Proven, trusted principles for design and implementation should be followed so that weaknesses are avoided or kept to a minimum; NIST SP 800-160 Volume 1 Annex F.1 offers examples.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.