@
 using Aspire.Cli.Agents.AspireSkills;
 using Aspire.Cli.Documentation.ApiDocs;
 using Aspire.Cli.Documentation.Docs;
+using Aspire.Cli.Packaging;
 using Aspire.Cli.Resources;
 using Aspire.Cli.Utils;
 using Aspire.Hosting.Utils;
@@ -120,6 +121,10 @@ public string? SdkVersion
     [Description("Named agent skill sources, merged across configuration layers. The built-in default source remains enabled unless explicitly disabled.")]
     public Dictionary<string, SkillSource>? SkillSources { get; set; }
 
+    [JsonPropertyName(IntegrationSourceConfiguration.SectionName)]
+    [Description("Named NuGet integration sources and allowed package patterns, merged across configuration layers.")]
+    public Dictionary<string, IntegrationSourceConfiguration>? IntegrationSources { get; set; }
+
     /// <summary>
     /// Developer certificate configuration.
     /// </summary>
@@ -462,6 +467,7 @@ public static AspireConfigFile FromLegacy(AspireJsonConfiguration? settings, Dic
             config.Channel = settings.Channel;
             config.Features = settings.Features;
             config.SkillSources = settings.SkillSources;
+            config.IntegrationSources = settings.IntegrationSources;
 
             // Legacy settings.json stored packages as Dictionary<string,string> with an
             // ad-hoc ".csproj" suffix for project references. Translate to strong entries.
 
@@ -5,6 +5,7 @@
 using System.Text.Json;
 using System.Text.Json.Serialization;
 using Aspire.Cli.Agents.AspireSkills;
+using Aspire.Cli.Packaging;
 
 namespace Aspire.Cli.Configuration;
 
@@ -80,6 +81,10 @@ internal sealed class AspireJsonConfiguration
     [Description("Named agent skill sources, merged across configuration layers. The built-in default source remains enabled unless explicitly disabled.")]
     public Dictionary<string, SkillSource>? SkillSources { get; set; }
 
+    [JsonPropertyName(IntegrationSourceConfiguration.SectionName)]
+    [Description("Named NuGet integration sources and allowed package patterns, merged across configuration layers.")]
+    public Dictionary<string, IntegrationSourceConfiguration>? IntegrationSources { get; set; }
+
     /// <summary>
     /// Captures any additional properties not explicitly defined in this class.
     /// This ensures settings like "features" are preserved when saving.
 
@@ -11,6 +11,7 @@
 using Aspire.Cli.Commands;
 using Aspire.Cli.Git;
 using Aspire.Cli.Interaction;
+using Aspire.Cli.Packaging;
 using Aspire.Cli.Resources;
 using Aspire.Cli.Utils;
 using Aspire.Shared;
@@ -32,7 +33,7 @@ internal sealed class ConfigSourceService(
     ILogger<ConfigSourceService> logger) : IDisposable
 {
     internal const string MicrosoftRepository = "https://msft.ghe.com/coreai/aspire-1p-init";
-    private static readonly string[] s_allowedSettings = [SkillSource.SectionName];
+    private static readonly string[] s_allowedSettings = [SkillSource.SectionName, IntegrationSourceConfiguration.SectionName];
     private static readonly TimeSpan s_gitTimeout = TimeSpan.FromSeconds(30);
     private readonly Dictionary<ConfigSourceIdentity, ConfigSourceSnapshot> _snapshots = [];
     private string? _projectDirectory;
 
@@ -48,6 +48,7 @@ public async Task<IEnumerable<NuGetPackage>> GetTemplatePackagesAsync(
             configuration,
             "Aspire.ProjectTemplates",
             prerelease,
+            SearchTake,
             cancellationToken).ConfigureAwait(false);
 
         return packages.Where(package => package.Id.Equals("Aspire.ProjectTemplates", StringComparison.OrdinalIgnoreCase));
@@ -62,6 +63,7 @@ public async Task<IEnumerable<NuGetPackage>> GetIntegrationPackagesAsync(
             configuration,
             "Aspire.Hosting",
             prerelease,
+            SearchTake,
             cancellationToken).ConfigureAwait(false);
 
         return FilterPackages(packages, filter: null);
@@ -76,6 +78,7 @@ public async Task<IEnumerable<NuGetPackage>> GetCliPackagesAsync(
             configuration,
             "Aspire.Cli",
             prerelease,
+            SearchTake,
             cancellationToken).ConfigureAwait(false);
 
         return packages.Where(package => package.Id.Equals("Aspire.Cli", StringComparison.OrdinalIgnoreCase));
@@ -89,10 +92,13 @@ public async Task<IEnumerable<NuGetPackage>> GetPackagesAsync(
         bool useCache,
         CancellationToken cancellationToken)
     {
+        // Allowed integration patterns are applied after searching, so a broad merged query
+        // must not lose matching packages behind unrelated results on the first page.
         var packages = await SearchAsync(
             configuration,
             packageId,
             prerelease,
+            filter is null ? SearchTake : int.MaxValue,
             cancellationToken).ConfigureAwait(false);
 
         return FilterPackages(packages, filter);
@@ -109,6 +115,7 @@ public async Task<IEnumerable<NuGetPackage>> GetPackageVersionsAsync(
             configuration,
             exactPackageId,
             prerelease,
+            SearchTake,
             cancellationToken).ConfigureAwait(false);
 
         // The helper had no exact-match mode. The CLI ran an ordinary search for the package ID and expanded the
@@ -131,12 +138,14 @@ private async Task<List<NuGetPackage>> SearchAsync(
         NuGetPackageOperationConfiguration configuration,
         string query,
         bool prerelease,
+        int take,
         CancellationToken cancellationToken)
     {
         var results = await SearchClientAsync(
             configuration,
             query,
             prerelease,
+            take,
             cancellationToken).ConfigureAwait(false);
 
         return results.Select(package => new NuGetPackage
@@ -151,14 +160,15 @@ private async Task<IReadOnlyList<NuGetSearchResult>> SearchClientAsync(
         NuGetPackageOperationConfiguration configuration,
         string query,
         bool prerelease,
+        int take,
         CancellationToken cancellationToken)
     {
         try
         {
             return await nuGetClient.SearchAsync(
                 query,
                 prerelease,
-                SearchTake,
+                take,
                 explicitSources: [],
                 configuration.ExplicitConfigFile?.FullName,
                 configuration.EffectiveWorkingDirectory.FullName,