MCP security research
Reports built from the same open scanner that grades every server on mcp.market. Numbers are fixed per edition, so you can cite them.
19 September 2026
State of MCP server security, September 20266,333 servers graded. 19% of publishers with a remote server leave write tools open to anyone who connects.