MCP Server / Tool Pentest

Authorized testing of MCP servers and tool handlers. Read ../../SECURITY_RULES.md first.

Core principle: every MCP tool handler is a public API endpoint reached by an unusual (AI) client. All tool descriptions, parameter descriptions, resources, prompts, and tool results are potentially hostile input.

Deliverables

• Attack Surface Map (../../templates/attack-surface-map.md)
• Tool Inventory
• Tool Risk Matrix (../../templates/tool-risk-matrix.md)
• Top Exploit Hypotheses
• Safe Test Plan (safe-test-plan.md)
• Confirmed Findings / Suspected Findings / Non-Issues (Passed Checks)
• Prioritized Fix Plan
• Regression Test Plan