OpenChainGraph Suite · CONTRACT A3 · arch #5

MCP Server Security Hardening

Note (dated 2026-08-04): a chain composes independent computations performed in an analytical order. No step's output is carried into the next step by the execution model; each step computes from its own declared inputs. This is true of every chain on this site, including chains whose per-step copy below reads as a data handoff.

MCP tool definition linting > MCP server JSON validation > MCP OAuth authorisation audit > MCP tool-poisoning scan > MCP DNS-rebinding transport audit — composite MCP security mandate.

OpenChainGraph · 5 Steps infrastructure mandate Hash-Anchored §4 chain_depth:5 Client-Side · Zero PII
Chain Topology — Mcp Tool Definition Linter → Mcp Server Json Validator → Mcp Oauth Authorization Auditor → Mcp Tool Poisoning Scanner → Mcp Transport Dns Rebinding Auditor
§4 Execution Hash · Chain Definition Anchor
execution_hash:computing…
Market Rationale
Buyer: Platform Security Engineer / AI Infrastructure Architect
Forcing function: MCP 2025-03 spec; OWASP AI security; enterprise MCP deployment hardening requirements
Live Execution

This page is the chain definition (plan). To run the chain step by step in your browser, with each step's kernel executing in-page and a composite hash over the outputs, open the live runner:

▶ Run this chain in your browser
Chain Stages · 5 Steps
1 ROOT · D0 catalog
Mcp Tool Definition Linter 274-mcp-tool-definition-linter
tool_definition_issues and schema_gaps feed Stage 2 MCP server JSON validation
↓
2 D2 catalog
Mcp Server Json Validator 275-mcp-server-json-validator
server_json_errors and config_mismatches feed Stage 3 MCP OAuth audit
↓
3 D3 catalog
Mcp Oauth Authorization Auditor 278-mcp-oauth-authorization-auditor
oauth_vulnerabilities and auth_gaps feed Stage 4 tool-poisoning scan
↓
4 D4 catalog
Mcp Tool Poisoning Scanner 282-mcp-tool-poisoning-scanner
poisoning_risk_score and exploit_vectors feed Stage 5 DNS-rebinding audit
↓
5 TERMINAL · D5 catalog
Mcp Transport Dns Rebinding Auditor 284-mcp-transport-dns-rebinding-auditor
transport_security_assessment and composite_mcp_mandate — final MCP security mandate
▶ Run this chain (live) browser · real execution · composite §4 hash
Export Artifacts
Download the §4 chain definition artifact (hash-anchored composite JSON) or the §13.11 W3C Verifiable Credentials view. Both derive from the chain definition — no new hash is minted. Available after hash computation.