Ensure Sampling consent and redaction controls are implemented where Sampling is in use

SedangLevel 2Otomatismcp-server

Deskripsi

The host requires an explicit user decision before any server-initiated sampling request is forwarded to the model. Redaction filters remove personally identifiable information, secrets, and other sensitive data from context before it is included in a sampling payload, and the host records that the redaction check ran. Server-initiated sampling is rate-limited. Each sampling event is logged with the requesting server identity, a request identifier, the request type, the user's decision and its source, and the redaction result, without logging raw sensitive prompts. Under the 2026-07-28 revision, the Sampling feature is deprecated. It is a client capability, advertised per request in _meta.io.modelcontextprotocol/clientCapabilities, and delivered through a Multi Round-Trip Request rather than the standalone sampling/createMessage method used before this revision. These controls apply t...

Cara pemeriksaan

Metode audit: Perintah shell

shell

cfg="${MCP_CONFIG:-/etc/mcp/server.json}"; [ -f "$cfg" ] || { echo "missing $cfg (set MCP_CONFIG)"; exit 1; }; grep -Eq '"cis_4_1_4"|"protocolVersion"|"capabilities"|"auth"' "$cfg" && echo compliant || echo "non-compliant: section 4.1.4"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

These are host and server configuration settings, with no portable command. Configure the host to require an explicit user decision before forwarding a server-initiated sampling request to the model. Apply a redaction filter that removes API keys, passwords, and common PII formats from context before it is sent, and record that the redaction check ran. Rate-limit server-initiated sampling. Log every sampling event with the server identity, a request or correlation identifier, the request type, the user's decision and its source, and the redaction result, without logging raw sensitive prompts. Because sampling is deprecated under the 2026-07-28 revision, plan migration to direct LLM- provider integration, and until that migration completes keep these controls in force wherever sampling remains enabled.

Properti

Sistem operasi: Apa saja
Tag: aimcpmcp-server
Referensi: CIS MCP Server Benchmark v1.0.0 - 4.1.4 Ensure Sampling consent and redaction controls are implemented where Sampling is in use

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target mcp-server --level 2