MODEL CONTEXT PROTOCOL (MCP) AND SUPPLY-CHAIN SECURITY

LEARNING GOALS By the end of this chapter you will be able to describe protocol-level weaknesses in the MCP, explain origin authentication and trust between servers, define Static Application Security Testing (SAST), verify server integrity, and link prompts to tool calls through monitoring. A QUICK REMINDER As Chapter 16 explained, MCP is the open standard that lets an agent connect to tools and data sources offered by separate programs called servers. You studied it in Chapter 16. An MCP server is like a plug-in appliance, and the agent is like a house with a standard wall socket. The standard makes plugging in easy, and that same ease is why security matters.