{
  "schema": "vedokrok.public-item.v1",
  "release_id": "MHC-RPUB-20260920-75ad787a",
  "url": "/knowledge/audit-an-mcp-server-before-giving-it-repository-context",
  "id": "MHC-D-RESEARCH-0667",
  "version": "0.1.0",
  "title": "Audit an MCP server before giving it repository context",
  "summary": "A tool description is part of the agent's instruction and execution surface.",
  "kind": "protocol",
  "body": "Verify the server's source, operator, permissions, tools, network behavior and update mechanism before connection. Approve only the tools needed for the task, watch for name collisions or changed definitions, and keep repository or credential access narrower than the developer's full account.",
  "limits": [
    "MCP ecosystems evolve quickly; review the current implementation and vendor security guidance rather than relying on protocol labels alone."
  ],
  "topics": [
    "union-ai-assisted-coding-safeguards"
  ],
  "intents": [],
  "source_ids": [
    "RS-1C68AE8325C384C0"
  ],
  "evidence": [
    {
      "claim": "OWASP's current secure-coding-with-AI guidance treats repository content, issues, PRs, comments, fetched pages, logs and tool responses as potential indirect prompt-injection inputs for coding agents.",
      "source_id": "RS-1C68AE8325C384C0",
      "role": "supports",
      "note": "Threat likelihood depends on who can influence the content and what permissions the agent has.",
      "locator": "Indirect Prompt Injection in the Development Loop"
    }
  ],
  "use_when": [
    "A coding agent wants to connect to a new MCP server or tool package."
  ],
  "avoid_when": [
    "MCP ecosystems evolve quickly; review the current implementation and vendor security guidance rather than relying on protocol labels alone."
  ],
  "example": "A code-search MCP gets read-only repository access; a server that also offers shell and cloud-admin tools is not connected for the search task.",
  "check": "Each connected server and tool has an explicit purpose and bounded permission set.",
  "steps": [
    "Server provenance checked.",
    "Tool list reviewed.",
    "Permissions scoped.",
    "Network behavior understood.",
    "Updates/change detection considered.",
    "Name collisions checked."
  ],
  "sources": [
    {
      "id": "RS-1C68AE8325C384C0",
      "title": "Secure Coding with AI Cheat Sheet",
      "url": "https://cheatsheetseries.owasp.org/cheatsheets/Secure_Coding_with_AI_Cheat_Sheet.html"
    }
  ],
  "relations": [],
  "collections": [
    {
      "id": "RC-E25DB1788236EF13",
      "title": "Let coding agents move fast inside a reviewable security boundary",
      "url": "/collections/let-coding-agents-move-fast-inside-a-reviewable-security-boundary"
    }
  ]
}