Reverse engineer anything with agents, from app behavior down to native binaries.
OWASP MCP Governance and Risk Project
A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents connect to external tools, data sources, and…
Install: git clone https://github.com/OWASP/OWASP-MCP-Governance-and-Risk-Project
Install
$
git clone https://github.com/OWASP/OWASP-MCP-Governance-and-Risk-ProjectInstall command taken from the project's README or registry entry. Always review code before running it.
README excerpt
Read full README on GitHub →MCP Governance & Risk Framework
A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents connect to external tools, data sources, and systems.
MCP adoption is accelerating across engineering teams. Agents can read wikis, open pull requests, post to Slack, and trigger production workflows often at machine speed and without the user seeing every intermediate step. This repository provides a structured way to answer the central governance question:
Should this MCP server be allowed in our environment, and under what controls?
Maintained by Vandana Verma Sehgal
What's in this repository
| Document | Description |
|---|---|
| mcp-governance-risk-framework-v1.0.md | Main guide (v1.0): inventory, classification, risk scoring, governance principles, and rollout guidance |
| framework-mapping.md | Framework mapping: control mappings to OWASP MCP Top 10, OWASP LLM Top 10, NIST AI RMF, ISO 42001, and SOC 2 |
| reference.md | Reference links: curated external URLs for MCP security, threat modeling, vendor review, and standards |
Framework v1.0 scope
The v1.0 guide covers six core chapters plus a closing appendix. Treat the content in three layers: policy (Chapters 1 and 3), controls (Chapters 2–6 and the appendix control catalog), and checklists (chapter-end and appendix practitioner checklists). Compliance framework mappings live in the companion framework-mapping.md document.
- Chapter 1: Executive Summary
- Chapter 2: Why MCP Needs Governance
- Chapter 3: MCP Governance Principles
- Chapter 4: MCP Asset Inventory
- Chapter 5: MCP Server Classification Model
- Chapter 6: MCP Risk Scoring Model
- Appendix: Closing — control catalog, evidence pack, automated evidence collection and enforcement, client and host governance, cross-server trust test cases, authorization and network exposure test cases, detection and incident response, ten-question maturity check, glossary, and practitioner checklist
Not in v1.0 (planned for future releases): separate approval-workflow chapters, intake forms, risk register templates, and vendor questionnaires. Use the in-guide checklists and evidence pack until those artifacts ship.
Start here by role
CISO / Security leadership
Similar plugs
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype…
User-friendly AI Interface (Supports Ollama, OpenAI API, ...)