{"repo":"appsecco/pentesting-mcp-servers-checklist","free":true,"listed":false,"github":"https://github.com/appsecco/pentesting-mcp-servers-checklist","clone":"git clone https://github.com/appsecco/pentesting-mcp-servers-checklist.git","description":"A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licensed for remixing.","language":null,"stars":40,"topics":["agentic-ai","ai-security","llm-security","mcp","mcp-security","mcp-server","penetration-testing","pentesting","security-checklist","appsecco"],"license":"CC-BY-4.0","category":"mcp-servers","readme_excerpt":"README Version 3 is out now! A practical, community-driven checklist for pentesting Model Context Protocol (MCP) servers . This guide covers local and remote MCP server risks, traffic analysis, tool-call behaviors, context boundaries, authorization flows, and unsafe code paths. Originally created for the OWASP Bay Area talk on Pentesting MCP Servers (Oct 2025) , this checklist is designed for practitioners performing assessments on MCP-based tools, agents, and integrations. Why this exists MCP servers are becoming the new execution layer for AI agents. This means they expose: - File system access - Tool execution - Remote APIs - STDIO and HTTP bridges - Autonomous actions initiated by LLMs Because of this, MCP servers introduce a wide attack surface that security testers need structured guidance for. This checklist helps you perform systematic and repeatable assessments. What this checklist covers 1. Traffic Analysis — proxy inspection of STDIO/HTTP, context injection, TLS enforcement 2. Authentication & Authorization — auth bypass, OAuth flows, IDOR, privilege escalation 3. Local MCP Server File and Code Review — embedded secrets, dangerous functions, dependency audits 4. MCP Tool Behavior and Functionality — tool boundary validation, chaining, local RCE 5. Tool Security — Input Validation — command injection, path traversal, SSRF, SQLi, SSTI 6. Tool Security — Output & Schema Validation — schema mismatches, sensitive data leakage, prompt injection via output 7. Tool Injecti","default_branch":null,"files":null,"tree":[],"storefront":"/r/appsecco","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/appsecco/pentesting-mcp-servers-checklist/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}