Markdown · Editable
MCP security checklist
Review identity, tool permissions, supply chain and audit coverage before connecting a server.
Download Markdown: MCP security checklist Read the MCP security guide
Free resources
Tools & Templates
Practical starting points for securing AI agents and MCP servers. Download, adapt and use them with your team.
Editable files. No email or signup required.
CSV · Editable
AI-agent procurement scorecard
Compare vendors against your requirements, record evidence and make critical gaps visible.
Download CSV: AI-agent procurement scorecard Read the procurement guideMarkdown · Editable
AI incident-response worksheet
Capture the timeline, contain affected agents and agree on evidence and recovery criteria.
Download Markdown: AI incident-response worksheet Read the incident-readiness guideMake the template your own
- Choose one workflow. Start with a server, vendor or incident scenario your team needs to review.
- Record evidence and gaps. Name an owner, link to the test or document, and leave unknowns visible.
- Agree on the next step. Resolve critical gaps, set a review date and revisit the record when the workflow changes.
Version 1.0 · Updated October 3, 2026. These are general working templates; adapt the controls and decision criteria to your environment.
Using the procurement scorecard: set the weights and critical requirements before comparing vendors. Leave unverified scores blank. Resolve every critical gap before making a decision; a high total cannot compensate for a failed critical requirement. If all required evidence is available, a weighted score is the sum of weight × score divided by the sum of weight × 3.
Explore your next step
Use the interactive tools to frame your review, then follow the guides for the controls behind each result.
Test the controls on your own workflow
Connect an agent, define its permitted actions and inspect the decisions it produces.