Ensure Sampling consent and redaction controls are implemented where Sampling is in use

보통레벨 2자동mcp-server

설명

The host requires an explicit user decision before any server-initiated sampling request is forwarded to the model. Redaction filters remove personally identifiable information, secrets, and other sensitive data from context before it is included in a sampling payload, and the host records that the redaction check ran. Server-initiated sampling is rate-limited. Each sampling event is logged with the requesting server identity, a request identifier, the request type, the user's decision and its source, and the redaction result, without logging raw sensitive prompts. Under the 2026-07-28 revision, the Sampling feature is deprecated. It is a client capability, advertised per request in _meta.io.modelcontextprotocol/clientCapabilities, and delivered through a Multi Round-Trip Request rather than the standalone sampling/createMessage method used before this revision. These controls apply t...

점검 방법

감사 방식: 셸 명령

shell

cfg="${MCP_CONFIG:-/etc/mcp/server.json}"; [ -f "$cfg" ] || { echo "missing $cfg (set MCP_CONFIG)"; exit 1; }; grep -Eq '"cis_4_1_4"|"protocolVersion"|"capabilities"|"auth"' "$cfg" && echo compliant || echo "non-compliant: section 4.1.4"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

These are host and server configuration settings, with no portable command. Configure the host to require an explicit user decision before forwarding a server-initiated sampling request to the model. Apply a redaction filter that removes API keys, passwords, and common PII formats from context before it is sent, and record that the redaction check ran. Rate-limit server-initiated sampling. Log every sampling event with the server identity, a request or correlation identifier, the request type, the user's decision and its source, and the redaction result, without logging raw sensitive prompts. Because sampling is deprecated under the 2026-07-28 revision, plan migration to direct LLM- provider integration, and until that migration completes keep these controls in force wherever sampling remains enabled.

속성

운영 체제: 모두
태그: aimcpmcp-server
참고 자료: CIS MCP Server Benchmark v1.0.0 - 4.1.4 Ensure Sampling consent and redaction controls are implemented where Sampling is in use

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target mcp-server --level 2