MCP Security Fundamentals Course
Learn how to safe the Model Context Protocol (MCP), the norm that connects AI agents to tools and data. This way walks through how MCP works, the "lethal trifecta" of delegate risk, and all item on the OWASP MCP Top 10, all alongside a real-world event and the fixes that halt it. Course created by Dan Barahona, originator of AI Security University. Get your liberated certificate: obtain the final quiz at https://aisec.university/fcc-mcp You'll get a certificate of completion, a sign for your LinkedIn profile, and 2 CPE credits. More liberated AI safety courses, weekly live events and a community of practitioners: https://aisec.university ⭐️ Chapters ⭐️ - 0:00:00 Introduction - 0:01:02 Welcome - 0:02:30 MCP Breach: Patient Zero - 0:07:34 Before & After MCP - 0:11:21 Application Architecture Eras - 0:14:27 Anatomy of MCP - 0:22:34 The Lethal Trifecta - 0:31:31 Intro to the Top 10 - 0:33:51 MCP01: Token Mismanagement & Secret Exposure - 0:43:20 MCP02: Privilege Escalation via Scope Creep - 0:50:20 MCP03: Tool Poisoning - 0:58:50 MCP04: Supply Chain & Dependency Tampering - 1:07:01 MCP05: Command Injection & Execution - 1:15:48 MCP06: Intent Flow Subversion - 1:24:56 MCP07: Insufficient Authentication - 1:34:06 MCP08: Lack of Audit and Telemetry - 1:44:20 MCP09: Shadow MCP Servers - 1:51:53 MCP10: Context Injection & Over-Sharing - 1:59:51 Best Practices & Course Conclusion - 2:10:20 Get your certificate ❤️ Support for this conduit comes from our allies at Scrimba – the coding phase that's reinvented interactive learning: https://scrimba.com/freecodecamp 🎉 Thanks to our Champion and Sponsor supporters: 👾 @omerhattapoglu1158 👾 @goddardtan 👾 @akihayashi6629 👾 @kikilogsin 👾 @anthonycampbell2148 👾 @tobymiller7790 👾 @rajibdassharma497 👾 @CloudVirtualizationEnthusiast 👾 @adilsoncarlosvianacarlos 👾 @martinmacchia1564 👾 @ulisesmoralez4160 👾 @_Oscar_ 👾 @jedi-or-sith2728 👾 @justinhual1290 -- Learn to code for liberated and get a developer job: https://www.freecodecamp.org Read hundreds of articles on programming: https://freecodecamp.org/news