OWASP MCP Top 10
Top ten security risks for Model Context Protocol implementations
The protocol-level companion to the agentic list, covering the risks that arise where MCP servers expose tools to agents: poisoned descriptions, credential handling, insecure servers, context spoofing and supply chain.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.