Securing MCP servers before the AI rollout outpaces security
- Published
- Record updated
Summary
The article argues that organizations deploying their first LLM-based application need to secure Model Context Protocol (MCP) servers before rollout. It describes MCP servers as a standardized way for AI apps to reach tools such as databases, file shares and CRMs, similar to ODBC for databases, and lists top-priority controls to define early.
Mitigation
Input validation and sanitization; output validation and sanitization with human oversight for high-risk actions; network segmentation of MCP hosts; server hardening following guidelines such as the CIS Model, using infrastructure-as-code to make servers ephemeral; least access principle, including multiple MCP servers to group tools and short token lifetimes; encryption at rest and in transit with strong key management; limiting the number and capabilities of tools on MCP hosts; and verifying third-party providers through assessments such as SOC 2, HITRUST or ISO 27001/2.