MCP Server Security Standard#
The MCP Server Security Standard (MSSS) is an open, vendor-neutral security standard for Model Context Protocol (MCP) servers. This standard provides a comprehensive framework for securing MCP server implementations.
Available Versions#
About This Standard#
This standard defines security controls, threat models, and reporting formats for MCP servers. It is designed to be:
- Open: Community-driven and freely available
- Vendor-neutral: Not tied to any specific implementation
- Practical: Based on real-world security requirements
- Comprehensive: Covering all aspects of MCP server security
Getting Started#
- Select a version from the dropdown in the navigation bar
- Review the Standard documentation
- Explore security Controls by domain
- Understand Reporting requirements
- Review Governance policies
Language Support#
This site supports multiple languages. Select your preferred language from the navigation bar.
Contributing#
This standard is maintained in the GitHub repository. Contributions are welcome.