Where Does MCP Security End? A Three-Tier Mitigation Mapping Framework for the OWASP MCP Top 10

Summary

This paper maps the OWASP MCP Top 10 to three architectural tiers (server-primary, gateway-primary, protocol-primary) using a cascading decision tree and Design Science Research. It was validated against an enterprise Managed File Transfer MCP server built in Go, where high-confidence server-tier controls worked as predicted but protocol-tier controls failed for architectural reasons beyond server implementation.

Topics

• Model Context Protocol

Related items

• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoRight Tool, Wrong Parameters: Defending LLM Agents Against Parameter PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)