developing-mcp

Security scan

AI scan High

VirusTotal scan Unknown

What looks risky

Prompt injection 7.5

references/SECURITY.md

contains direct instruction override language

Privacy exfiltration 5.8

references/BUILDING-CLIENTS.md

mentions sensitive credential material

Privacy exfiltration 5.8

references/BUILDING-SERVERS.md

mentions sensitive credential material

Comprehensive MCP (Model Context Protocol) development guide covering architecture (Host/Client/Server roles, Tools/Resources/Prompts, Control Segregation), server and client implementation with TypeScript SDK, protocol specification (JSON-RPC 2.0, stdio/Streamable HTTP), and security threats (Tool Poisoning, Shadowing, Rug Pull, Prompt Injection). MUST load when building MCP servers or clients. For Claude Code plugin MCP configuration, use plugin-dev:mcp-integration instead. For MCP integration with Vercel AI SDK in web apps, see integrating-ai-web-apps.