Unverified50% confidenceFactExact time
Anthropic reviews connectors entering its directory but does not conduct security audits of any MCP servers
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/10/2026
First Seen
Valid until: 1/8/2027
Sources
Related Entities
Related Claims
UnverifiedAnnotation declarations on MCP servers have no enforcement validation mechanism at the protocol level, creating a supply-chain trust problem where an attacker can publish a malicious server claiming to be read-only while performing arbitrary write operations.67% similarUnverifiedA security audit conducted this year found that approximately one quarter of publicly available MCP servers have absolutely no authentication whatsoever.67% similarUnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations65% similarUnverifiedHow to ensure that sensitive call content of MCP servers is not leaked when connecting to third-party analytics tools is a data privacy issue that remains to be verified.64% similarUnverifiedAgentOS 中每个智能体的文件系统访问权限可精确到文件夹级别和操作类型级别（如只能写、不能删），由MCP服务端校验拦截违规操作62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/993567API
curl https://kongchang.com/api/v1/knowledge/claims/993567MCP
get_claim(id=993567)