MCP hits ~500M monthly downloads but stays free — the money goes to key-management security firms
FinanceYF5 · x · 2026-10-14
An analysis of the MCP (Model Context Protocol) ecosystem's economics:
- Massive adoption, zero monetization: MCP now sees nearly 500M monthly npm/PyPI downloads — on par with OpenAI's SDKs — yet the protocol itself charges nothing.
- Head-heavy ecosystem: Over 40,000 tools exist, but the top 10 capture nearly 70% of downloads.
- Follow the keys: The only MCP-related deals with disclosed prices in the past year were security/identity companies managing credentials — $740M and $1.2B acquisitions.
The takeaway: the "socket" is free, but the "keys" are valuable — credential and identity management is where MCP monetization actually lands. Sources: npm/PyPI downloads, MCP registry, company blogs, and an Astrix security report.
More from coding & agent
- Writing a formal libtiff spec triggers CBRN checks: researcher slams safety gate false positive — jd_pressman · 2026-10-14
- McDonald's China opened an MCP, so this dev distilled your orders into a stomach skill — AlchainHust · 2026-10-14
- 6 key insights from Anthropic's skills guide: progressive disclosure is king — eherrerosj · 2026-10-14
- xtool: open-source cross-platform Xcode replacement with 9.8k GitHub stars — lxfater · 2026-10-14
- Your AI agent's secrets leak because you fed API keys straight into the LLM — sujingshen · 2026-10-14
- Matt Pocock proposes GRILL.md to customize the /grill-me planning skill — mattpocockuk · 2026-10-14