MCP-Security-Testing-Guide
OWASP MCP Security Testing Guide
Install / Use
claude mcp add OWASP -- npx -y github:OWASP/MCP-Security-Testing-GuideIf the server publishes to npm under a different name, use that package instead — check the repo README.
MCP Server
Model Context Protocol server
Quality Score
Category
SecuritySupported Platforms
Our assessment of MCP-Security-Testing-Guide
MCP-Security-Testing-Guide scores 58/100 on our quality scale, 1095th of 1,120 Security skills we index.
Its MCP Server is 2.3 KB long, split into 3 sections and no code examples: moderately detailed.
It has 43 GitHub stars, so there is little community track record yet; judge it on its content.
Maintenance, license and trust
- The repository was last updated 4 days ago, so MCP-Security-Testing-Guide is actively maintained.
- It is released under GPL-3.0, a copyleft license: you can use it, but modified versions you distribute must carry the same license.
- Its trust signals score 92/100, with 1 caution from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
MCP-Security-Testing-Guide compared with similar skills
All 4 of these similar skills score higher than MCP-Security-Testing-Guide; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| MCP-Security-Testing-Guide (this skill)by OWASP | 58 | 43 | 4d ago | MCP Server |
| Agent-Reachby Panniantong | 100 | 99.6k | 4d ago | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 76.2k | 2d ago | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.5k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 88.7k | today | MCP Server |
Frequently asked questions
- How do I install MCP-Security-Testing-Guide?
- Run
claude mcp add OWASP -- npx -y github:OWASP/MCP-Security-Testing-Guide. The install tabs above show the steps for each supported agent. - Which AI agents does MCP-Security-Testing-Guide work with?
- It is written for Claude Code and Claude Desktop, as a MCP Server file. Other agents that read the same format can often use it too.
- Is MCP-Security-Testing-Guide safe to use?
- It is GPL-3.0-licensed and scores 92/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is MCP-Security-Testing-Guide still maintained?
- The repository was last updated 4 days ago, so MCP-Security-Testing-Guide is actively maintained.
Skill content
View source on GitHubOWASP MCP Security Testing Guide
The Model Context Protocol (MCP) is an open protocol that lets LLM applications connect to external data sources, tools, prompts, workflows, and services. This guide treats MCP as a security boundary: the chain from the user, through the model and MCP client, to the MCP server, the connected tool, and the target system.
It is a living collection of MCP security knowledge for developers, AppSec, red teams, and SOC teams. It covers threats, secure development, host and client controls, supply chain, enterprise gateways, detection, incident response, taxonomy, public incidents, case studies, and review checklists. Host and client controls are in Chapter 3.
This work is licensed under GPL-3.0.
Chapters
Read the guide in this order. Chapter 3 holds the threat write-ups and 79 tests in sections 3.1–3.19.
- Project Overview
- MCP Fundamentals
- MCP Threats and Attack Patterns
- Secure MCP Development
- MCP Security Taxonomy
- Hacks, News, and Public Incidents
- Appendix A — Glossary
- Appendix B — Suggested Reading
- Appendix C — Security Review
- Appendix D — Safe Lab Fixtures
- Appendix F — Testing Tools
Do not use it to test systems without explicit written authorization. Use synthetic lab environments and placeholders or try this MCP Goat
Related OWASP projects
Appendix E is unused so the Appendix D and Appendix F links already used by the Chapter 3 tests stay stable. Report a finding with the finding template and Appendix C.
Related Skills
Agent-Reach
99.6kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
76.2kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.5kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Scrapling
88.7k🕷️ A Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.