MCP Security guides

Detecting Tool Poisoning Attacks with mcp-watch

Scan MCP servers for tool poisoning and related attacks with mcp-watch: what the scan and scan-local commands actually check, how to read the output, and where the threat taxonomy comes from.

Send MCP Server Errors to Sentry for Real-Time Alerting

Wire Sentry into a production MCP server. The current sentry-sdk auto-captures tool-handler exceptions through a default MCP integration, so basic error reporting needs no manual code.

Security tests for MCP server endpoints

Security-test an MCP server with real, verifiable tools: scan tool descriptions for poisoning and line jumping, probe the Streamable HTTP endpoint with the Inspector CLI and curl, and check OAuth Resource Server behavior against the 2026-07-28 spec.

Implementing CORS Policies for Web-Based MCP Servers

Configure Cross-Origin Resource Sharing (CORS) policies for web-based MCP servers to enable secure browser access.

Implementing Content Security Policies for MCP Resources

Protect MCP server resources with Content Security Policy (CSP) headers to prevent XSS and injection attacks.

Building a health check endpoint for your MCP server

Implement health check endpoints for MCP servers to enable monitoring, load balancing, and automated recovery.