Unverified60% confidenceFactExact time
A security audit conducted this year found that approximately one quarter of publicly available MCP servers have absolutely no authentication whatsoever.
2
Sources
60%
Confidence
Medium-term (~90 days)
Relevance
9/27/2026
First Seen
Valid until: 12/26/2026
Sources
Related Entities
Related Claims
UnverifiedA security organization analyzed 5,200 open-source MCP Servers and found that 52% still use outdated static keys, while fewer than 8.5% use secure OAuth authentication.70% similarUnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations68% similarUnverifiedImproperly configured MCP Servers can lead to security risks such as database password leakage, exposure of private files, and token theft.67% similarUnverifiedHow to ensure that sensitive call content of MCP servers is not leaked when connecting to third-party analytics tools is a data privacy issue that remains to be verified.65% similarUnverified根据近年来对NeurIPS、ICML等顶级会议论文代码的调查，约60%的开源研究代码缺乏完整的依赖说明，超过70%仅在特定Linux发行版上测试过59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/953112API
curl https://kongchang.com/api/v1/knowledge/claims/953112MCP
get_claim(id=953112)