A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licensed for remixing.

Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks from beginner to power user!