| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:7d1a024c-1df3-fdbf-a11b-b5a1c1b22fb6 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | DDA0:1FFB57:AC750:E4E47:6A5ECE15 |
| html-safe-nonce | 878d881b6d3ec4902b3acbd2fc5854a8f55d830ffd9a0b55b23a4d4bbfd7023c |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEREEwOjFGRkI1NzpBQzc1MDpFNEU0Nzo2QTVFQ0UxNSIsInZpc2l0b3JfaWQiOiIzODc0MDgxNzAyNzM1MTcxMDkzIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 2a60745b34874c1e3bc383d8a7ff8193048baca62442e783e78d8514f00a6bd3 |
| hovercard-subject-tag | pull_request:2865688918 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///pull_requests/show/files |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
| twitter:image | https://avatars.githubusercontent.com/u/53200638?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/53200638?s=400&v=4 |
| og:image:alt | Based on recent discoveries, updating the SBP document with guidance. |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 9bd00899c80f8b6ea4e7a96c99290af4722b0befdf9e021b19232cbd6f993660 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/modelcontextprotocol/modelcontextprotocol git https://github.com/modelcontextprotocol/modelcontextprotocol.git |
| octolytics-dimension-user_id | 182288589 |
| octolytics-dimension-user_login | modelcontextprotocol |
| octolytics-dimension-repository_id | 862570523 |
| octolytics-dimension-repository_nwo | modelcontextprotocol/modelcontextprotocol |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 862570523 |
| octolytics-dimension-repository_network_root_nwo | modelcontextprotocol/modelcontextprotocol |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 9996307881fdf9017d864a20b3dfe5aae4dddd3e |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F1554%2Ffiles |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| Code QualityEnforce quality at merge | https://github.com/features/code-quality |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F1554%2Ffiles |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=modelcontextprotocol%2Fmodelcontextprotocol |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
|
modelcontextprotocol
| https://github.com/modelcontextprotocol |
| modelcontextprotocol | https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Notifications
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Fork
1.7k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Star
8.6k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Code
| https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Issues
111
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues |
|
Pull requests
80
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulls |
|
Discussions
| https://github.com/modelcontextprotocol/modelcontextprotocol/discussions |
|
Actions
| https://github.com/modelcontextprotocol/modelcontextprotocol/actions |
|
Projects
| https://github.com/modelcontextprotocol/modelcontextprotocol/projects |
|
Models
| https://github.com/modelcontextprotocol/modelcontextprotocol/models |
|
Security and quality
0
| https://github.com/modelcontextprotocol/modelcontextprotocol/security |
|
Insights
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulse |
|
Code
| https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Issues
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues |
|
Pull requests
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulls |
|
Discussions
| https://github.com/modelcontextprotocol/modelcontextprotocol/discussions |
|
Actions
| https://github.com/modelcontextprotocol/modelcontextprotocol/actions |
|
Projects
| https://github.com/modelcontextprotocol/modelcontextprotocol/projects |
|
Models
| https://github.com/modelcontextprotocol/modelcontextprotocol/models |
|
Security and quality
| https://github.com/modelcontextprotocol/modelcontextprotocol/security |
|
Insights
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulse |
| Sign up for GitHub
| https://github.com/signup?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fissues%2Fnew%2Fchoose |
| terms of service | https://docs.github.com/terms |
| privacy statement | https://docs.github.com/privacy |
| Sign in | https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fissues%2Fnew%2Fchoose |
| mcp-commander | https://github.com/apps/mcp-commander |
| main | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/main |
| localden/sbp | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/localden/sbp |
|
Conversation
18
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554 |
|
Commits
12
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits |
|
Checks
12
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/checks |
|
Files changed
1
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
|
(docs): Update documentation for MCP security best practices
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files#top |
|
Show all changes
12 commits
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
|
a1a54af
Update security_best_practices.mdx
localden Sep 26, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/a1a54af3315c3d57c1992f9e5244ab9c5b9f6004 |
|
09654b2
Merge branch 'main' into localden/sbp
localden Sep 26, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/09654b295ddb1b8970f1e572d3966a39a3aea0f2 |
|
b04bf69
Update security_best_practices.mdx
localden Sep 26, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/b04bf69c4bc1eff27ab2d7220ce9275b4063b221 |
|
4fb2c53
Merge branch 'localden/sbp' of https://github.com/modelcontextprotoco…
localden Sep 26, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/4fb2c5334f0346903198dd6244ded1207ddbf247 |
|
a95e366
Update security_best_practices.mdx
localden Sep 26, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/a95e3664be39c40a41f6622d71e0703c21d39051 |
|
1bb15ac
Update security_best_practices.mdx
localden Sep 26, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/1bb15acfb77b7608339a0fa61bb2cb9c7bbcc089 |
|
4b3be3e
Merge branch 'main' into localden/sbp
localden Nov 5, 2025
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/4b3be3eb84f9b9276847ce55df7c0d551e2f83b1 |
|
e6c4c47
Merge remote-tracking branch 'origin/main' into localden/sbp
localden Mar 9, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/e6c4c47eb38130d73f32ed5f5d9dbb5765db112b |
|
60261b6
Move OAuth URL validation content to relocated SBP doc
localden Mar 9, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/60261b65bddf630375251af868070e98d92a2180 |
|
39ac7cb
Update docs/docs/tutorials/security/security_best_practices.mdx
localden Mar 18, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/39ac7cbfc3e89a2532ae9dd62cc632fa25a7738f |
|
1754662
Clarify http:// scope and fix stdio section anchor
localden Mar 24, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/175466261e762f93e3cee17121a15e81faacbaf0 |
|
df7ae6b
Wrap stdio escalation paragraph at 100 chars
localden Mar 24, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/commits/df7ae6b06fc60d52ffa5284f064778df3fc12b19 |
|
Clear filters
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/.github/CODEOWNERS#L24 |
| docs/docs/tutorials/security/security_best_practices.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files#diff-deedfc588a048ecb5a91476f796e5fdda8cd65fc0d6edc714d75524aedb4bafc |
|
View file
| https://github.com/modelcontextprotocol/modelcontextprotocol/blob/df7ae6b06fc60d52ffa5284f064778df3fc12b19/docs/docs/tutorials/security/security_best_practices.mdx |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/{{ revealButtonHref }} |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files#diff-deedfc588a048ecb5a91476f796e5fdda8cd65fc0d6edc714d75524aedb4bafc |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files#diff-deedfc588a048ecb5a91476f796e5fdda8cd65fc0d6edc714d75524aedb4bafc |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1554/files |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |