MCP security research
Reports built from the same open scanner that grades every server on mcp.market. Numbers are fixed per edition, so you can cite them.
20 September 2026
State of MCP server security, September 20264,140 servers graded. 47% of remote servers list write tools to anyone who connects.