Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
OX Security found 15,465 public MCP servers with no security review or governance.
OX Security researchers analyzed 15,465 publicly indexed MCP servers and found a significant lack of security guardrails. Many servers were hosted outside approved jurisdictions, ran on personal machines, or used dangling domains, posing risks to enterprise data and workflows. The findings highlight a critical gap in the AI ecosystem's supply chain security, as marketplaces lack vetting processes.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OX Security?
Get an email when a new story names OX Security, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonResearchers discovered 15,465 publicly indexed MCP (Model Context Protocol) servers with virtually no security guardrails, many hosted on personal machines, outside approved jurisdictions, or tied to abandoned domains. This reflects a systemic failure in AI ecosystem governance, where marketplace operators do not vet or validate the servers they index and promote. Enterprises consuming AI tools and integrations from these unverified sources inherit significant risks including data exfiltration, unauthorized access, and workflow compromise. The findings underscore that the AI supply chain is maturing faster than the security controls designed to protect it, creating a critical blind spot for organizations.
What helps against this
How we list vendors- Cloud security posture management (CSPM and CNAPP)
Misconfigured cloud storage and over-permissive roles get caught before they leak.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.