Over 10% of MCP Servers Leak Sensitive Data
Inevitable_Fee1895 · reddit · 2026-07-16
A paper published last month conducted static analysis on 10,655 MCP server repositories, revealing that over 10% leak credentials, API keys, or PII via tool responses.
The critical point is that these leaks don't occur during network calls, but within the return values of tool handler functions. Examples include passing back raw stack traces during exception handling, embedding debug logs into responses, or returning environment variables verbatim for "context". Because the data is returned from local functions into the model's context, traditional SAST/DAST tools—which primarily monitor network egress—fail to detect this sink.
The author argues this isn't a standard error-handling bug, but an entirely new attack surface introduced by the MCP protocol. Teams integrating MCP with sensitive systems must urgently audit failure paths and handler return contents.
More from Safety
- YC-backed TrustAI says agents made unauthorized changes in production systems — ycombinator · 2026-07-22
- Sam Altman is headed to Washington to brief Congress on OpenAI’s GPT-6 line — inductionheads · 2026-07-22
- An MCP server signs every AI agent tool call into a verifiable Merkle chain — Funky_Chicken_22 · 2026-07-22
- AI industry astroturfing roundup tracks the sector’s fake-grassroots problem — ShakeelHashim · 2026-07-22
- New paper defines self-state attacks, showing OS defenses leave four agent-memory cases indistinguishable — Justgototheeffinmoon · 2026-07-22
- Substack starts labeling AI-generated or AI-influenced writing — StewartalsopIII · 2026-07-22