docs: add security notes for network-exposed MCP servers
This commit is contained in:
parent
e99b655608
commit
2975f605c8
1 changed files with 34 additions and 0 deletions
|
|
@ -3,3 +3,7 @@
|
|||
A repository of servers and clients from the following Model Context Protocol tutorials:
|
||||
- [Quickstart](https://modelcontextprotocol.io/quickstart) – a simple MCP weather server
|
||||
- [Building MCP clients](https://modelcontextprotocol.io/tutorials/building-a-client) – an LLM-powered chatbot MCP client
|
||||
|
||||
## Security Note
|
||||
|
||||
These examples are intentionally minimal. If you expose an MCP server over a network (HTTP/SSE/WebSocket), add authentication and basic hardening (CORS allowlist, request size limits, timeouts, rate limits, and log redaction). See [`SECURITY.md`](./SECURITY.md).
|
||||
|
|
|
|||
Loading…
Reference in a new issue