Unverified50% confidenceFactExact time
The same scan showed that 42% of MCP servers actually returned data when tools were called, allowing anonymous parties to trigger tools.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/21/2026
First Seen
Valid until: 1/19/2027
Sources
Related Entities
Related Claims
UnverifiedMany MCP servers are published without a tool manifest, so the scanner connects directly to the running server to retrieve in real time the tools it actually exposes.72% similarUnverifiedWhen an MCP server cannot reliably identify the client making a request, any entity that can reach that service endpoint may obtain data or invoke tools under the guise of a legitimate client.70% similarUnverifiedIn the older version of MCP, 50% or more of the messages for some servers were protocol messages only (such as initialize, list tools, etc.).70% similarUnverifiedConnecting an MCP Server to an external system often involves network requests, third-party credentials and remote data, and its security and trust boundary is noticeably wider than that of built-in tools.69% similarUnverifiedA Reddit r/mcp post pointed out that when running more than 15 MCP servers, an AI agent may consume 60,000 tokens before reading the user's first message.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081513API
curl https://kongchang.com/api/v1/knowledge/claims/1081513MCP
get_claim(id=1081513)