Security Charter changedcommunity/interest-groups/security
Nearest release: v2.1.246, published 8 hours before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 26 Aug 2026 03:23 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 22 Oct 2026 20:37 UTC.
Upstream edited
Recorded here
Lines+13added
Lines−13removed
From line
9
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits4to this page, all time
The whole hunk
from line 9, old and new numbered
/
from line 9
99## Mission Statement
1010
1111The Security Interest Group catalogs MCP-specific threats, reviews security-relevant proposals, and
12scopes validated problems into focused Working Groups or [SEPs](/community/sep-guidelines).
12scopes validated problems into focused Working Groups or [SEPs](/community/sep-guidelines.md).
1313
1414## Scope
1515
from line 33
3333 area for stdio and other non-HTTP transports where the HTTP authorization specification does not
3434 apply
3535* **Security Best Practices documentation**: authoring and reviewing entries in the
36 [Security Best Practices](/docs/tutorials/security/security_best_practices) guidance, including
36 [Security Best Practices](/docs/tutorials/security/security_best_practices.md) guidance, including
3737 liaising with external bodies such as OWASP GenAI and CoSAI on MCP-specific content
3838* **Vulnerability disclosure routing**: providing a known point of contact for reporters who have
3939 filed a private security advisory against an MCP repository and need help reaching the right
from line 42
4242### Out of Scope
4343
4444* **Authorization protocol mechanics**: OAuth flows, scopes, client registration, and token handling
45 belong to the [Authorization IG](/community/interest-groups/auth) and its spawned Working Groups
45 belong to the [Authorization IG](/community/interest-groups/auth.md) and its spawned Working Groups
4646* **Transport wire security**: TLS, mTLS, and certificate handling belong to the Transports WG
4747* **Tool annotation design**: the annotation model itself belongs to the
48 [Tool Annotations IG](/community/interest-groups/tool-annotations). This group provides security
48 [Tool Annotations IG](/community/interest-groups/tool-annotations.md). This group provides security
4949 requirements as input
5050* **Registry service operation**: running and securing the hosted Registry service belongs to the
51 [Registry WG](/community/working-groups/registry). This group provides threat input on provenance and
51 [Registry WG](/community/working-groups/registry.md). This group provides threat input on provenance and
5252 publishing
5353* **Product-specific hardening guides**: step-by-step configuration for individual host applications
5454 or cloud platforms is documentation for those products rather than protocol work
5555* **Competitively sensitive or non-public business information**, per the
56 [MCP Antitrust Policy](/community/antitrust)
56 [MCP Antitrust Policy](/community/antitrust.md)
5757
5858### Related Groups
5959
60* **[Authorization IG](/community/interest-groups/auth)**: token confusion, audience mismatch, and SSRF in
60* **[Authorization IG](/community/interest-groups/auth.md)**: token confusion, audience mismatch, and SSRF in
6161 metadata discovery sit at the boundary between the two groups
62* **[Tool Annotations IG](/community/interest-groups/tool-annotations)**: trust and sensitivity annotations
62* **[Tool Annotations IG](/community/interest-groups/tool-annotations.md)**: trust and sensitivity annotations
6363 ([SEP-1913](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1913)) span both
6464 groups
65* **[Interceptors WG](/community/working-groups/interceptors)**: interceptors are the primary enforcement
65* **[Interceptors WG](/community/working-groups/interceptors.md)**: interceptors are the primary enforcement
6666 point for runtime security decisions surfaced here
67* **[Server Card WG](/community/working-groups/server-card) / [Registry WG](/community/working-groups/registry)**:
67* **[Server Card WG](/community/working-groups/server-card.md) / [Registry WG](/community/working-groups/registry.md)**:
6868 server identity, provenance, and discovery metadata intersect with admission and supply-chain
6969 concerns
70* **[Transports WG](/community/working-groups/transports)**: stdio process isolation and unauthenticated method surface
70* **[Transports WG](/community/working-groups/transports.md)**: stdio process isolation and unauthenticated method surface
7171* **SDK Maintainers**: coordinated handling of SDK security advisories and cross-SDK security
7272 defaults
7373
from line 88
8888| Stefano Ortolani | Broadcom | [@ostefano](https://github.com/ostefano) | `ostefano.` | Participant |
8989
9090Open to anyone. Join the `#security-ig` channel on the
91[MCP Contributors Discord](/community/communication#discord). Calls are open and active
91[MCP Contributors Discord](/community/communication.md#discord). Calls are open and active
9292participation is highly encouraged. The group is looking for contributors who will engage with
9393proposals and help drive work forward rather than observe.
9494
from line 118
118118| — | Runtime drift: `list_changed` semantics after approval | Open | — |
119119| — | Supply-chain integrity: protocol, registry, or companion standard | Open | — |
120120| — | Tool identity across servers | Open | — |
121| — | Capability declarations: hints or contracts (joint with [Tool Annotations IG](/community/interest-groups/tool-annotations)) | Open | — |
121| — | Capability declarations: hints or contracts (joint with [Tool Annotations IG](/community/interest-groups/tool-annotations.md)) | Open | — |
122122
123123## Changelog
124124
No line in this hunk matches that.