Glossary
Key terms and definitions for MCP security.
MCP
Model Context Protocol — an open protocol by Anthropic standardizing AI-to-tool connections
CMSP
Certified MCP Security Professional — certification for MCP security expertise
Tool Poisoning
Injecting malicious instructions into MCP tool descriptions to manipulate AI behavior
STRIDE
Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege
SLSA
Supply chain Levels for Software Artifacts — framework for supply chain security
SBOM
Software Bill of Materials — machine-readable inventory of all software components
Rug-Pull
Server behavior changes after review and approval, exploiting established trust
Confused Deputy
A privileged entity tricked into performing actions on behalf of an attacker
JSON-RPC 2.0
Lightweight remote procedure call protocol underlying MCP communication
Prompt Injection
Injecting instructions into AI context via tool responses or descriptions