{
"canonical_url": "github.com/microsoft/mcp-for-beginners",
"category": "Open-source project",
"classification": {
"matched": {
"cybersecurity": [
"security"
],
"technology": [
"mcp",
"orchestration",
"python",
"typescript"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": false,
"compliance": [
{
"certificate_id": "microsoft",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Microsoft",
"terms": [
"star_level_1",
"star_level_2",
"star_for_ai_level_1",
"partner_entries",
"caiq",
"certification",
"validaited-ai-caiq",
"eu-cloud-coc",
"iso-iec-42001",
"star_for_ai_level_2",
"validaited-42001"
]
},
"display": "STAR for AI: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/microsoft",
"framework": "csa_star",
"issued": "2016-04-05",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:26:35Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_FOR_AI"
},
{
"certificate_id": "microsoft",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Microsoft",
"terms": [
"star_level_1",
"star_level_2",
"star_for_ai_level_1",
"partner_entries",
"caiq",
"certification",
"validaited-ai-caiq",
"eu-cloud-coc",
"iso-iec-42001",
"star_for_ai_level_2",
"validaited-42001"
]
},
"display": "STAR Level 2: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/microsoft",
"framework": "csa_star",
"issued": "2016-04-05",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:26:35Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_2"
},
{
"certificate_id": "F1603087869",
"covers_resource": "inherited",
"credited": false,
"detail": {
"cso": "Azure Government (includes Dynamics 365)",
"csp": "Microsoft",
"deployment_model": "Government Community Cloud",
"fedramp_status": "FedRAMP Authorized",
"impact_level": "High"
},
"display": "FedRAMP High: FedRAMP Authorized (FedRAMP Marketplace, 2026-10-26)",
"evidence_url": "https://marketplace.fedramp.gov/products/F1603087869",
"framework": "fedramp",
"issued": "2020-04-29",
"issuer": "JAB / 3PAO Kratos",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "64bc98d4cebbc137a6e7b94442b8678790eefa29e4347928a0de8620b56a168a",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:13Z",
"review_reason": "vendor authorization for Azure Government (includes Dynamics 365); entity 1.00",
"reviewer": null,
"scope": "entity",
"source": "fedramp",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "FEDRAMP_HIGH"
},
{
"certificate_id": "microsoft",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Microsoft",
"terms": [
"star_level_1",
"star_level_2",
"star_for_ai_level_1",
"partner_entries",
"caiq",
"certification",
"validaited-ai-caiq",
"eu-cloud-coc",
"iso-iec-42001",
"star_for_ai_level_2",
"validaited-42001"
]
},
"display": "ISO 42001: Found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/microsoft",
"framework": "iso42001",
"issued": "2016-04-05",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:26:35Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "ISO42001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Cyber Essentials: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "cyber_essentials",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "CYBER_ESSENTIALS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Cyber Essentials Plus: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "cyber_essentials",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "CYBER_ESSENTIALS_PLUS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "dora",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "EU AI Act: Art. 50 statement (vendor statement, 2026-10-26)",
"evidence_url": "https://www.microsoft.com/en-us/trust-center",
"framework": "eu_ai_act",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "cb29ddf7ba6a197e4eeeb6a46594e22391e370c1510d926b807e7c4845a964ce",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ART50_STATEMENT"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "fedramp",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "hitrust",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "irap",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27001: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27017: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27017"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27018: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27018"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "ISO 27701: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27701",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27701"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "pci_dss",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": "self-hosted",
"description": "This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable, and secure AI workflows from session setup to service orchestration.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"cybersecurity": {
"components": {
"adoption": 24.59,
"docs": 7.0,
"domain_fit": 34.0,
"ecosystem": 6.6,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "security",
"rank": null,
"score": 61.4,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
},
"technology": {
"components": {
"adoption": 24.59,
"docs": 7.0,
"domain_fit": 81.0,
"ecosystem": 6.6,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.81,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": null,
"score": 76.4,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": []
}
},
"external_ids": {
"github": "microsoft/mcp-for-beginners"
},
"first_seen": "2026-10-26T12:17:57Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_51894fc8493c2ea4",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:17:57Z",
"license": "MIT",
"name": "mcp-for-beginners",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"not_checked": "code_host",
"status": "unknown"
},
"ard": {
"not_checked": "code_host",
"status": "unknown"
},
"mcp": {
"evidence_url": "https://github.com/microsoft/mcp-for-beginners",
"note": "named in the resource's own tags",
"source": "self_description",
"status": "claimed"
}
},
"publisher_domain": "github.com",
"resource_type": "mcp_server",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:41:54Z",
"cves": 0,
"source": "nvd",
"tier": 1
},
"signals": {
"github_archived": false,
"github_created_at": "2025-04-04T20:46:17Z",
"github_forks": 5664,
"github_language": "Jupyter Notebook",
"github_open_issues": 11,
"github_pushed_at": "2026-10-25T04:42:02Z",
"github_stars": 17514,
"github_topic": "mcp-server",
"homepage": null
},
"slug": "microsoft-mcp-for-beginners",
"sources": [
{
"payload_hash": "d76eaa058aa288670383231a55e62e110c4f50ce7a03b7a667b6108f224db189",
"retrieved_at": "2026-10-26T12:17:57Z",
"system": "github",
"url": "https://github.com/microsoft/mcp-for-beginners"
}
],
"tags": [
"csharp",
"java",
"javascript",
"javascript-applications",
"mcp",
"mcp-client",
"mcp-security",
"mcp-server",
"model",
"model-context-protocol",
"modelcontextprotocol",
"python",
"rust",
"typescript"
],
"tenant": null,
"traces": [],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 1,
"protocols": 3,
"security": 1,
"traces": 5,
"vendor_compliance": 1
},
"url": "https://github.com/microsoft/mcp-for-beginners",
"vendor": "microsoft"
}