howtosecure.ai

← Back to your requirements

How to meet it OWASP AISVS v1.01

Model Context Protocol (MCP) Security · Component Integrity

Sandbox local MCP servers

AISVS 10.1.3 Level 2

Verify that locally launched MCP servers run in a least-privilege sandbox with restricted file system, network, and system access.

OWASP AISVS v1.01, requirement 10.1.3

In plain English

Run local MCP servers in a sandbox with limited file, network and system access.

What good looks like

  • Local servers run with least privilege.
  • File access is limited to named folders.
  • Network access is limited to what the server needs.

How teams usually do it

  • Containers or OS sandboxing for local servers.

Evidence an auditor would accept

  • Sandbox configuration.

Common mistakes

  • Running a local server as the user with access to their whole home folder.

Related requirements

9.3.1 Sandbox every tool · 10.3.2 Use stdio only locally

Not sure which requirements apply to your system? Take the assessment.

Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.