Audit: 47% of MCP Registry Servers Hide Steering Instructions
ChiefGrowth · reddit · 2026-08-29
An audit of 15,329 remote servers in the official MCP registry reveals significant security insights. 54% of servers returned a tool list, with 29% of live tools hosted by just two domains. While no direct secret theft (like SSH keys) was found in 140,284 descriptions, widespread 'steering' was detected. 47 hosts (406 tools) inject hidden instructions into tool descriptions, directing models to hide competitors, bypass safety checks, or conceal platform limitations from users.
More from Safety
- AI coding agent deletes production database in 9 seconds; Keycard calls for task-based agent auth — matt_slotnick · 2026-10-15
- Lexsi's AI Safety & Alignment Hackathon offers $30K+ prizes with Cohere Labs and Hugging Face — Cohere_Labs · 2026-10-15
- Post-OpenAI/Hugging Face, the new AI safety baseline is to assume misalignment — LuizaJarovsky · 2026-10-15
- Danish breach exposes 8.8M people's data — admin password was "123456" — gnukeith · 2026-10-15
- EU promises vs reality: EU Inc stalled, AI Act guidance late and shifting — alexvoica · 2026-10-15
- Animated teardown of XBOW's Chrome full-chain exploit that won Google's first $250K VRP bounty — moyix · 2026-10-15