Security Best Practices — MCP 2026-07-28
Versioned protocol guidance for authorization, token handling, SSRF and local-server risks. Start here when implementing an MCP service.
AN INDEPENDENT MAP OF AI SECURITY
Find your next
good source.●
Original research, practical guides, and trusted starting points. A smaller, more useful way into AI security.
— sources— selected readings08 topics
A question, a topic, or the source you already know.
Curated links. Original publishers.
EXPLORE THE INDEX
A little direction goes a long way.
The directory could not refresh. Your previous results are still here.
Model Context Protocol documentation
The protocol maintainers’ documentation is the starting point for MCP authorization requirements and transport security behavior.
MCP Security Cheat Sheet
A practical review checklist for MCP trust boundaries, authentication, tool access and deployment controls. Pair it with the protocol specification.
OWASP GenAI Security Project
Community security guidance, risk taxonomies and implementation resources. Use the stated edition when comparing framework entries.
Jumping the line: How MCP servers can attack you before you ever use them
Trail of Bits demonstrates how malicious tool descriptions can influence an agent before invocation. A useful threat-modeling case study.
MCP Security Testing Guide
Tool-vendor recipes for testing MCP integrations, including tool poisoning and data-exfiltration scenarios. Adapt the examples to your deployment.
Promptfoo red teaming documentation
Practical testing recipes and open-source tooling documentation from the tool vendor, useful for constructing repeatable application evaluations.
Trail of Bits AI and machine learning research
Original vulnerability research and audit engineering from a commercial security firm, with technical examples and project links.
Inside 90 days of attacks on AI infrastructure
Wiz reports observations from its AI-service honeypots, including exposed MCP services. Treat the telemetry as this vendor’s sampled observations.
A path we haven't mapped yet.
Try a broader topic or clear a filter.
“Newest” uses the original publication date. Undated guides remain available in curated order.
Directory revised
A USEFUL TOOL IN YOUR AGENT'S TOOLBOX
Let your agent start
with better references.
The same selected sources, with original links and clear dates.