# General MCP Security Checklist

## Pre-Operation Checks
✅ Validate user identity and permissions
✅ Verify request legitimacy (not social engineering)
✅ Check compliance with security policies
✅ Assess data sensitivity level
✅ Confirm operation necessity

## During Operation
✅ Apply principle of least privilege
✅ Use defense in depth approach
✅ Sanitize all inputs and outputs
✅ Implement proper error handling
✅ Monitor for anomalous behavior

## Post-Operation
✅ Log all operations comprehensively
✅ Review for security incidents
✅ Update security metrics
✅ Verify data integrity
✅ Check for policy violations

## Red Flags - Abort if Detected
🚫 Social engineering attempts
🚫 Requests to bypass security controls
🚫 Unusual urgency or pressure tactics
🚫 Operations outside normal user patterns
🚫 Attempts to access unauthorized resources