MCP security research
Reports built from the same open scanner that grades every server on mcp.market. Numbers are fixed per edition, so you can cite them. Journalists: the data behind any edition is available on request from hello@mcp.market.
30 October 2026
State of MCP server security, October 202648,447 MCP servers graded, up from 6,333 in September. 1 in 6 remote servers lists tools that create, send or delete to anyone who connects. A third of graded servers name no source repository, and 1 in 10 names one that no longer exists.
30 October 2026
The MCP ecosystem by the numbers, October 2026Who publishes MCP servers, what they run on, how many people use them. Five publishers account for 15% of the graded registry; 61% of servers with a public repository have zero GitHub stars; 94% of publishers have shipped exactly one server.
30 October 2026
Agent skills safety, October 20264,675 public agent skills scanned. 1 in 10 carries a finding; 1 in 25 contains text telling the agent to set aside its instructions, hide what it does or switch off a safety check.
19 September 2026
State of MCP server security, September 20266,333 servers graded. 19% of publishers with a remote server leave write tools open to anyone who connects.