The MCP Server Security Checklist, Written by Someone Who Failed It First

Our first MCP server scored an F. Fixing that took seven controls, and we have since applied all seven to every server we run. This is the checklist that got us there — seven controls covering untrust