hardening-remote
Installation
SKILL.md
Hardening Remote MCP Servers
Security Requirements
MCP servers deployed as remote services require additional hardening to protect client connections and restrict network access.
TLS Everywhere
All client connections to the remote MCP server MUST use TLS:
| Requirement | Details |
|---|---|
| TLS mandatory | Reject all plaintext (non-TLS) connections |
| TLS 1.2 minimum | TLS 1.3 preferred |
| Valid certificates | Use certificates from a trusted CA; do not use self-signed certs in production |
| Strong cipher suites | Disable weak ciphers and protocols |
| HSTS | If HTTP-based, set Strict-Transport-Security header |