Command Palette

Search for a command to run...

UnylyUnyly
Browse all

Awesome Mcp Security

FreeNot checked

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

Puliczekby Puliczek
GitHubEmbed

About

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

README

🤝 Show your support - give a ⭐️ if you liked the content

Awesome MCP Security Awesome

Everything you need to know about Model Context Protocol (MCP) security.

Table of Contents

📔 Security Considerations

Official Security Considerations from the Official MCP Specification Rev: 2025-03-26

[!NOTE] 15.04.2025: The current MCP auth specification is in progress of being replaced by a more robust specification. Please join the conversation if you have concerns around the current auth specification.

  • Servers MUST:

    • Validate all tool inputs
    • Implement proper access controls
    • Rate limit tool invocations
    • Sanitize tool outputs

  • Clients SHOULD:

    • Prompt for user confirmation on sensitive operations
    • Show tool inputs to the user before calling the server, to avoid malicious or accidental data exfiltration
    • Validate tool results before passing to LLM
    • Implement timeouts for tool calls
    • Log tool usage for audit purposes

[!WARNING]
For trust & safety and security, clients MUST consider tool annotations to be untrusted unless they come from trusted servers.

[!WARNING]
For trust & safety and security, there SHOULD always be a human in the loop* with the ability to deny tool invocations.

Applications SHOULD:

  • Provide UI that makes clear which tools are being exposed to the AI model.
  • Insert clear visual indicators when tools are invoked.
  • Present confirmation prompts to the user for operations, to ensure a human is in the loop.

[!NOTE]
*Human-in-the-Loop (HITL) means that user help monitor and guide automated tasks, like deciding whether to accept tool requests in Cursor.

📃 Papers

📺 Videos

📕 Articles, X threads and Blog Posts

🧑‍🚀 Tools and code

💾 MCP Security Servers

💻 Other Useful Resources

😎 Contributing

👍🎉 First off, thanks for taking the time to contribute! 🎉👍

Please read and follow our contributing guide

Thanks! 🦄

🤝 Show your support

🤝 Show your support - give a ⭐️ if you liked the content

✔️ Disclaimer

This project can only be used for educational purposes. Using this resource against target systems without prior permission is illegal, and any damages from misuse of this software will not be the responsibility of the author.

from github.com/Puliczek/awesome-mcp-security

Installing Awesome Mcp Security

This server has no published package — it is built from source. Open the repository and follow its README.

▸ github.com/Puliczek/awesome-mcp-security

FAQ

Is Awesome Mcp Security MCP free?

Yes, Awesome Mcp Security MCP is free — one-click install via Unyly at no cost.

Does Awesome Mcp Security need an API key?

No, Awesome Mcp Security runs without API keys or environment variables.

Is Awesome Mcp Security hosted or self-hosted?

Self-hosted: the server runs locally on your machine via the install command above.

How do I install Awesome Mcp Security in Claude Desktop, Claude Code or Cursor?

Open Awesome Mcp Security on unyly.org, pick your client tab (Claude Desktop, Claude Code, Cursor) and press Install — the config is generated automatically, no JSON editing.

Related MCPs

GitHub

PRs, issues, code search, CI status

GitHubby GitHub

Filesystem

Secure file operations with configurable access controls.

by Community

Memory

Knowledge graph-based persistent memory system.

by Community

Template MCP Server

A CLI tool to create a new Model Context Protocol server project with TypeScript support, dual transport options, and an extensible structure

mcpdotdirectby mcpdotdirect

Compare Awesome Mcp Security with

Awesome Mcp SecurityvsGitHubAwesome Mcp SecurityvsFilesystemAwesome Mcp SecurityvsMemoryAwesome Mcp SecurityvsTemplate MCP Server

Not sure what to pick?

Find your stack in 60 seconds

Author?

Embed badge for your README

Browse similar

All development MCPs