OWASP/OWASP-MCP-Governance-and-Risk-Project

View on GitHub

A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents connect to external tools, data sources, and systems.

Stars: 86
Forks: 13
Open beginner issues: 0
Indexed issues: 4

Dominant language: No language data
License: GPL-2.0
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

4 open issues indexed

Description and schema changes are tool changes: a digest field, a Rule 2 wording, and two observations from a nightly record Open

Difficulty 3/5 1-2 days Newbie friendliness 70/100

OWASP/OWASP-MCP-Governance-and-Risk-Project#7 · Opened Sep 14, 2026
Consider AIUC standard (AIUC-1) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

OWASP/OWASP-MCP-Governance-and-Risk-Project#4 · Opened Sep 8, 2026
v1.0 governs tools only: sampling, elicitation, and roots are ungoverned Open

Difficulty 4/5 3-5 days Newbie friendliness 64/100

OWASP/OWASP-MCP-Governance-and-Risk-Project#2 · Opened Sep 8, 2026
Add EMA references Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

OWASP/OWASP-MCP-Governance-and-Risk-Project#1 · Opened Sep 3, 2026

OWASP/OWASP-MCP-Governance-and-Risk-Project

Get new issues in your inbox