Enterprise-Grade Security for the Model Context Protocol (MCP): Frameworks and Mitigation Strategies

J. Kindervag, “Build security into your network’s dna: The zero trust network architecture,” Forrester Research, 2010

2010

Earlier work this paper cites.

S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero trust architecture,” National Institute of Standards and Technology, Tech. Rep. Special Publication 800-207, 2020. [Online]. Available: https://doi.org/10.6028/NIST.SP.800-207

2020

Earlier work this paper cites.

National Institute of Standards and Technology, “Ai 100-2 e2023 adversarial ml - a taxonomy of threats and mitigations,” National Institute of Standards and Technology, Technical Report AI 100-2 e2023, 2023

2023

Earlier work this paper cites.

D. Goodin, “Poisoned ai tools can leak secrets and execute malicious commands,” Ars Technica, February 2024, accessed: 2025-04-10. [Online]. Available: https://arstechnica.com/security/2024/02/poisoned-ai-tools-can-leak-secrets-and-execute-malicious-commands/

2024

Earlier work this paper cites.

Anthropic, “Introducing the model context protocol (mcp),” Anthropic Developer Documentation, 2024, accessed: 2025-04-10. [Online]. Available: https://docs.anthropic.com/claude/protocols/mcp/overview

2025

Cited alongside, same era.

X. Hou, Y. Zhao, S. Wang, and H. Wang, “Model context protocol (mcp): Landscape, security threats, and future research directions,” arXiv preprint arXiv:2503.23278 , 2025. [Online]. Available: https://arxiv.org/abs/2503.23278

Original

2025

Cited alongside, same era.

N. V. Sai and O. Narayan, “Securing agentic AI: A comprehensive threat model and mitigation framework for generative AI agents,” 2025. [Online]. Available: https://arxiv.org/abs/2504.19956

Original

2025

Cited alongside, same era.

Cloud Security Alliance, “Maestro (multi-agent environment, security, threat, risk, & outcome): A novel threat modeling framework for agentic ai,” Cloud Security Alliance Blog, February 2025, accessed: 2025-04-10. [Online]. Available: https://cloudsecurityalliance.org/blog/2025/02/06/agentic-ai-threat-modeling-framework-maestro

K. Huang, A. Sheriff, J. Sotiropoulos, R. F. Del, and V. Lu, “Multi-agentic system threat modelling guide OWASP GenAI security project,” Apr. 2025. [Online]. Available: https://www.researchgate.net/publication/391204915_Multi-Agentic_system_Threat_Modelling_Guide_OWASP_GenAI_Security_Project

2025

Closest in time.

OWASP Foundation, “Announcing the owasp llm and gen ai security project initiative for securing agentic applications,” OWASP Foundation, 2024, accessed: 2025-04-10

2025

Closest in time.

SSOJet, “Cloudflare supports remote hosting for anthropic’s mcp servers - ssojet,” SSOJet Blog, April 2025, accessed: 2025-04-10. [Online]. Available: https://ssojet.com/blog/cloudflare-supports-remote-hosting-for-anthropics-mcp-servers/

2025

Closest in time.

E. G. Junior, S. Clinton, C. Hughes, V. Narajala, and T. Holmes, “LLM and GenAI data security best practices,” 2025. [Online]. Available: https://www.researchgate.net/publication/391204648_LLM_and_GenAI_Data_Security_Best_Practices