MarketNow Registry / Security / OWASP-MCP-Governance-and-Risk-Project

OWASP-MCP-Governance-and-Risk-Project

A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents connect to external tools, data sources, and systems.

Security v0.0.0 by OWASP

Trust score

70/100

Install risk

Review advised

GitHub stars

Source

github

Indexed

2026-09-10

Install

$ git clone https://github.com/OWASP/OWASP-MCP-Governance-and-Risk-Project

Heuristic signals advise review before installing: young package, low adoption, stale repository, or name similarity to a popular package.

Adoption evidence: 77 GitHub stars.

How MarketNow scored this

Sentinel Index Heuristics — a security-first estimate from public signals:

Package age and release activity (stale repositories lose points)
Verified adoption: registry downloads or GitHub stars, not follower counts
Typosquat distance against the 150 most-installed MCP packages
Injection markers scanned in the package description

Heuristic, not a guarantee. For verified agent credentials and revocation, see the MarketNow Trust API.

What is OWASP-MCP-Governance-and-Risk-Project?

A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents connect to external tools, data sources, and systems. Indexed by MarketNow with trust 70/100 (Review advised).

How do I install it?

Run $ git clone https://github.com/OWASP/OWASP-MCP-Governance-and-Risk-Project Heuristic signals advise review before installing: young package, low adoption, stale repository, or name similarity to a popular package.

What does the trust score mean?

Security-first heuristic over public signals (age, adoption, typosquat distance, injection markers). It is not a popularity ranking and not a guarantee of safety. OWASP-MCP-Governance-and-Risk-Project scores 70/100.