Downloads · 30 days
0
mcp-security-taxonomy
shiqiangchen6/mcp-security-taxonomy
mcp-security-taxonomy is a machine learning model from shiqiangchen6. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as apache-2.0.
Access
Public
Updated Jul 15, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
.pdf36.1 KB · 90%
At a glance
- License
- apache-2.0
- Access
- Public
- Created
- Jul 15, 2026
- Updated
- Jul 15, 2026
- SHA
- 42b29d35
Model card
From the Hugging Face model README
An Empirical Study of MCP Server Security: 6 Attack Surfaces from 30+ Audits
Authors: Shiqiang Chen
Abstract: The Model Context Protocol (MCP) is rapidly becoming a cornerstone of AI agent interoperability, yet its security implications remain largely unexplored. This paper presents the first systematic empirical study of MCP server security, analyzing over 30 publicly available implementations. We identify six distinct attack surfaces: Tool Parameter Injection, Inspector Exposure, Client Trust Exploitation, Transport Security weaknesses, Implementation Flaws, and Supply Chain vulnerabilities. Through manual code audits and dynamic testing, we discovered 2 previously unknown CVEs and catalogued dozens of security-relevant patterns.
Key Contributions
- First systematic security audit of the MCP server ecosystem (30+ servers)
- 6-attack-surface taxonomy for categorizing MCP vulnerabilities
- 2 new CVEs discovered through manual code auditing
- Concrete defensive measures across protocol, implementation, and operational layers
Paper
The full paper is available as paper-mcp-security-taxonomy.pdf
- License
- apache-2.0
- Created
- Jul 15, 2026
- Updated
- Jul 15, 2026