MCP Security KitMCP config security checks explained
The 14 findings the checker can report, from most to least severe. Each page shows why it matters and a before-and-after config.
- high Secret written into an MCP config
- high Secret passed as a command-line argument
- high Secret inside an MCP server URL
- high Remote MCP server over unencrypted http
- info Remote MCP server with no credentials configured
- medium Unpinned MCP server package or image
- low MCP server installs without asking (npx -y)
- high MCP server container runs --privileged
- medium MCP server container shares the host network
- high Broad host folder or Docker socket mounted into an MCP container
- high MCP filesystem server with access to a very broad path
- medium MCP server launched through a shell
- medium MCP server that can run shell commands
- medium MCP tools auto-approved or always allowed