-
Notifications
You must be signed in to change notification settings - Fork 41
Pull requests: OWASP/www-project-mcp-top-10
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
MCP07: add cached-authorization revocation scenario and validation checks
#63
opened Sep 21, 2026 by
timothehusson
Loading…
Add AIV & SEA taxonomy to MCP06 mitigations; add Intent-Action Audit Ledger to MCP08 [Closes #30, #31, #32]
#60
opened Sep 10, 2026 by
Relyksb
Loading…
Link the recommended controls from the entries they mitigate
#59
opened Sep 10, 2026 by
bba-git
Loading…
Add recommended control: verifiable authorization lineage
#58
opened Sep 9, 2026 by
bba-git
Loading…
MCP03: add plan-vs-authorize containment control + attack/defense reference
#55
opened Aug 24, 2026 by
tonydzi
Loading…
Propose Cross-Server Trust and Capability Manipulation candidate
#54
opened Aug 22, 2026 by
yotampe-pluto
Loading…
Strengthen MCP07 identity and OAuth trust boundaries
#53
opened Aug 22, 2026 by
yotampe-pluto
Loading…
enhance(MCP08): add tamper-evident agent decision evidence controls, Scenario 5, EU AI Act §19 reference
#50
opened Jul 31, 2026 by
telleroutlook
Loading…
docs: add Detection Crosswalk (MCP Top 10 risks → executable detection categories)
#46
opened Jul 20, 2026 by
eeee2345
Loading…
Bump actions/checkout from 6 to 7
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#43
opened Jun 22, 2026 by
dependabot
Bot
Loading…
Add SSRF prevention and detection recommended control for MCP fetch/scrape tools
#42
opened Jun 19, 2026 by
SyedAnas01
Loading…
Add reference guide: Bounded-Surface MCP Server Design
#29
opened Mar 23, 2026 by
up2itnow0822
Loading…
ProTip!
Exclude everything labeled
bug with -label:bug.