MCP Implementation Security Review

Process

Step 1 — Classify the target

• Check MCP protocol version 2025-03-26 or later (current: 2025-11-25). Flag older versions as a finding but continue the review.
• Determine whether the target is a server or client.
• Classify transport as network-exposed or local-only using the transport reference below.
• Record transport, protocol version, and whether sessions exist.

Completion criterion: Target type, protocol status, and transport are identified.

Step 2 — Filter false positives

• Apply the False Positive Filters before opening findings.
• Keep docs only when they describe the repo's own server behavior, deployment, transport, or auth posture.
• For framework/SDK repositories, scope findings to the default configuration and public API surface.

Completion criterion: Remaining evidence is in-scope code, repo-owned docs, or public API behavior.