Kural gezgini
Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.
55 kural bulundu/ 11.219Sayfa 1 / 3
| Kimlik | Başlık | Platform | Önem derecesi | Düzey | Denetim |
|---|---|---|---|---|---|
| TMA-MCP-1.2 | Ensure server capability baseline is established and documentedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-1.4 | Ensure MCP client and server identity metadata is captured and validated against the asset inventorymcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-2.4 | Ensure required MCP request metadata headers are present and consistent with the request bodymcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-2.5 | Ensure Origin header is validated on all Streamable HTTP requests to prevent DNS rebinding attacksmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-3.1.1 | Ensure stdio server credentials are sourced from the environment or OS credential storemcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-3.1.2 | Ensure OIDC/OAuth 2.1 or short-lived API tokens are used for remote serversmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-3.2.3 | Ensure server-provided tool annotations are not relied upon for authorization or HITL gating decisionsmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-3.3.1 | Ensure OAuth tokens are audience-bound to the MCP server using Resource Indicatorsmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-4.1.3 | Ensure Elicitation requests are consented, redacted, and identity-boundmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-4.2.1 | Ensure filesystem scope is restricted to least privilege and enforced by OS-level controlsmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-4.2.3 | Ensure untrusted Resource URIs are not directly dereferenced outside MCP without scheme and destination policymcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-4.3.1 | Ensure MCP Apps content is rendered in sandboxed isolation with Content Security Policy enforced from declared metadatamcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-4.3.2 | Ensure MCP Apps permission requests default-deny, all app-to-host messages are logged, and high-risk channels are consentedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-5.1.1 | Ensure tool schemas and argument types are validatedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-5.1.2 | Ensure resource templates with explicit URI patterns and MIME types are usedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-5.2.2 | Ensure sessions are not used as authentication and, where present, are bound to user identitymcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-5.4.1 | Ensure path traversal and arbitrary filesystem access are preventedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-6.1 | Ensure model context is minimized and MIME handling is honoredmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-6.3 | Ensure outbound proxy and DNS controls are applied for resource fetchersmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-7.1.1 | Ensure lifecycle and invocation metadata is recordedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-7.1.2 | Ensure non-null JSON-RPC request IDs are enforced and included in audit logsmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-7.2.1 | Ensure alerts are generated on audience and issuer validation failuresmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-8.1 | Ensure third-party MCP servers and connectors are vetted and allowlists are enforcedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |
| TMA-MCP-9.2 | Ensure the MCP server process is confined to its working set by OS-level kernel-enforced controlsmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Otomatik |
| TMA-MCP-10.1 | Ensure safe, static resources are cached with freshness limits and per-user data is never shared-cachedmcp-server · Düzey 1 | mcp-server | Yüksek | 1 | Manuel inceleme |