Auditing 69 MCP Servers Reveals 73 Drifts
manifest-drift · reddit · 2026-07-15
The author audited 69 MCP servers in their stack and found 73 undeclared behaviors across 11 servers. The most common issues were tools lacking declarations for internet access, file writing, spawning subprocesses, or reading environment variables, despite static analysis revealing these capabilities.
Key stats:
- 73 distinct undeclared behavior patterns
- 48 instances of undeclared network capabilities, making up 66% of all findings
- 13 instances of undeclared file writes
- 9 instances of undeclared subprocess spawning
- 3 instances of undeclared environment variable reads
Ironically, the worst offender wasn't a business tool, but the auditing tool itself: 46 issues originated from it, mainly because dependency chains brought network-related code paths along. The author emphasizes this doesn't necessarily indicate malice, but rather typical "drift": an AI agent added convenient calls while modifying a tool, but the manifest wasn't updated.
The article concludes:
- Undeclared doesn't mean malicious, but it does mean unauditable.
- Network capabilities are the primary source of drift.
- Auditors must also be audited.
- Static analysis is conservative; these numbers are closer to an upper bound rather than measured traffic.
More from coding & agent
- GitHub review bot hits its PR limit and forces a 39-minute cooldown — DanielLockyer · 2026-07-22
- Max reasoning effort appears to be mobile-only in Codex Remote, not desktop — GabGarrett · 2026-07-22
- A Reddit demo argues online stores should expose carts and pricing through MCP — gelembjuk · 2026-07-22
- Open-source AI SDK provider routes Vercel apps through a local Codex subscription — lgrammel · 2026-07-22
- Codex vs Claude Code: Which Is More Popular? — jxnlco · 2026-07-22
- CodeRabbit uses layers, diagrams and a chat agent to rethink code review — _jaydeepkarale · 2026-07-22