Pregledač pravila
Pregledajte svako pravilo za ojačavanje bezbednosti u katalogu. Filtrirajte po platformi, ozbiljnosti, nivou profila i tome da li se provera može automatizovati.
Pronađeno 55 pravilaod 16.927Stranica 1 od 3
| ID | Naslov | Platforma | Ozbiljnost | Nivo | Provera |
|---|---|---|---|---|---|
| TMA-MCP-1.2 | Ensure server capability baseline is established and documentedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-1.4 | Ensure MCP client and server identity metadata is captured and validated against the asset inventorymcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-2.4 | Ensure required MCP request metadata headers are present and consistent with the request bodymcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-2.5 | Ensure Origin header is validated on all Streamable HTTP requests to prevent DNS rebinding attacksmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-3.1.1 | Ensure stdio server credentials are sourced from the environment or OS credential storemcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-3.1.2 | Ensure OIDC/OAuth 2.1 or short-lived API tokens are used for remote serversmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-3.2.3 | Ensure server-provided tool annotations are not relied upon for authorization or HITL gating decisionsmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-3.3.1 | Ensure OAuth tokens are audience-bound to the MCP server using Resource Indicatorsmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-4.1.3 | Ensure Elicitation requests are consented, redacted, and identity-boundmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-4.2.1 | Ensure filesystem scope is restricted to least privilege and enforced by OS-level controlsmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-4.2.3 | Ensure untrusted Resource URIs are not directly dereferenced outside MCP without scheme and destination policymcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-4.3.1 | Ensure MCP Apps content is rendered in sandboxed isolation with Content Security Policy enforced from declared metadatamcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-4.3.2 | Ensure MCP Apps permission requests default-deny, all app-to-host messages are logged, and high-risk channels are consentedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-5.1.1 | Ensure tool schemas and argument types are validatedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-5.1.2 | Ensure resource templates with explicit URI patterns and MIME types are usedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-5.2.2 | Ensure sessions are not used as authentication and, where present, are bound to user identitymcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-5.4.1 | Ensure path traversal and arbitrary filesystem access are preventedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-6.1 | Ensure model context is minimized and MIME handling is honoredmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-6.3 | Ensure outbound proxy and DNS controls are applied for resource fetchersmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-7.1.1 | Ensure lifecycle and invocation metadata is recordedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-7.1.2 | Ensure non-null JSON-RPC request IDs are enforced and included in audit logsmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-7.2.1 | Ensure alerts are generated on audience and issuer validation failuresmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-8.1 | Ensure third-party MCP servers and connectors are vetted and allowlists are enforcedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |
| TMA-MCP-9.2 | Ensure the MCP server process is confined to its working set by OS-level kernel-enforced controlsmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Automatska |
| TMA-MCP-10.1 | Ensure safe, static resources are cached with freshness limits and per-user data is never shared-cachedmcp-server · Nivo 1 | mcp-server | Visoka | 1 | Ručni pregled |