Test MCP Resources and Prompts

Resources

Test exact URIs, template parameters, missing resources, tenant boundaries, path traversal defenses, content type, and result-size limits.

Prompts

Test required arguments, rendered message structure, escaping of untrusted input, and whether the prompt references tools/resources that actually exist.

Cache behavior

If resources vary by user or role, verify cache keys and private scope prevent cross-user leakage.

Security regression

Include negative tests for resource IDs belonging to another tenant and prompt input containing instruction-like text. Server prompts are content, not authorization.