Security Best Practices — MCP 2026-07-28
Versioned protocol guidance for authorization, token handling, SSRF and local-server risks. Start here when implementing an MCP service.
AN INDEPENDENT MAP OF AI SECURITY
Find your next
good source.●
Original research, practical guides, and trusted starting points. A smaller, more useful way into AI security.
— sources— selected readings08 topics
A question, a topic, or the source you already know.
Curated links. Original publishers.
EXPLORE THE INDEX
A little direction goes a long way.
The directory could not refresh. Your previous results are still here.
Model Context Protocol documentation
The protocol maintainers’ documentation is the starting point for MCP authorization requirements and transport security behavior.
MCP Security Cheat Sheet
A practical review checklist for MCP trust boundaries, authentication, tool access and deployment controls. Pair it with the protocol specification.
OWASP GenAI Security Project
Community security guidance, risk taxonomies and implementation resources. Use the stated edition when comparing framework entries.
OWASP Top 10 for LLM Applications 2026
The published 2026 edition and its canonical source links. Use the edition label when mapping risks or comparing earlier assessments.
MITRE ATLAS
An adversarial AI knowledge base of tactics, techniques and case studies for threat modeling and investigation.
AI Risk Management Framework: Generative Artificial Intelligence Profile
NIST AI 600-1 organizes generative AI risks and suggested actions, including data privacy and information security, for governance planning.
UK NCSC secure AI guidance
Government guidance for secure AI development across design, deployment and operation, with practical lifecycle considerations.
NIST AI Risk Management Framework
Official risk-management publications and version updates. Useful for governance planning, rather than as a product certification.
MITRE ATLAS tactics, techniques, and case studies data
The maintainers’ structured ATLAS data supports threat-model lookups and agent workflows. Preserve technique identifiers and linked case-study provenance.
1Password's AI patching benchmark is misleading
A Trail of Bits post presenting a critical examination of 1Password's AI patching benchmark and arguing that it is misleading.
Auditing in the age of (good enough) AI
Trail of Bits describes using AI agents to build auditing tools and formal models for a Miden VM security review. Useful for exploring AI-assisted audit workflows.
OWASP GenAI Security Project Unveils 2026 Top 10 for LLM Applications, New Agent Control Standard and Sponsors as Community Tops 30,000 Members
OWASP GenAI Security Project announces its 2026 Top 10 for LLM Applications, a new Agent Control Standard, and additional resources for securing generative and agentic AI.
A path we haven't mapped yet.
Try a broader topic or clear a filter.
“Newest” uses the original publication date. Undated guides remain available in curated order.
Directory revised
A USEFUL TOOL IN YOUR AGENT'S TOOLBOX
Let your agent start
with better references.
The same selected sources, with original links and clear dates.