MCP Security Threat Model for Production Systems
A practical threat model for MCP hosts, clients, servers, tools, credentials, model context, and downstream systems.
-
-
MCP Tool Permissions and Least Privilege
A practical permission model for controlling which MCP tools users and agents can discover, call, and approve.
-
MCP Prompt Injection, Tool Poisoning, and Data Exfiltration
A defensive guide to prompt injection, tool poisoning, confused-deputy risks, and data exfiltration in MCP systems.
-
Deploy and Observe a Remote MCP Server
A production deployment guide for remote MCP servers covering network boundaries, identity, scaling, observability, and rollback.
-
MCP Error Handling: Timeouts, Retries, and Cancellation
A reliability guide to MCP errors, deadlines, retries, cancellation, progress, idempotency, ambiguous writes, and observable recovery.
-
MCP Tool Design: Schemas, Descriptions, and Structured Outputs
Practical MCP tool-design guidance covering names, descriptions, JSON Schema, structured results, errors, permissions, and testing.
-
MCP Authentication and Authorization Explained
A production-focused guide to authenticating MCP clients and authorizing users, tools, resources, tenants, and downstream actions.
-
MCP Tools Explained: How AI Agents Take Action
A practical guide to MCP tools, including schemas, discovery, execution, approvals, errors, and safe production design.
-
MCP Transports: STDIO vs Streamable HTTP
Understand how MCP messages travel over STDIO and Streamable HTTP and how to choose the right transport for local and remote servers.
-
MCP Lifecycle and Capability Negotiation
A current guide to MCP version compatibility, capability discovery, request metadata, feature use, and the transition from older handshakes.
