Half of ~1,850 audited MCP servers are abandoned: Preflight scans them before you connect
atp_studio_coll · reddit · 2026-09-03
A developer built Preflight, a scanner that checks MCP servers (and plain REST APIs) before you connect, addressing a systemic blind spot: nobody audits a tool's description before granting it access to run shell commands or read env vars.
The numbers are worse than expected
- Rapid Claw's 2026 audit of 1,850 MCP servers found roughly half abandoned — no maintainer, no fixes, still connectable
- Censys found 12,000+ MCP servers exposed to the open internet with no meaningful access controls
- A documented trojan (postmark-mcp) silently forwarded email for weeks before detection
What Preflight does
- Flags servers handing over tool lists with zero auth, tools granting filesystem/shell/credential access without input scoping, and known-bad signatures
- A semantic pass reads tool descriptions the way an agent would, looking for prompt-injection phrasing aimed at the model
- Tested against production servers (Linear, Sentry, Atlassian) — all correctly recognized as OAuth-gated, no false positives
- Core checks free, no signup, rate-limited to 20 scans/min
More from coding & agent
- Fable 5.1 makes three.js sites: faster and sharper, but taste still matters — repligate · 2026-09-03
- SentinelX: open-source MCP agent lets LLMs control your Linux server via whitelisted commands — CarolusX74 · 2026-09-03
- Day 30 of U-BOT: fable 5.1 agent wrote a WiFi/BLE joystick controller — _Stocko_ · 2026-09-03
- First impressions of AmpCode: ChatGPT sub support, cloud-per-thread Orbs, and a hated mascot — carlosdponx · 2026-09-03
- One agent per user in a microVM: lessons from running a proactive AI friend in production — maritime_sh · 2026-09-03
- Writer has AI turn 10 handwritten pages into slides — and concludes his own prose reads like slop — cnakazawa · 2026-09-03