CCS v1.2 · IETF Referenced · DOI Registered

The security standard
for MCP.

MCP protocol doesn't enforce security. We do. 215 fault types. 52 real exploits. 8 verified PoCs. 6 CVEs. Get certified or stay exposed.

Try Live Demo → Get Certified
215
Fault Types
52
Exploits Found
8
Verified PoCs
6
CVEs Filed
20K+
Trajectories
9.8
Max CVSS
Live Demo
See it in action.

Run the CCS scanner against any MCP configuration. Get results in seconds — no signup, no install required.

🔍

Instant Scan

Paste any MCP config JSON. Get vulnerability results in under 5 seconds.

🛡️

7-Dimension Verification

Structure, Schema, Latency, Identity, Cost, Integrity, Security — all checked.

📊

Severity Mapping

Every finding mapped to CVSS scores and real-world exploit examples.

CCS Scanner v1.2
$ ccs scan --target mcp-server.json
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
ℹ Scanning MCP server configuration...
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✗ CRITICAL — Unsanitized env var in tool handler
→ SSRF risk: process.env → MCP subprocess
✗ CRITICAL — Missing auth on tool invocation
→ CVSS 9.8 — No identity verification
⚠ HIGH — No output validation schema
→ Schema drift detected in 3 tools
⚠ HIGH — Cost bounds not enforced
→ Token usage unbounded per session
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2 CRITICAL 2 HIGH · 0 MEDIUM · 12 PASS
CCS Conformance: FAIL
The Standard
What is CCS?

Correctover Conformance Specification — the runtime security standard for MCP. Five components. Zero exceptions.

👁️

Runtime Observatory

Capture every agent execution trace with cryptographic integrity. Full visibility into tool calls, data flows, and decision chains.

📋

Fault Taxonomy

517-type runtime failure classification (215 public). Based on 20K+ production traces and 148 CVEs analyzed.

✓

Conformance Check

Required(τ) ⊆ Supported(τ). Formal verification that what you claim to support is what you actually support.

🔗

Receipt Schema

Cryptographic chain integrity for every output. Tamper-proof audit trail for compliance and forensics.

🔄

Verification Protocol

Four-axis verification: schema, integrity, cost, compliance. Sub-10μs latency. Zero performance tax.

📜

Audit Logger

Immutable forensic trail for SOC2, HIPAA, GDPR. Every decision, every tool call, every data access logged.

Evidence
Backed by real-world research.

Not theory. 52 MCP servers exploited. 8 PoCs with accepted advisories. 6 CVEs assigned. Peer-reviewed. DOI-registered.

CVE

CVE-2025-53805

Browser-Use MCP: SSRF via internal IP access. CVSS 8.1. Reported & accepted.

View on NVD →
CVE

CVE-2025-53806

Browser-Use MCP: Path traversal. CVSS 7.5. Reported & accepted.

View on NVD →
PoC

MSRC Advisory

Microsoft acknowledged our PoC for MCP server credential exposure.

View Research →
IETF

draft-schrock-ae-challenge-04

Our implementation feedback adopted into IETF Agent-to-Agent challenge draft.

View Draft →
PoC

8 Verified PoCs

Cross-framework exploit demonstrations: CrewAI, AutoGen, LangGraph, Semantic Kernel.

View on GitHub →
DOI

DOI Registered

10.5281/zenodo.21603250 — Permanent, verifiable, blockchain-timestamped record.

View on Zenodo →
Pricing
Standard is free.
Certification costs money.

Start scanning for free. Upgrade when you need the badge.

Free
$0
Unlimited scans
  • Vulnerability scanning
  • First 2 risks per scan
  • CCS v1.2 spec (free)
  • 20K trajectory samples
Scan Free →
Certified
$279/yr
+ $69/yr re-certification
  • Full vulnerability report
  • OAuth 2.1 + CCS v1.2 audit
  • CCS Certified badge + listing
  • Runtime Guard (real-time)
  • Auto-heal (84.1% resolved)
  • Threat intelligence feed
Get Certified →
Enterprise
$1,399/yr
Up to 10 MCP servers
  • Everything in Certified
  • 10 server certifications
  • Custom compliance policies
  • Private threat intel feed
  • SLA + dedicated support
  • On-site audit (optional)
Contact →
Certification
Four steps to certified.
1

Scan

Run the free scanner against your MCP config. See exactly what's exposed.

2

Fix

Fix all findings. Install Runtime Guard for continuous protection.

3

Audit

We audit your server. OAuth 2.1 + CCS v1.2 compliance check.

4

Certified

Get the badge. Listed in public registry. Annual re-certification.

Contact
Let's talk security.
📧
🔗
📄

Specification

CCS SDK Repository

🎓