Is `mcp` safe?

7 fixed advisories Facts from the mcp-audit registry about the pypi package mcp. The same data is served as JSON.

Check it from your terminal

mcp-audit vet mcp --ecosystem pypi

Offline: it uses the registry bundled with mcp-audit. mcp-audit update-registry fetches the newest one.

Registry facts

Maintainer	Anthropic
Verified publisher	yes
Entry last checked	2026-08-22
Hash pins	yes; check them with `mcp-audit scan --verify-hashes`
Provenance expected	yes; a missing Sigstore attestation is reported (`ATTEST-013`) with `--verify-signatures`
Repository	https://github.com/modelcontextprotocol/python-sdk

Recorded advisories 7

Advisories for mcp
Advisory	CVSS	Summary	Fixed in
CVE-2025-53365	not recorded	MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service	1.10.0
CVE-2025-53366	not recorded	MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS	1.9.4
CVE-2025-66416	not recorded	Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default	1.23.0
CVE-2026-52869	not recorded	MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal	1.27.2
CVE-2026-52870	not recorded	MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks	1.27.2
CVE-2026-59950	not recorded	MCP Python SDK: WebSocket server transport does not support Host/Origin validation	1.28.1
CVE-2026-59951	not recorded	MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion	2.2.0

Advisories with no recorded fix are listed first. CVE IDs link to NVD, GHSA IDs to GitHub and other IDs to OSV. A fixed advisory affects only versions below its fix; vet exits 1 only for advisories with no fix.

What it can do

No capability tags are recorded for this package yet.

Check how you run it

This page describes the public package. What matters is your setup: which version you pin, which secrets you pass, and which other servers sit next to it.

mcp-audit check

Badge for your README

mcp-audit7 fixed CVEs

Preview drawn by this page. The real badge is rendered by shields.io from this JSON and updates when the registry does.

[![mcp-audit](https://img.shields.io/endpoint?url=https://mcp-audit.dev/v1/badge/pypi/mcp.json)](https://mcp-audit.dev/servers/pypi/mcp/)

Is mcp safe?