OWASP MCP Top 10

A list of the most important security threats specific to systems based on the Model Context Protocol, developed within OWASP. It goes beyond generic "prompt injection," cataloging risks such as model misbinding, context spoofing, and covert channels. It signals the maturing of the agentic ecosystem (2026).