Audit: 47% of MCP Registry Servers Hide Steering Instructions
ChiefGrowth · reddit · 2026-08-29
An audit of 15,329 remote servers in the official MCP registry reveals significant security insights. 54% of servers returned a tool list, with 29% of live tools hosted by just two domains. While no direct secret theft (like SSH keys) was found in 140,284 descriptions, widespread 'steering' was detected. 47 hosts (406 tools) inject hidden instructions into tool descriptions, directing models to hide competitors, bypass safety checks, or conceal platform limitations from users.
More from Safety
- Banking regulators ramp up scrutiny of banks' AI use over stability fears — nordicinst · 2026-10-16
- Michigan professor Ben Green: why 'AI for Good' fails and self-regulation won't work — benzevgreen · 2026-10-16
- Apex Research head on CBS News: current AI testing regime is very insufficient — MariusHobbhahn · 2026-10-16
- Critical 9.5/10 RCE hits Next.js use cache; patch 16.4.1 now — jedisct1 · 2026-10-16
- AI agent fleet has wasted 17 years of scammers' time across 2.5M conversations — neil_chilson · 2026-10-16
- AI security firm Xbow found a full-chain Chrome exploit affecting a billion users in 6 days — moyix · 2026-10-16