logo
Login
MCP cover image
awesome-mcp-security logo
Private

awesome-mcp-security

See in Github
2025-04-14

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

93

Github Watches

7

Github Forks

93

Github Stars

🤝 Show your support - give a ⭐️ if you liked the content

Awesome MCP Security Awesome

Everything you need to know about Model Context Protocol (MCP) security.

Table of Contents

📔 Security Considerations

Official Security Considerations from the Official MCP Specification Rev: 2025-03-26

[!NOTE] 15.04.2025: The current MCP auth specification is in progress of being replaced by a more robust specification. Please join the conversation if you have concerns around the current auth specification.

  • Servers MUST:

    • Validate all tool inputs
    • Implement proper access controls
    • Rate limit tool invocations
    • Sanitize tool outputs

  • Clients SHOULD:

    • Prompt for user confirmation on sensitive operations
    • Show tool inputs to the user before calling the server, to avoid malicious or accidental data exfiltration
    • Validate tool results before passing to LLM
    • Implement timeouts for tool calls
    • Log tool usage for audit purposes

[!WARNING]
For trust & safety and security, clients MUST consider tool annotations to be untrusted unless they come from trusted servers.

[!WARNING]
For trust & safety and security, there SHOULD always be a human in the loop* with the ability to deny tool invocations.

Applications SHOULD:

  • Provide UI that makes clear which tools are being exposed to the AI model.
  • Insert clear visual indicators when tools are invoked.
  • Present confirmation prompts to the user for operations, to ensure a human is in the loop.

[!NOTE]
*Human-in-the-Loop (HITL) means that user help monitor and guide automated tasks, like deciding whether to accept tool requests in Cursor.

📃 Papers

📺 Videos

📕 Articles, X threads and Blog Posts

🧑‍🚀 Tools and code

💾 MCP Security Servers

💻 Other Useful Resources

😎 Contributing

👍🎉 First off, thanks for taking the time to contribute! 🎉👍

Please read and follow our contributing guide

Thanks! 🦄

🤝 Show your support

🤝 Show your support - give a ⭐️ if you liked the content

✔️ Disclaimer

This project can only be used for educational purposes. Using this resource against target systems without prior permission is illegal, and any damages from misuse of this software will not be the responsibility of the author.

相关推荐

awesome-LLM-resourses

awesome-LLM-resourses

  • WangRongsheng

    • 🧑‍🚀 全世界最好的LLM资料总结（Agent框架、辅助编程、数据处理、模型训练、模型推理、o1 模型、MCP、小语言模型、视觉语言模型） | Summary of the world's best LLM resources.

    3.5 (4)
    dify

    dify

  • langgenius

    • Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting you quickly go from prototype to production.

    5 (0)
    harbor

    harbor

  • av

    • Effortlessly run LLM backends, APIs, frontends, and services with one command.

    2 (1)
    nacos

    nacos

  • alibaba

    • an easy-to-use dynamic service discovery, configuration and service management platform for building AI cloud native applications.

    5 (0)
    1Panel

    1Panel

  • 1Panel-dev

    • 🔥 1Panel provides an intuitive web interface and MCP Server to manage websites, files, containers, databases, and LLMs on a Linux server.

    2 (1)
    markitdown

    markitdown

  • microsoft

    • Python tool for converting files and office documents to Markdown.

    5 (0)
    rulego

    rulego

  • rulego

    • ⛓️RuleGo is a lightweight, high-performance, embedded, next-generation component orchestration rule engine framework for Go.

    3.7 (10)
    mindsdb

    mindsdb

  • mindsdb

    • AI's query engine - Platform for building AI that can answer questions over large scale federated data. - The only MCP Server you'll ever need

    5 (0)
    cpp-mcp

    cpp-mcp

  • hkr04

    • Lightweight C++ MCP (Model Context Protocol) SDK

    3 (1)
    witsy

    witsy

  • nbonamy

    • Witsy: desktop AI assistant / universal MCP client

    3.1 (10)
    awesome-LLM-resources

    awesome-LLM-resources

  • WangRongsheng

    • 🧑‍🚀 全世界最好的LLM资料总结（视频生成、Agent、辅助编程、数据处理、模型训练、模型推理、o1 模型、MCP、小语言模型、视觉语言模型） | Summary of the world's best LLM resources.

    5 (0)
    FastGPT

    FastGPT

  • labring

    • FastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.

    5 (0)

    Reviews

    2.7 (7)
    Avatar
    user_I2qyGxfP
    2025-04-24

    As a loyal user of awesome-mcp-security, I can confidently say that this product is a game-changer in the field of security plugins. Puliczek has done an amazing job with its design and functionality. It offers robust protection and integrates seamlessly into my existing setup. Highly recommended for anyone seeking reliable security solutions!

    Avatar
    user_tb6FjThp
    2025-04-24

    I've been using awesome-mcp-security by Puliczek, and it has completely transformed my workflow. This tool is incredibly reliable and easy to integrate, providing top-notch security features that have given me peace of mind. Highly recommended for anyone looking to enhance their project’s security effortlessly!

    Avatar
    user_kokgygn6
    2025-04-24

    I've been using awesome-mcp-security by Puliczek for a while now and it's fantastic! The application is incredibly effective in enhancing security measures and provides a seamless user experience. I highly recommend it to anyone looking to bolster their security framework.

    Avatar
    user_ix5tlOtI
    2025-04-24

    Awesome-mcp-security by Puliczek is a top-notch security application for anyone keen on enhancing their system protection. Its user-friendly interface and efficient performance have significantly improved my security management. Highly recommend it to anyone looking for reliable and advanced security solutions.

    Avatar
    user_14Jy89Xr
    2025-04-24

    I recently started using awesome-mcp-security by Puliczek and it has made a significant difference in my project's security. The user interface is intuitive, and it provides robust protection against common vulnerabilities. Highly recommend it to anyone looking for reliable security solutions!

    Avatar
    user_EqrnoBrN
    2025-04-24

    Awesome-mcp-security by Puliczek is an exceptional tool that I highly recommend! Its user-friendly interface and robust security features have significantly enhanced my system's protection. The seamless integration and comprehensive documentation made setup a breeze. A must-have for anyone serious about cybersecurity!

    Avatar
    user_01xOucyM
    2025-04-24

    awesome-mcp-security by Puliczek is an outstanding application for securing Minecraft servers. It offers robust protection features tailored for both novice and experienced administrators. The setup is straightforward and the support documentation is comprehensive. Highly recommend for anyone serious about server security!