Unverified60% confidenceFactExact time
In July, Wiz Research scanned internet-reachable MCP servers and found that about 70% of servers returned their full tool list directly to anonymous callers without requiring login.
2
Sources
60%
Confidence
Medium-term (~90 days)
Relevance
10/21/2026
First Seen
Valid until: 1/19/2027
Sources
Related Entities
Related Claims
UnverifiedWiz Research's scan found that about 42% of exposed MCP servers returned real data when their tools were called, and some servers even exposed tools that could create or delete records.72% similarUnverifiedWhen an AI agent first attempts to access a protected MCP server, the server returns a 401 Unauthorized response and indicates the location of the authorization server in the response header.68% similarVerifiedInvariant Labs demonstrated an attack against the official GitHub MCP server: after planting a malicious issue in a public repository, the agent pulled data from the repository owner's private repositories and published it to a public pull request.67% similarUnverifiedIn the above MCP server study, 150 instances were dynamically confirmed to have vulnerabilities, and 13 security advisories were published, including two CVEs in Anthropic's own Git MCP Server.65% similarUnverifiedWithout rigorous authentication, permission isolation, and input validation, a hijacked agent may cause damage to backend systems via an MCP server.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081512API
curl https://kongchang.com/api/v1/knowledge/claims/1081512MCP
get_claim(id=1081512)