Security is a core design foundation of mcpmaster. Our infrastructure is architected to ensure complete tenant isolation, encrypted transport, and robust protection against SSRF, unauthorized egress, and prompt injection attacks.
1. Database Row-Level Security (RLS)
Every tenant query is authenticated via cryptographically verified session tokens. Postgres Row-Level Security guarantees that no customer workspace can read or modify another organization's records.
2. Encryption & Transport
All data in transit is encrypted using modern TLS 1.3. Hosted MCP endpoints communicate over authenticated Server-Sent Events (SSE) and streamable HTTP with signed request validation.
3. Egress Protection & Rate Limiting
Outbound tool execution and webhooks are validated to prevent Server-Side Request Forgery (SSRF) against internal or private IP blocks. Every MCP endpoint is guarded by Upstash Redis-backed distributed rate limiting.
4. Responsible Disclosure
If you discover a vulnerability or security issue, please contact our security team directly at security@mcpmaster.com.