MCP security and compliance review checklist
Review executable code, delegated access, data paths and incident controls before rollout.
Updated
Treat an MCP server as an access path to tools and data. Local servers can execute code with the process account's permissions. Remote services can receive data and credentials. Review both paths.