Ensure model context is minimized and MIME handling is honored

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Inspect model-context payloads, whether sent through sampling or forwarded directly to a model provider, and confirm each carries only the content needed for the operation, contains no raw or unvalidated bytes in text fields, and contains no credentials or secrets. Set MAX_CONTEXT_BYTES to the configured maximum payload size, then run the following command, which reads each log line as JSON, selects the sampling- payload records, and fails any that exceed the maximum: LOG="<MCP_AUDIT_LOG>" MAX_CONTEXT_BYTES="<MAX_CONTEXT_BYTES>" if [ ! -r "$LOG" ]; then echo "ERROR: audit log \"$LOG\" not found or not readable (set MCP_AUDIT_LOG)" else sizes=$(jq -rR '(fromjson? // null) as $o | select($o != null and $o.event == "sampling_payload") | ($o.payload_bytes // empty)' "$LOG" 2>/dev/null | sort -nr) if [ -z "$sizes" ]; then echo "REVIEW: no sampling_payload events in log (nothing to assess, or the deployment integrates a model provider directly and the direct-provider path must be inspected instead)" elif printf '%s' "$MAX_CONTEXT_BYTES" | grep -q '<MAX_CONTEXT_BYTES>'; then echo "sampling_payload sizes (bytes), largest first:" printf '%s\n' "$sizes" | head echo "REVIEW: set MAX_CONTEX...

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Configure the server middleware to filter context to the minimum needed for the operation, and to scrub secrets and personally identifiable information before forwarding. Keep unvalidated bytes out of text context, and pass intentional image or audio content as the provider's typed representation. Enforce a maximum context payload size, coordinated with the deployment's request and response body-size limits. Because sampling is deprecated as of the 2026-07-28 revision, apply the same minimization and scrubbing to any context sent to a model provider through a direct integration. This is server middleware and configuration, so there is no portable command.