OWASP Third-Party MCP Server Cheatsheet

Capture Summary

OWASP guidance for securely using third-party MCP servers. Search result notes unique risks from connecting AI models to third-party tools and data sources, including tool poisoning, prompt injection, memory poisoning, and tool interference.

Relevance

• Practical enterprise guidance for third-party MCP risk.
• Useful for developing MCP vendor-risk and runtime-permission checklists.
• Good candidate for control-to-evidence mapping.

Collection Notes

Collected as official OWASP guidance.