Open security artifact · MIT + CC BY 4.0

MCP security control matrix

Thirteen controls turn dated MCP requirements and OWASP guidance into tests, review steps, and evidence a release owner can inspect.

This is a review aid, not a certificate. The matrix targets MCP revision 2026-07-28 and cannot replace a threat model or a test against your deployment.

Files

mcp-security-controls.json Thirteen controls with sources and release evidence mcp-security-controls.schema.json Portable JSON Schema for the matrix validate-controls.ts Strict dependency-free TypeScript validator validate-controls_test.ts Eleven deterministic Deno tests deployment-checklist.md English pre-release checklist deployment-checklist.ru.md Russian pre-release checklist README.md Run commands, source boundary, and limits

Dated sources

MCP normative levels stay tied to one protocol revision. OWASP rows are marked as guidance instead of borrowed protocol requirements.

Tests, not slogans

Each control includes two concrete procedures and the result a reviewer should expect before release.

Safe evidence names

Evidence fields hold content-free IDs, so a matrix never needs raw tokens, personal data, or private host names.

Verified scope

Deno type checking and eleven validator tests pass without network access or third-party packages. The tests cover duplicate controls, dated MCP sources, OWASP attribution, HTTPS and host restrictions, section links, verification procedures, unknown fields, and content-free evidence IDs.

MIT license CC BY 4.0 license MCP security guide