Skip to content

OWASP MCP Top 10

Reference

Citation: OWASP. "OWASP MCP Top 10." Type: guidance. Link: owasp.org/www-project-mcp-top-10.

What it is

A ranked list of security risks specific to the Model Context Protocol. It is maintained by the OWASP community.

Role in the record

  • Grounds BP03: MCP03 Tool Poisoning as a schema/supply-chain compromise of agent interfaces.

Atom-level for/against detail and quotes are in the provenance data (assets/provenance.yml), keyed by practice atom.

Discussion