The Model Context Protocol (MCP) is an open protocol that lets LLM applications connect to external data sources, tools, prompts, workflows, and services. This guide treats MCP as a security boundary: the chain from the user, through the model and MCP client, to the MCP server, the connected tool, and the target system.
It is a living collection of MCP security knowledge for developers, AppSec, red teams, and SOC teams. It covers threats, secure development, host and client controls, supply chain, enterprise gateways, detection, incident response, taxonomy, public incidents, case studies, and review checklists. Host and client controls are in Chapter 3.
This work is licensed under GPL-3.0.
Read the guide in this order. Chapter 3 holds the threat write-ups and 79 tests in sections 3.1–3.19.
- Project Overview
- MCP Fundamentals
- MCP Threats and Attack Patterns
- Secure MCP Development
- MCP Security Taxonomy
- Hacks, News, and Public Incidents
- Appendix A — Glossary
- Appendix B — Suggested Reading
- Appendix C — Security Review
Do not use it to test systems without explicit written authorization. Use synthetic lab environments and placeholders or try this MCP Goat