YouTube Video
Learn how to secure the Model Context Protocol (MCP), the standard that connects AI agents to tools and data. This course walks through how MCP works, the "lethal trifecta" of agent risk, and every item on the OWASP MCP Top 10, each with a real-world incident and the fixes that stop it.
Course created by Dan Barahona, founder of AI Security University.
Get your free certificate: take the final quiz at https://aisec.university/fcc-mcp
You'll get a certificate of completion, a badge for your LinkedIn profile, and 2 CPE credits.
More free AI security courses, weekly live events and a community of practitioners: https://aisec.university
⭐️ Chapters ⭐️
- 0:00:00 Introduction
- 0:01:02 Welcome
- 0:02:30 MCP Breach: Patient Zero
- 0:07:34 Before & After MCP
- 0:11:21 Application Architecture Eras
- 0:14:27 Anatomy of MCP
- 0:22:34 The Lethal Trifecta
- 0:31:31 Intro to the Top 10
- 0:33:51 MCP01: Token Mismanagement & Secret Exposure
- 0:43:20 MCP02: Privilege Escalation via Scope Creep
- 0:50:20 MCP03: Tool Poisoning
- 0:58:50 MCP04: Supply Chain & Dependency Tampering
- 1:07:01 MCP05: Command Injection & Execution
- 1:15:48 MCP06: Intent Flow Subversion
- 1:24:56 MCP07: Insufficient Authentication
- 1:34:06 MCP08: Lack of Audit and Telemetry
- 1:44:20 MCP09: Shadow MCP Servers
- 1:51:53 MCP10: Context Injection & Over-Sharing
- 1:59:51 Best Practices & Course Conclusion
- 2:10:20 Get your certificate
❤️ Support for this channel comes from our friends at Scrimba – the coding platform that's reinvented interactive learning: https://scrimba.com/freecodecamp
🎉 Thanks to our Champion and Sponsor supporters:
👾 @omerhattapoglu1158
👾 @goddardtan
👾 @akihayashi6629
👾 @kikilogsin
👾 @anthonycampbell2148
👾 @tobymiller7790
👾 @rajibdassharma497
👾 @CloudVirtualizationEnthusiast
👾 @adilsoncarlosvianacarlos
👾 @martinmacchia1564
👾 @ulisesmoralez4160
👾 @_Oscar_
👾 @jedi-or-sith2728
👾 @justinhual1290
--
Learn to code for free and get a developer job: https://www.freecodecamp.org
Read hundreds of articles on programming: https://freecodecamp.org/news
Course created by Dan Barahona, founder of AI Security University.
Get your free certificate: take the final quiz at https://aisec.university/fcc-mcp
You'll get a certificate of completion, a badge for your LinkedIn profile, and 2 CPE credits.
More free AI security courses, weekly live events and a community of practitioners: https://aisec.university
⭐️ Chapters ⭐️
- 0:00:00 Introduction
- 0:01:02 Welcome
- 0:02:30 MCP Breach: Patient Zero
- 0:07:34 Before & After MCP
- 0:11:21 Application Architecture Eras
- 0:14:27 Anatomy of MCP
- 0:22:34 The Lethal Trifecta
- 0:31:31 Intro to the Top 10
- 0:33:51 MCP01: Token Mismanagement & Secret Exposure
- 0:43:20 MCP02: Privilege Escalation via Scope Creep
- 0:50:20 MCP03: Tool Poisoning
- 0:58:50 MCP04: Supply Chain & Dependency Tampering
- 1:07:01 MCP05: Command Injection & Execution
- 1:15:48 MCP06: Intent Flow Subversion
- 1:24:56 MCP07: Insufficient Authentication
- 1:34:06 MCP08: Lack of Audit and Telemetry
- 1:44:20 MCP09: Shadow MCP Servers
- 1:51:53 MCP10: Context Injection & Over-Sharing
- 1:59:51 Best Practices & Course Conclusion
- 2:10:20 Get your certificate
❤️ Support for this channel comes from our friends at Scrimba – the coding platform that's reinvented interactive learning: https://scrimba.com/freecodecamp
🎉 Thanks to our Champion and Sponsor supporters:
👾 @omerhattapoglu1158
👾 @goddardtan
👾 @akihayashi6629
👾 @kikilogsin
👾 @anthonycampbell2148
👾 @tobymiller7790
👾 @rajibdassharma497
👾 @CloudVirtualizationEnthusiast
👾 @adilsoncarlosvianacarlos
👾 @martinmacchia1564
👾 @ulisesmoralez4160
👾 @_Oscar_
👾 @jedi-or-sith2728
👾 @justinhual1290
--
Learn to code for free and get a developer job: https://www.freecodecamp.org
Read hundreds of articles on programming: https://freecodecamp.org/news