OWASP · beta, revision due Oct 2026 · risk list
MCP Top 10
Ten risk categories for MCP deployments, MCP01:2025 through MCP10:2025, from token mismanagement to shadow MCP servers.
Source: github.com/OWASP↗
Other MCP guidance
- Careful Adoption of Agentic AI Services CISA, NSA, ACSC, CCCS, NCSC-UK, NCSC-NZ · advisory guidance
- Managing the cyber risk of agentic AI NCSC-UK · advisory guidance
- MCP specification, 2026-07-28 release Model Context Protocol maintainers · protocol release
- Secure MCP Server Development OWASP GenAI Security Project · guide
- Third-Party MCP Servers CheatSheet OWASP GenAI Security Project · cheat sheet
- MCP-Security-Checklist SlowMist · checklist