Explorador de regras
Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.
55 regras encontradasde 11.219Página 2 de 3
| ID | Título | Plataforma | Severidade | Nível | Verificação |
|---|---|---|---|---|---|
| TMA-MCP-10.2 | Ensure request and response body size limits, token budgets, and per-principal quotas are enforcedmcp-server · Nível 1 | mcp-server | Alta | 1 | Revisão manual |
| TMA-MCP-1.1 | Ensure MCP protocol version is pinned and loggedmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-1.3 | Ensure newly advertised server capabilities are re-validated before invocationmcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-2.1 | Ensure stdio is preferred for local, single-user serversmcp-server · Nível 1 | mcp-server | Média | 1 | Revisão manual |
| TMA-MCP-2.2 | Ensure TLS is required for HTTP and plaintext is disallowedmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-2.3 | Ensure authentication propagates through proxies to request- scoped SSE responsesmcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-3.2.1 | Ensure per-tool authorization policies are enforcedmcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-3.2.2 | Ensure token passthrough to downstream APIs is forbiddenmcp-server · Nível 1 | mcp-server | Média | 1 | Revisão manual |
| TMA-MCP-3.3.2 | Ensure OAuth discovery metadata is served over TLS and validated against the approved authorization server listmcp-server · Nível 2 | mcp-server | Média | 2 | Automatizada |
| TMA-MCP-3.3.4 | Ensure OAuth scopes are minimized and elevated progressivelymcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-4.1.1 | Ensure per-tool consent or pre-approved allowlists are requiredmcp-server · Nível 1 | mcp-server | Média | 1 | Revisão manual |
| TMA-MCP-4.1.2 | Ensure project-scoped MCP server definitions are not enabled or executed without explicit user approvalmcp-server · Nível 1 | mcp-server | Média | 1 | Revisão manual |
| TMA-MCP-4.1.4 | Ensure Sampling consent and redaction controls are implemented where Sampling is in usemcp-server · Nível 2 | mcp-server | Média | 2 | Automatizada |
| TMA-MCP-4.2.2 | Ensure MCP stdio server subprocess environment is restricted to the minimum required variablesmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-5.1.3 | Ensure prompt templates declare and validate their argumentsmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-5.2.1 | Ensure listChanged notifications are rate-limited to prevent client floodingmcp-server · Nível 2 | mcp-server | Média | 2 | Automatizada |
| TMA-MCP-5.2.3 | Ensure legacy Streamable HTTP session and stream- resumption mechanisms are disabledmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-5.5.1 | Ensure authorization, scope, and expiry controls are enforced on MCP Tasksmcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-5.6.1 | Ensure idempotency keys are required for side-effecting tool calls and duplicate side effects are preventedmcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-6.2 | Ensure tokens and keys are protected in clients and serversmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-7.1.3 | Ensure MCP audit records carry accurate, monotonic timestampsmcp-server · Nível 1 | mcp-server | Média | 1 | Automatizada |
| TMA-MCP-8.2 | Ensure third-party MCP servers are pinned to a verified content hash and re-vetted before updatesmcp-server · Nível 1 | mcp-server | Média | 1 | Revisão manual |
| TMA-MCP-8.3 | Ensure third-party MCP server artifacts are served exclusively from an internal private mirrormcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-9.1 | Ensure remote MCP servers run in containers or VMs with least privilege and gateway ingress controls appliedmcp-server · Nível 2 | mcp-server | Média | 2 | Revisão manual |
| TMA-MCP-3.3.3 | Ensure shared downstream service account identities are prohibited across multiple MCP tools or serversmcp-server · Nível 2 | mcp-server | Baixa | 2 | Revisão manual |