anthropics / anthropics/claude-cookbooks

Add MCP security best practices guide

Aberta
#660 0 comentários 0 reações 0 responsáveis Ver no GitHub
Linguagem predominante
Jupyter Notebook
Estrelas
52.7k
Forks
6.3k
Merge médio
25min
PRs com merge (30d)
6

Descrição

## Feature Request: MCP Security Best Practices Cookbook Recipe

As MCP adoption grows, I think a security-focused cookbook recipe would be valuable for the community.

I've been building [mcp-safeguard](https://github.com/SyedAnas01/mcp-safeguard) — the first automated security scanner for MCP servers — and have identified the most common vulnerabilities in real-world MCP deployments.

### Proposed Cookbook Content
A new recipe covering:
1. **Prompt injection defense** — how to sanitize tool outputs before returning to AI context
2. **Credential hygiene** — safe handling of API keys and tokens in MCP servers
3. **Network security** — preventing SSRF through URL validation
4. **Tool poisoning prevention** — validating tool definitions at load time
5. **Security scanning integration** — adding mcp-safeguard to CI/CD pipelines

### Why This Matters
- 500+ MCP servers now published on GitHub and mcpservers.org
- Most authors are not security experts
- MCP-specific attack vectors differ significantly from traditional web app vulnerabilities

I'd be happy to write this recipe and submit a PR. Would the team be interested?

Reference: https://github.com/SyedAnas01/mcp-safeguard

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.