Ensure model context is minimized and MIME handling is honored

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Inspect model-context payloads, whether sent through sampling or forwarded directly to a model provider, and confirm each carries only the content needed for the operation, contains no raw or unvalidated bytes in text fields, and contains no credentials or secrets. Set MAX_CONTEXT_BYTES to the configured maximum payload size, then run the following command, which reads each log line as JSON, selects the sampling- payload records, and fails any that exceed the maximum: LOG="<MCP_AUDIT_LOG>" MAX_CONTEXT_BYTES="<MAX_CONTEXT_BYTES>" if [ ! -r "$LOG" ]; then echo "ERROR: audit log \"$LOG\" not found or not readable (set MCP_AUDIT_LOG)" else sizes=$(jq -rR '(fromjson? // null) as $o | select($o != null and $o.event == "sampling_payload") | ($o.payload_bytes // empty)' "$LOG" 2>/dev/null | sort -nr) if [ -z "$sizes" ]; then echo "REVIEW: no sampling_payload events in log (nothing to assess, or the deployment integrates a model provider directly and the direct-provider path must be inspected instead)" elif printf '%s' "$MAX_CONTEXT_BYTES" | grep -q '<MAX_CONTEXT_BYTES>'; then echo "sampling_payload sizes (bytes), largest first:" printf '%s\n' "$sizes" | head echo "REVIEW: set MAX_CONTEX...

조치 방법

조치 방식: 가이드 또는 인프라 패치

Configure the server middleware to filter context to the minimum needed for the operation, and to scrub secrets and personally identifiable information before forwarding. Keep unvalidated bytes out of text context, and pass intentional image or audio content as the provider's typed representation. Enforce a maximum context payload size, coordinated with the deployment's request and response body-size limits. Because sampling is deprecated as of the 2026-07-28 revision, apply the same minimization and scrubbing to any context sent to a model provider through a direct integration. This is server middleware and configuration, so there is no portable command.