MCP Security Fundamentals Course
Learn how to secure the Model Context Protocol (MCP), the standard that connects AI agents to tools and data. This course walks through how MCP works, the "lethal trifecta" of agent risk, and every item on the OWASP MCP Top 10, each with a real-world incident and the fixes that stop it.Course created by Dan Barahona, founder of AI Security University.
Get your free certificate: take the final quiz at https://aisec.university/fcc-mcp
You'll get a certificate of completion, a badge for your LinkedIn profile, and 2 CPE credits.
More free AI security courses, weekly live events and a community of practitioners: https://aisec.university
⭐️ Chapters ⭐️
- 0:00:00 Introduction
- 0:01:02 Welcome
- 0:02:30 MCP Breach: Patient Zero
- 0:07:34 Before & After MCP
- 0:11:21 Application Architecture Eras
- 0:14:27 Anatomy of MCP
- 0:22:34 The Lethal Trifecta
- 0:31:31 Intro to the Top 10
- 0:33:51 MCP01: Token Mismanagement & Secret Exposure
- 0:43:20 MCP02: Privilege Escalation via Scope Creep
- 0:50:20 MCP03: Tool Poisoning
- 0:58:50 MCP04: Supply Chain & Dependency Tampering
- 1:07:01 MCP05: Command Injection & Execution
- 1:15:48 MCP06: Intent Flow Subversion
- 1:24:56 MCP07: Insufficient Authentication
- 1:34:06 MCP08: Lack of Audit and Telemetry
- 1:44:20 MCP09: Shadow MCP Servers
- 1:51:53 MCP10: Context Injection & Over-Sharing
- 1:59:51 Best Practices & Course Conclusion
- 2:10:20 Get your certificate
❤️ Support for this channel comes from our friends at Scrimba – the coding platform that's reinvented interactive learning: https://scrimba.com/freecodecamp
🎉 Thanks to our Champion and Sponsor supporters:
👾 @omerhattapoglu1158
👾 @goddardtan
👾 @akihayashi6629
👾 @kikilogsin
👾 @anthonycampbell2148
👾 @tobymiller7790
👾 @rajibdassharma497
👾 @CloudVirtualizationEnthusiast
👾 @adilsoncarlosvianacarlos
👾 @martinmacchia1564
👾 @ulisesmoralez4160
👾 @_Oscar_
👾 @jedi-or-sith2728
👾 @justinhual1290
--
Learn to code for free and get a developer job: https://www.freecodecamp.org
Read hundreds of articles on programming: https://freecodecamp.org/news Receive SMS online on sms24.me
TubeReader video aggregator is a website that collects and organizes online videos from the YouTube source. Video aggregation is done for different purposes, and TubeReader take different approaches to achieve their purpose.
Our try to collect videos of high quality or interest for visitors to view; the collection may be made by editors or may be based on community votes.
Another method is to base the collection on those videos most viewed, either at the aggregator site or at various popular video hosting sites.
TubeReader site exists to allow users to collect their own sets of videos, for personal use as well as for browsing and viewing by others; TubeReader can develop online communities around video sharing.
Our site allow users to create a personalized video playlist, for personal use as well as for browsing and viewing by others.
@YouTubeReaderBot allows you to subscribe to Youtube channels.
By using @YouTubeReaderBot Bot you agree with YouTube Terms of Service.
Use the @YouTubeReaderBot telegram bot to be the first to be notified when new videos are released on your favorite channels.
Look for new videos or channels and share them with your friends.
You can start using our bot from this video, subscribe now to MCP Security Fundamentals Course
What is YouTube?
YouTube is a free video sharing website that makes it easy to watch online videos. You can even create and upload your own videos to share with others. Originally created in 2005, YouTube is now one of the most popular sites on the Web, with visitors watching around 6 billion hours of video every month.
