awesome-mcp-security

Why we included this project

MCP is still young enough that its security story is scattered across spec documents, blog posts, and conference talks, and this list pulls the useful parts into one place. You get the official security considerations from the spec itself, plus papers, videos, and write-ups that show where the protocol's trust model has actually been probed. The tools and code section is the part most people will want: security-focused MCP servers and utilities you can run against your own setup instead of just reading about threats. Since the auth specification is still being reworked, a maintained collection like this beats digging through stale posts and repos on your own.