mcp-security-standard

joemunene-by/mcp-security-standard
★ 0 stars Unknown language Security Updated today
A security standard and Top 10 risk list for Model Context Protocol (MCP) servers, with a conformance reference implementation.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-security-standar": {
      "command": "npx",
      "args": [
        "-y",
        "joemunene-by/mcp-security-standard"
      ]
    }
  }
}

README Excerpt

A security standard and Top 10 risk list for Model Context Protocol (MCP) servers, with a working reference implementation that verifies the surface-observable subset of the risks. MCP connects language models to external tools, resources, and prompts. That connection is a new and largely unguarded attack surface: a tool description is untrusted text the model reads as instructions, tool output is an indirect-injection channel, and a server's advertised capability set can quietly compose into da