Back to standardsMCP Server Standard
MCP is an exposure mechanism. This standard governs server registration, security, and lifecycle.
Minimum controls
- MCP server registered with owner and approved hosting
- Exposed tools/resources/prompts listed and versioned
- Authentication and authorization required
- Rate limits and request logging enabled
- Secrets in approved vault and runbook assigned
Related records and procedures
Records: MCP Server, MCP Tool Manifest, MCP Resource, MCP Deployment.
Procedures: Register server, publish manifest, deploy, rotate credentials, retire.