owasp.orgadvisory

OWASP MCP Top 10 | OWASP Foundation

The OWASP MCP Top 10 (2025) is a living-document taxonomy of the ten most critical vulnerability classes affecting Model Context Protocol-based AI systems, covering issues like token mismanagement, privilege escalation via scope creep, tool poisoning, MCP-specific supply chain and dependency tampering, command injection, prompt injection via contextual payloads, weak authN/authZ, missing audit/telemetry, shadow MCP servers, and context injection/over-sharing. It targets AI/ML developers and security practitioners building agentic, model-chaining, and multi-modal MCP deployments, giving them a common vocabulary and checklist for secure design and auditing analogous to the OWASP Top 10 for LLM Applications.