MCP Threat-Model Template

The MCP Threat-Model Template turns the STRIDE walk-through from Threat-Modelling Your First MCP Server into a tool you can actually run.

What you get

• An interactive checklist: eighteen "can someone…?" questions across the six STRIDE letters, with progress saved locally in your browser.
• A downloadable Markdown template with the full worksheet: data-flow sketch, per-tool blast-radius table, impact × likelihood ranking, approval-gate list, and a sign-off verdict.
• The closing question that decides every connection: if a malicious instruction reached this agent through the data it reads, what's the worst tool it could reach, and have I gated that?

Why

Agents plus tools mean untrusted input meets privileged action: the oldest problem in security wearing a new interface. Most teams skip the threat model because starting from zero is expensive. This makes the marginal cost of doing it right roughly one afternoon.