CIS publishes 55-rule MCP security benchmark

The Center for Internet Security released a free MCP Server Benchmark v1.0.0 with 55 prescriptive recommendations across 10 security domains, covering local and remote deployments. Each recommendation includes a rationale, audit procedure, and remediation guidance, spanning authentication, data protection, supply-chain security, isolation, and resource limits. This turns MCP security from integration folklore into an auditable deployment checklist; teams extending MCP’s stateless infrastructure shift should run it against every server before granting agents access to production data.