Found 2 articles tagged with "model context protocol security best practices"
We ran Cisco MCP Scanner and NVIDIA SkillSpector on a poisoned MCP server and put agentgateway in front of it. Plus Snyk, Docker, IBM, Obot and Runlayer.
An October 2025 audit of 5,205 MCP servers found only 8.5% use OAuth. Here's what the spec actually requires, why real breaches trace back to this gap, and how to add OAuth 2.1 with working code.