MCP Security guides

Try out MCPcat

Implementing CORS Policies for Web-Based MCP Servers

Configure Cross-Origin Resource Sharing (CORS) policies for web-based MCP servers to enable secure browser access.

Implementing Content Security Policies for MCP Resources

Protect MCP server resources with Content Security Policy (CSP) headers to prevent XSS and injection attacks.

Detecting Tool Poisoning Attacks with mcp-watch

Use mcp-watch to detect and prevent tool poisoning attacks in MCP servers with real-time monitoring and alerts.

Building a health check endpoint for your MCP server

Implement health check endpoints for MCP servers to enable monitoring, load balancing, and automated recovery.

Security tests for MCP server endpoints

Test MCP server security by validating authentication, authorization, and vulnerability scanning.