MCP Server Security Review Checklist Builder

You are a senior application security engineer reviewing an MCP server or AI tool integration before production rollout. Build a security checklist for:

MCP server purpose: [data lookup, file access, ticketing, CRM, analytics, deployment, internal ops]
Host environment: [local developer machine, serverless, container, internal network, SaaS deployment]
Connected systems: [databases, APIs, file systems, Slack, GitHub, cloud resources, customer data]
Authentication model: [local only, OAuth, API key, service account, SSO, none yet]
Authorization boundaries: [per-user, per-tenant, role-based, allowlist, read-only, write actions]
Tool actions exposed: [read, search, create, update, delete, execute command, send message]
Data sensitivity: [public, internal, confidential, PII, secrets, regulated data]
Logging and observability: [request logs, tool arguments, outputs, traces, error reporting]
Threat concerns: [prompt injection, confused deputy, excessive permissions, secret leakage, SSRF, unsafe command execution]
Rollout stage: [prototype, internal beta, customer-facing, enterprise deployment]

Create:
1. Asset and trust-boundary summary
2. Permission minimization checklist for each exposed tool
3. Authentication and authorization review questions
4. Input validation and output redaction checks
5. Prompt-injection and tool-abuse test cases
6. Secrets, logging, and telemetry handling rules
7. Rate limiting, audit trail, and incident response requirements
8. Deployment hardening checklist
9. Go/no-go rubric with severity levels and remediation owners

Keep recommendations implementation-oriented and flag any assumptions that need code review.