Scanned 2026-10-13 · 200 servers
The state of MCP
server security.
We took 200 remote MCP servers from the official registry, one per host, and asked each one what it publishes to a stranger. No credentials, no tool calls, nothing a crawler could not do. 61 of them answered.
32%
of the registry never answered at all. 64 of 200 endpoints were dead links, timeouts, refusals or tunnels that were down.
72 / 200
demanded authentication before listing anything. That is the correct behaviour and it is the largest single group.
36 / 61
of the servers that did answer expose at least one high-risk tool to anyone who connects.
106
critical findings across the 61 graded servers, alongside 376 high.
What this does and does not show
The headline is not that MCP is insecure. It is that the public registry is noisier than it looks. 32 percent of the endpoints listed in it did not answer at all, and the single largest group of those that did answer refused politely and asked for a credential, which is exactly what a server touching anything private should do.
One number deserves a caveat.Every graded server carries a high-severity finding called “reachable without authentication”. That is definitional rather than a discovery: the sample of graded servers is the set that answered an unauthenticated client. The number worth reading is the 36 of 61 that go further and hand a stranger a tool that writes, spends or executes.
Being open is not automatically wrong. A server that exposes one read-only lookup to the public is making a reasonable choice. A server that exposes a tool which writes to a database, moves money or runs code is making a different one, usually without having decided to.
Grades awarded
- A0
- B14
- C12
- D10
- F25
No server scored an A. An A requires an authenticated surface, and a server that answers a stranger cannot earn one.
What the open tools do
- Moves money25 servers
- Fetches from the internet14 servers
- Executes code7 servers
- Writes to the filesystem6 servers
- Writes to a database5 servers
59 servers, graded and dated
Every grade links to its own page with the findings behind it and the date it was taken. 2 further graded servers are held back while their operators are contacted privately, and they remain inside the counts above.
| Grade | Server | Open tools that | Findings | Scanned |
|---|---|---|---|---|
| B | api.timzinin.comLocation & Demand Intelligence | Nothing high-risk | 1 | 2026-10-13 |
| B | bonissystems.comCompliance Batch Alignment | Nothing high-risk | 1 | 2026-10-13 |
| B | book.enhancedint.comBook ShesMyDogLady | Nothing high-risk | 1 | 2026-10-13 |
| B | datoqa.bhazarstudio.workers.devDatoQA — Official Public Holidays | Nothing high-risk | 1 | 2026-10-13 |
| B | humanmirror.frHumanMirror One | Nothing high-risk | 1 | 2026-10-13 |
| B | mcp.adcritter.comAdCritter for Builders | Nothing high-risk | 1 | 2026-10-13 |
| B | mcp.hasdata.comHasData Google Flights Deals | Nothing high-risk | 1 | 2026-10-13 |
| B | mcp.jojapi.comcom.jojapi/nameresolver | Nothing high-risk | 1 | 2026-10-13 |
| B | mcp.modernmustardseed.comVoice Agent Linter | Nothing high-risk | 1 | 2026-10-13 |
| B | mcp.signed.comSigned Investors | Nothing high-risk | 1 | 2026-10-13 |
| B | mcp.socialdatax.comSocialDataX Instagram MCP | Nothing high-risk | 1 | 2026-10-13 |
| B | roxyapi.comVedic Astrology and Kundli MCP Server by RoxyAPI | Nothing high-risk | 1 | 2026-10-13 |
| B | sugufax.comすぐFAX SuguFAX – AI fax credits (API key) | Nothing high-risk | 1 | 2026-10-13 |
| B | tokenos.aiTokenOS Smart Contract Audit | Nothing high-risk | 1 | 2026-10-13 |
| C | api.htagai.comcom.htagai/htag-docs | Nothing high-risk | 2 | 2026-10-13 |
| C | crashstory-mcp-production.up.railway.appCrashStory MCP | Nothing high-risk | 2 | 2026-10-13 |
| C | docs.mcp.cloudflare.comcom.cloudflare.mcp/mcp | Nothing high-risk | 2 | 2026-10-13 |
| C | jobs.rqmtechnologies.comRQM Robotics Jobs | Nothing high-risk | 2 | 2026-10-13 |
| C | mana.amMana Public | Nothing high-risk | 2 | 2026-10-13 |
| C | mcp.boostermage.comBoostermage MTG Prices | Nothing high-risk | 2 | 2026-10-13 |
| C | mcp.codeniverse.comcom.codeniverse/mcp | Nothing high-risk | 3 | 2026-10-13 |
| C | nova.civai.coNova Inbox Agent by Nova (CIVAI) | Nothing high-risk | 2 | 2026-10-13 |
