MCP Server Assessment
Review identity, authorisation, transport, configuration and exposure.
SECURITY SERVICE
MCP SECURITY
MCP 安全
Assess security risks introduced by the Model Context Protocol (MCP), tool connections, permission configuration and enterprise integration.
Subsequent references use MCP, with scope defined across servers, clients, tools, resources and enterprise permissions.
ASSESSMENT SCOPE
Tools and Resources
Map tool capabilities, resource access and sensitive operations.
Trust Boundaries
Analyse trust across clients, servers, AI agents, tools and enterprise systems.
Supply Chain and Configuration
Assess third-party components, skill supply chains, misconfiguration and change risk.