mcp-security-standard/mcp-server-security-standard
MCP Server Security Standard (MSSS): an open, testable security control standard for certifying MCP servers, with levels, evidence requirements, and reporting schemas.
Defines 24 controls across 8 domains (filesystem, execution, network, authorization, input validation, logging, secrets, supply chain) mapped to risk-based compliance levels L1-L4, with deployment profiles for specific MCP scenarios and machine-readable JSON schemas for assessment reporting. The standard synthesizes NIST CSF, OWASP ASVS, and CIS Controls principles to address MCP-specific threats like command injection and supply chain compromise. Community-driven with i18n support, it targets the MCP ecosystem and integrates with platforms like MCP-Hub for standardized server certification.
Stars
67
Forks
13
Language
—
License
CC-BY-SA-4.0
Category
Last pushed
Jan 29, 2026
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/mcp/mcp-security-standard/mcp-server-security-standard"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
panther-labs/mcp-panther
Write detections, investigate alerts, and query logs from your favorite AI agents
duriantaco/skylos
High-precision Python SAST & Dead Code Remover. Finds unused functions, secrets, and security...
Wh0am123/MCP-Kali-Server
MCP configuration to connect AI agent to a Linux machine.
0x4m4/hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot,...
DMontgomery40/pentest-mcp
NOT for educational purposes: An MCP server for professional penetration testers including...