pentesting-mcp-servers-checklist
Verified Safeby appsecco
Overview
This project provides a practical, community-driven checklist for pentesting Model Context Protocol (MCP) servers, guiding security testers through potential vulnerabilities in AI agent execution layers.
Installation
No command providedSecurity Notes
The provided source code consists solely of documentation files (Markdown). This project is a security checklist designed to help identify vulnerabilities in Model Context Protocol (MCP) servers. The project itself does not contain executable code, and therefore does not pose runtime security risks such as 'eval' usage, obfuscation, network vulnerabilities, or hardcoded secrets. Its content explicitly warns about dangerous functions and insecure practices in MCP servers, making it a valuable security resource.
Similar Servers
awesome-mcp-security
This repository serves as a curated list of resources, including papers, videos, articles, tools, and servers, focusing on Model Context Protocol (MCP) security.
mcp-watch
A comprehensive security scanner for Model Context Protocol (MCP) servers, detecting various vulnerabilities in their implementations.
mcp-security-scanner
A Python-based penetration testing tool designed to scan and identify vulnerabilities in Model Context Protocol (MCP) servers.
modelcontextprotocol-security.io
Provides comprehensive security guidance, best practices, and resources for hardening Model Context Protocol (MCP) deployments and AI agents.