Resource suggestion: MCP Security Checklist

[dominiclachance]

Hi, thanks for maintaining this MCP security resource list.

Suggestion for consideration:

• MCP Security Checklist - https://www.wisdomprompt.com/resources/mcp-security-checklist/

It is a practical operational checklist covering MCP server ownership, exposed tools, least-privilege permissions, logging, approval gates, rollback, and governance evidence. It may fit as a checklist/resource for teams moving from MCP security guidance into implementation.

No pressure if it is not a fit. Happy to adjust the description if you prefer a specific format.

[Keesan12]

This looks like a useful addition.

One thing I’d specifically look for in an MCP checklist is whether it stays at static setup guidance or also covers runtime controls:

• approval paths
• trust overrides
• logging/redaction boundaries
• rollback / disable-server steps
• proof of what actually executed

A lot of teams have the first half documented and still miss the runtime evidence piece. That has been the biggest practical shift for me using MartinLoop around governed runs: once a checklist forces people to think about receipts and post-run review, the guidance becomes much more production-ready.