SkillTip

awesome-mcp-security

作者 Puliczek✓ 已验证

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

732
Stars
201
Forks
2026/8/23
添加时间
在 GitHub 查看下载 ZIP

⚠️ 第三方软件声明

本 Skill 为第三方开源软件，独立托管于 GitHub。SkillTip 仅为信息目录，不控制或维护底层仓库。所显示的安全检查为自动化且范围有限，安装前请自行审查源码。

阅读服务条款

MCP 服务器

安装

添加到你的 Claude Code skills 目录：

# Add to your Claude Code skills
git clone https://github.com/Puliczek/awesome-mcp-security

快速入门

使用 awesome-mcp-security 等 Skills 的指南。

安全报告

已验证

上次扫描：—

{
  "status": "PASSED",
  "issues": []
}

README.md

🤝 Show your support - give a ⭐️ if you liked the content

Awesome MCP Security Awesome

Everything you need to know about Model Context Protocol (MCP) security.

Table of Contents

📔 Security Considerations

Official Security Considerations from the Official MCP Specification Rev: 2025-03-26

[!NOTE] 15.04.2025: The current MCP auth specification is in progress of being replaced by a more robust specification. Please join the conversation if you have concerns around the current auth specification.

  • Servers MUST:

    • Validate all tool inputs
    • Implement proper access controls
    • Rate limit tool invocations
    • Sanitize tool outputs

  • Clients SHOULD:

    • Prompt for user confirmation on sensitive operations
    • Show tool inputs to the user before calling the server, to avoid malicious or accidental data exfiltration
    • Validate tool results before passing to LLM
    • Implement timeouts for tool calls
    • Log tool usage for audit purposes

[!WARNING]
For trust & safety and security, clients MUST consider tool annotations to be untrusted unless they come from trusted servers.

[!WARNING]
For trust & safety and security, there SHOULD always be a human in the loop* with the ability to deny tool invocations.

Applications SHOULD:

  • Provide UI that makes clear which tools are being exposed to the AI model.
  • Insert clear visual indicators when tools are invoked.
  • Present confirmation prompts to the user for operations, to ensure a human is in the loop.

[!NOTE]
*Human-in-the-Loop (HITL) means that user help monitor and guide automated tasks, like deciding whether to accept tool requests in Cursor.

📃 Papers

📺 Videos

📕 Articles, X threads and Blog Posts

🧑‍🚀 Tools and code

💾 MCP Security Servers

💻 Other Useful Resources

😎 Contributing

👍🎉 First off, thanks for taking the time to contribute! 🎉👍

Please read and follow our contributing guide

Thanks! 🦄

🤝 Show your support

🤝 Show your support - give a ⭐️ if you liked the content

✔️ Disclaimer

This project can only be used for educational purposes. Using this resource against target systems without prior permission is illegal, and any damages from misuse of this software will not be the responsibility of the author.

常见问题

What is awesome-mcp-security?⌄

awesome-mcp-security is an open-source mcp servers skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Puliczek. 🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️. It has 732 GitHub stars.

Is awesome-mcp-security safe to use?⌄

Yes. awesome-mcp-security passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.

How do I install awesome-mcp-security?⌄

Clone the repository with "git clone https://github.com/Puliczek/awesome-mcp-security" and add it to your Claude Code skills directory (see the Installation section above).

Are there alternatives to awesome-mcp-security?⌄

Yes. SkillsLLM lists many other MCP Servers skills you can browse and compare side by side. Open the MCP Servers category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh awesome-mcp-security against similar tools.

评论 (0)

暂无评论，成为第一个分享想法的人！

相关 Skills

浏览全部 MCP 服务器 Skills →

n8n

by n8n-io

12

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

⭐ 201,881⑂ 60,308TypeScript
MCP 服务器apisai-tools
查看详情 →

Scrapling

by D4Vinci

🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!

⭐ 75,913⑂ 7,581Python
MCP 服务器
查看详情 →

TrendRadar

by sansan0

⭐AI-driven public opinion & trend monitor with multi-platform aggregation, RSS, and smart alerts.🎯 告别信息过载，你的 AI 舆情监控助手与热点筛选工具！聚合多平台热点 + RSS 订阅，支持关键词精准筛选。AI 智能筛选新闻 + AI 翻译 + AI 分析简报直推手机，也支持接入 MCP 架构，赋能 AI 自然语言对话分析、情感洞察与趋势预测等。支持 Docker ，数据本地/云端自持。集成微信/飞书/钉钉/Telegram/邮件/ntfy/bark/slack 等渠道智能推送。

⭐ 61,652⑂ 24,883Python
MCP 服务器
查看详情 →

context7

by upstash

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

⭐ 61,060⑂ 2,938TypeScript
MCP 服务器
查看详情 →

High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.

⭐ 39,939⑂ 3,219C
MCP 服务器
查看详情 →

开发者还喜欢

基于喜欢此 Skill 的开发者投票和收藏

ECC

by affaan-m

10

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

⭐ 242,219⑂ 36,702JavaScript
AI 智能体ai-agentsanthropicclaude-code
查看详情 →
15

An agentic skills framework & software development methodology that works.

⭐ 234,966⑂ 20,863Shell
AI 智能体ai-agentsbrainstorming
查看详情 →

hermes-agent

by NousResearch

10

The agent that grows with you

⭐ 234,437⑂ 47,175Python
AI 智能体ai-agentsagent-orchestration
查看详情 →

n8n

by n8n-io

12

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

⭐ 201,881⑂ 60,308TypeScript
MCP 服务器apisai-tools
查看详情 →
13

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

⭐ 185,940⑂ 28,768JavaScript
AI 智能体ai-agentsanthropicclaude-code
查看详情 →

cc-switch

by farion1231

3

A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io

⭐ 128,868⑂ 8,826Rust
AI 智能体claude-codeai-tools
查看详情 →