Expired75% confidenceOpinionTime unknown
Security auditing of MCP Servers has fallen far behind their rapid growth in numbers, which is currently the biggest shortcoming of the MCP ecosystem.
1
Sources
75%
Confidence
Medium-term (~90 days)
Relevance
5/31/2026
First Seen
Valid until: 8/29/2026(expired)
Sources
MCP Protocol Explained: The USB-C of the AI World
bilibili黑粉科技HyphenTech
Related Entities
Related Claims
Unverified当前MCP生态缺乏类似App Store审核机制的准入管控，安全研究人员已发现多个MCP投毒攻击案例，包括Typosquatting钓鱼攻击和伪装成Postmark MCP的恶意服务器72% similarUnverifiedMCP currently lacks fine-grained permission control, and third-party servers of unknown origin may contain malicious instructions.72% similarUnverifiedJust over half a year after the MCP protocol was launched, numerous large companies both domestically and overseas have released their own MCP tool interfaces.71% similarVerifiedThe MCP ecosystem already has thousands of MCP Servers covering scenarios such as database queries, file operations, API calls, and browser control.70% similarUnverifiedSeveral MCP Server aggregation marketplaces already exist, including mcp.so, mcpmarket.com, and smithery.ai.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/3540API
curl https://kongchang.com/api/v1/knowledge/claims/3540MCP
get_claim(id=3540)