mcp-security

From README

MCP Server Security (OWASP LLM07:2025) What this checks Prevents MCP tool handlers from being exploited via malicious inputs, hardcoded secrets, unrestricted file access, or shell injection. A compromised MCP server gives attackers direct access to the host environment. Vulnerable patterns MCP tool handler that opens or reads a file path supplied directly by the caller with no allowlist or root confinement Tool handler that runs a shell command built from tool input with shell expansion enabled Hardcoded API key, token, or credential in the handler body or tool definition Tool schema declaring a string parameter with no length cap, pattern, or enum constraint Fix immediately Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties: Tool schemas constrain every string parameter — maximum length, regex pattern, enumerated values, or rejection of additional properties. A bare string type is a blank check.