| C | powmcp.comCaption File Check | Fetches from the internet | 2 | 2026-10-13 |
| C | registry-mcp.remote-mcp.comcom.remote-mcp/registry-mcp | Nothing high-risk | 2 | 2026-10-13 |
| C | var.ggvar.gg Naming Memory | Nothing high-risk | 2 | 2026-10-13 |
| C | vocenya.comVocenya Site | Nothing high-risk | 3 | 2026-10-13 |
| D | ai-akari.aiAIﾉアカリ☆ Agent Trust Receipt | Moves money | 2 | 2026-10-13 |
| D | api.aislabs.aiAIS Gateway — the campus front desk for AIS MCP buildings | Moves money | 2 | 2026-10-13 |
| D | api.bubblio.devdev.bubblio/door_acff25cbe9fb | Executes code | 2 | 2026-10-13 |
| D | back.guruwalk.comGuruWalk | Moves money | 2 | 2026-10-13 |
| D | mcp-factory.bowling-anthony.workers.devInvoice Duplicate Recovery | Moves money | 2 | 2026-10-13 |
| D | mcp.aribot.ayurak.comcom.ayurak/aribot-mcp | Moves money | 2 | 2026-10-13 |
| D | mcp.coinpaprika.comCoinPaprika | Fetches from the internet | 3 | 2026-10-13 |
| D | predictionmarketspicks.comCrypto Markets Desk | Moves money | 2 | 2026-10-13 |
| D | roosteragents.aiRooster Agent Gateway | Moves money | 2 | 2026-10-13 |
| D | subpay.aiSubpay Invoice Reader | Moves money | 2 | 2026-10-13 |
| F | a2awire.comOfficial Apple Newsroom: Announcements & Releases — buy per-query in-session (applenewswatch) | Moves moneyFetches from the internetExecutes code | 7 | 2026-10-13 |
| F | agent.maddegen.artMAD Synapse · Bundle Forensics | Moves money | 5 | 2026-10-13 |
| F | agentnative.cazimedia.comFree Official Data Samples, Provenance, Aggregations & Insights | Moves money | 4 | 2026-10-13 |
| F | api.antevo.chAntevo Mandates | Writes to a databaseWrites to the filesystem | 6 | 2026-10-13 |
| F | api.marketintell.aiai.marketintell/marketintell | Fetches from the internetExecutes code | 8 | 2026-10-13 |
| F | apick.appAPICK Web | Fetches from the internet | 22 | 2026-10-13 |
| F | app.daedalmap.comDaedalMap Administrative Boundaries (loc_id to polygon) | Moves money | 4 | 2026-10-13 |
| F | claribi.comclariBI | Moves moneyFetches from the internet | 9 | 2026-10-13 |
| F | dchub.cloudDC Hub — Data Center Site Selection & Colocation: Electricity, Power Grid, Gas, Fiber | Fetches from the internetExecutes codeWrites to the filesystemMoves money | 27 | 2026-10-13 |
| F | focxle.comFocxle: negotiation rooms and locked agreements for B2B AI agents | Moves money | 6 | 2026-10-13 |
| F | hatchloop.devSMS and WhatsApp Messaging | Moves money | 3 | 2026-10-13 |
| F | mcp.adbutler.comAdButler | Writes to a databaseWrites to the filesystemMoves money | 226 | 2026-10-13 |
| F | mcp.astroway.infoAstroWay API Docs | Fetches from the internet | 5 | 2026-10-13 |
| F | mcp.himalayas.appHimalayas Remote Jobs | Writes to a databaseWrites to the filesystemMoves money | 11 | 2026-10-13 |
| F | md.fastdb.inchainpulse — real-time crypto + prediction market data for AI agents | Fetches from the internetMoves money | 4 | 2026-10-13 |
| F | pikasim.comPikaSim | Fetches from the internetMoves money | 13 | 2026-10-13 |
| F | scoreia.aiScoreIA La Forge | Moves money | 4 | 2026-10-13 |
| F | squeezeos-api.onrender.comx402 Pay — USDC API Payment Helper | Moves money | 5 | 2026-10-13 |
| F | the-stall.intuitek.aiThe Stall | Moves moneyFetches from the internet | 67 | 2026-10-13 |
| F | www.mactechsolutionsllc.comMacTech CMMC / NIST 800-171 | Writes to the filesystemMoves money | 3 | 2026-10-13 |
| F | www.memoryplugin.comMemoryPlugin | Fetches from the internetWrites to a database | 8 | 2026-10-13 |
| F | www.pathwren.workers.devCrawler Log Triage | Executes code | 3 | 2026-10-13 |
| F | x402.professorsausages.comProfessor Sausages — Web & Documents | Executes codeMoves money | 13 | 2026-10-13 |
Run the same scan on your own server
The Snapshot that produced every grade on this page is free, needs no account, and only ever looks at the public surface. Point it at your own MCP server and you get the same report, with the same method.
Listed here and want it corrected
Every grade is dated because servers change. If yours has, ask for a re-scan and we will take a fresh reading and update the page, at no cost and with no conditions. If you believe a finding is wrong, tell us what we got wrong and we will fix or remove it.