MCP Security Checklist (SlowMist)

MCP Security Checklist: A Security Guide for the AI Tool Ecosystem

[](https://twitter.com/slowmist_team)

[English Version](./README.md), [中文版本](./README_CN.md)

Author Information

This security checklist was compiled and is maintained by [@SlowMist_Team](https://twitter.com/slowmist_team).

SlowMist, a global leader in blockchain ecosystem threat intelligence, aims to enhance security protection and safeguard user privacy during the integration of blockchain and AI ecosystems.

We sincerely thank [FENZ.AI](https://fenz.ai/) for their valuable contributions and support.

FENZ.AI redefines AI security with future-proof auditing. FENZ is the essential infrastructure for the AI era: "Superintelligence starts with super safety."

📚 Table of Contents

• Overview
• How to Use
• MCP Server (MCP Plugin) Security
• MCP Client/MCP HOST Security
• MCP Adaptation and Invocation Security on Different LLMs
• Multi-MCP Scenario Security
• Unique Security Points for Cryptocurrency-related MCPs
• MCP Security Self-Assessment Tools
• References

Overview

With the rapid development of large language models (LLMs), a variety of new AI tools have continued to emerge. Among them, tools based on the Model Context Protocol (MCP) standard have become a key bridge connecting LLMs with external tools and data sources. Since its release in late 2024, MCP has been widely adopted in mainstream AI applications such as Claude Desktop and Cursor. Various MCP Server marketplaces have also emerged, demonstrating strong ecosystem scalability.

...