Master Control Relay (MCR) in PLC Programming
The Master Control Relay (MCR) is a ladder logic instruction that creates a controlled zone in a PLC program. When the MCR rung is energised, the zone runs normally. When de-energised, every non-retentive output in the zone is forced off — a software-implemented zone disable. Used for operating-mode gating, recipe step gating, and emergency-stop zones.
MCR zone in ladder logic
How MCR works (Allen-Bradley ladder)
The MCR appears as two instructions: an MCR start (often unconditional with a contact gating it) and an MCR end. Everything between is the zone. When the start instruction is true, the zone runs normally. When false, every non-retentive output in the zone is forced to its de-energised state for the rest of the scan, regardless of what its rung logic computes.
Important: retentive outputs (latches set with OTL) and timers (TON, RTO) inside an MCR zone do NOT reset when the zone disables. Only non-retentive outputs (OTE) drop. This is intentional — the MCR is a soft zone disable, not an emergency stop.
Common uses
- Operating-mode gating. Wrap the "Auto" sequence in an MCR zone driven by Mode_Auto. Switching to Manual mode immediately drops every Auto output without rewriting individual rungs.
- Recipe step zones. Phase 3 of a batch sequence runs only when the phase is active. Wrap the Phase 3 logic in an MCR zone driven by Step3_Active.
- Maintenance zones. Lockout-tagout software lockout — an MCR zone driven by "not in maintenance" ensures every machine output is zero while a tech is inside the cell.
- Sub-system enables. A complete subsystem (filling, capping, labelling) can be enabled or disabled with one bit at the MCR start.
Critical: MCR is NOT an emergency stop
A common dangerous misuse: putting safety logic inside an MCR zone driven by an E-stop bit. This is wrong because:
- The MCR runs in standard PLC scan time — too slow for SIL-rated safety functions
- If the PLC stops scanning (CPU fault, watchdog trip), the MCR stops working — outputs may stay energised
- MCR is software — single-channel, no diagnostic coverage, no SIL rating
- It does NOT remove control power from output cards — the relay contacts inside output modules can still be welded
For real safety: use a hardware safety relay or safety PLC, with the MCR only as a secondary mode-disable in the standard logic. See Functional Safety.