OWASP has published a working draft of the MCP Top 10, a security framework covering the most critical vulnerabilities in Model Context Protocol servers, tools, clients, and agentic workflows. With over 10,000 active MCP servers and 97 million monthly SDK downloads, the risks are significant. The 10 vulnerabilities covered include token mismanagement and secret exposure, privilege escalation and scope creep, tool poisoning, supply chain attacks, command injection, intent flow subversion (prompt injection), insufficient authentication, lack of audit and telemetry, shadow MCP servers, and context injection and over-sharing. For each risk, real-world examples are provided alongside concrete mitigations such as short-lived tokens, RBAC, cryptographically signed tool manifests, sandboxed execution, OAuth 2.1/mTLS, immutable logging, and namespace isolation for context buffers.
