MCP workshop using Golang
mcp-workshop
This workshop provides a comprehensive guide to building both MCP (Model Context Protocol) servers and clients using the Go programming language. You will learn how to leverage MCP to streamline your workflow and enhance your development environment.
Table of Contents
MCP Inspector
The MCP Inspector is a developer tool designed for testing and debugging MCP servers. Similar to Postman, it enables you to send requests to MCP servers and view their responses. This tool is invaluable for developers working with MCP, providing a streamlined workflow for server interaction and troubleshooting.
OAuth in MCP
The following diagrams illustrate the OAuth flow within MCP, including the sequence of communication between each role.
Sequence diagram showing communication with each role separately.
For more information on OAuth in MCP, refer to the Let's fix OAuth in MCP or the MCP Authorization documentation.
MCP Vulnerabilities
The following are some known vulnerabilities in MCP implementations:
- Command Injection (Impact: Moderate 🟡)
- Tool Poisoning (Impact: Severe 🔴)
- Open Connections via SSE (Impact: Moderate 🟠)
- Privilege Escalation (Impact: Severe 🔴)
- Persistent Context Misuse (Impact: Low, but risky 🟡)
- Server Data Takeover/Spoofing (Impact: Severe 🔴)
For more information, refer to the MCP Vulnerabilities.