WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe - Virtual Stage • Jul 2, 2026 • Session details

Security in Model Context Protocol: An Analysis of the OWASP MCP Top 10

Jose Manuel Ortega

Standardizing AI integrations with the Model Context Protocol introduces a virtually infinite attack surface. Master the OWASP MCP Top 10 to mitigate indirect prompt injections and secure your deployments.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to the Model Context Protocol security agenda

An overview of securing the new attack surface introduced by standardizing AI tool integrations.

#2 about 3 min

Fundamentals and architecture of the Model Context Protocol

How standardizing AI connections through JSON RPC introduces trust boundaries at every component interaction.

#3 about 4 min

Understanding the four core security primitives of MCP

Analyzing the distinct security profiles of tools, resources, prompts, and sampling in AI integrations.

#4 about 2 min

Overview of the OWASP MCP top ten vulnerabilities

A catalog of the most critical risk categories affecting standard AI tool deployments.

#5 about 3 min

Mitigating indirect prompt injection in language models

How malicious instructions embedded in tool descriptions can hijack autonomous model execution without user interaction.

#6 about 3 min

Preventing insecure tool execution through strict schema validation

Why trusting models with arbitrary parameters requires treating every tool call like an untrusted web request.

#7 about 4 min

Addressing data exfiltration and insufficient authorization in MCP

How attackers exploit absent protocol-level authentication to turn compromised models into sensitive data extraction tools.

#8 about 3 min

Securing object level authorization and preventing data exposure

Preventing unauthorized access to sensitive database records and API keys inadvertently exposed in resource payloads.

#9 about 2 min

Preventing server-side request forgery and insecure deserialization

Blocking prompt-injected models from attacking internal infrastructure or executing arbitrary code via unverified payload inputs.

#10 about 4 min

Mitigating logging failures and supply chain vulnerabilities

Why comprehensive tool invocation logs and strict dependency versioning are essential for detecting hidden package backdoors.

#11 about 3 min

Adapting the STRIDE threat model for MCP deployments

Mapping spoofing, tampering, repudiation, information disclosure, and privilege escalation to AI connector architecture.

#12 about 3 min

Implementing a layered authentication and authorization stack

Securing connections using mutual TLS, short-lived OAuth tokens, and strict per-capability role-based access controls.

#13 about 3 min

Enforcing strict input validation and payload security rules

Defending against protocol abuse by rejecting unknown fields and enforcing strict JSON schemas over client-supplied parameters.

#14 about 3 min

Selecting security tooling for static analysis and monitoring

Utilizing specialized code scanners, dynamic proxies, and runtime tracing to identify misconfigurations across the deployment lifecycle.

#15 about 3 min

Designing a reference architecture with network trust zones

Isolating backend AI servers by routing all untrusted tool interactions through a stateless security gateway.

#16 about 3 min

Integrating security controls into the software development lifecycle

Automating vulnerability scanning, dependency checking, and fuzz testing during continuous integration and deployment pipelines.

#17 about 4 min

Implementing a practical security checklist for production environments

Verifying authentication, least privilege access, data sanitization, and observability requirements before deploying AI integrations.

#18 about 3 min

Analyzing a real supply chain attack scenario

Tracing how a trojanized dependency exfiltrates data by silently embedding malicious instructions into tool description metadata.

#19 about 4 min

Community resources and essential security takeaways for MCP

Leveraging community standards to build resilient, defense-in-depth AI applications that anticipate evolving attack vectors.

Matching moments

2:36 min

Core concepts and advantages of the Model Context Protocol

Rishabh Budhiraja Rishabh Budhiraja +1 · World Congress 2026 Europe

2:58 min

Origin and purpose of the Model Context Protocol

David Soria Parra David Soria Parra +3 · World Congress 2026 Europe

2:21 min

Integrating Model Context Protocol for non-technical users

Jordan Tigani Jordan Tigani · World Congress 2026 Europe

5:09 min

Securing AI agents against malicious MCP servers

Gbadebo Bello Gbadebo Bello · Europe 2026 Virtual

1:20 min

Utilizing industry threat models for AI security

Balázs Kiss · World Congress 2023

1:35 min

Integrating diagnostic signals using Model Context Protocol

Jayant Tyagi Jayant Tyagi · World Congress 2026 North America

More from World Congress 2026 Europe - Virtual Stage

One Does Not Simply Make Architecture Decisions Alone thumbnail
36:15
3 months ago

One Does Not Simply Make Architecture Decisions Alone

Vladas Diržys

From Black Box to Glass Box : Bedrock AgentCore Observability thumbnail
21:15
3 months ago

From Black Box to Glass Box : Bedrock AgentCore Observability

Yasemin Aktürk

Leading in Rhythm: How Women Make Better Decisions with Biological Intelligence thumbnail
30:41
3 months ago

Leading in Rhythm: How Women Make Better Decisions with Biological Intelligence

Julia Grosse

Better Together: Leveraging Your Observability Tools as a SIEM thumbnail
39:06
3 months ago

Better Together: Leveraging Your Observability Tools as a SIEM

Mathias Palmersheim

ChatGPT Apps: From Chat to Checkout thumbnail
30:29
3 months ago

ChatGPT Apps: From Chat to Checkout

Aaron Koivunen

Interior Decorating (TypeScript Decorators) thumbnail
29:22
3 months ago

Interior Decorating (TypeScript Decorators)

Michael Dowden

Upcoming sessions on this topic

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beyond File Dumps: Context Engineering for Coding Agents

  • Animesh Dutta

    Arm

    Senior Software Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Prompt Debt: Why Your AI System Is Frozen in Time

  • Suriya Prakash B

    Red Hat

    Principal Software Engineer

Related videos

Making (and Breaking) Agents by Adding 1,000 MCP Tools thumbnail
24:48
World Congress 2026 North America • 21 days ago

Making (and Breaking) Agents by Adding 1,000 MCP Tools

Guillaume Lebedel

From APIs to MCP: Enterprise Governance, Registry, and Controls thumbnail
22:30
World Congress 2026 Europe • 3 months ago

From APIs to MCP: Enterprise Governance, Registry, and Controls

Stefan Mesquita

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale thumbnail
25:54
World Congress 2026 North America • 22 days ago

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

The Why and How of WebMCP - Alex Nahas thumbnail
53:04
Coffee With Developers • 8 months ago

The Why and How of WebMCP - Alex Nahas

Alex Nahas

Plan to link your LLM to your production database? What could possibly go wrong? thumbnail
28:01
Europe 2026 Virtual • 4 months ago

Plan to link your LLM to your production database? What could possibly go wrong?

Calvin Seward

MCP Mashups: How AI Agents are Reviving the Programmable Web thumbnail
23:17
World Congress 2025 • about 1 year ago

MCP Mashups: How AI Agents are Reviving the Programmable Web

Angie Jones

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.