MCP Registry Scan: Half of Servers Open to Strangers, 1 in 9 Broken

A developer probed all 30,516 remote endpoints in the official MCP registry: 51% worked, 31% required auth, and about 1 in 9 were broken. Separately, the maker of scanning tool Preflight found over half of streamable-http/SSE servers return full tool lists to strangers, posing security risks.

2026-10-20 ~ 2026-10-21 · 2 related posts

• Scanning the MCP Registry: Over Half of Remote Servers Expose Full Tool Lists Without Auth — atp_studio_coll · 2026-10-20
• Probing all 30,516 MCP registry servers: 1 in 9 is broken, and the failures repeat — xakpc · 2026-10-21