Cyberstats

Security Intelligence

VendorsAstrix Security

Astrix Security

Cybersecurity reports and statistics published by Astrix Security

8 categories1 reports

Research Reports

Reports and publications from Astrix Security

State of MCP Server Security 2025: 5,200 Servers, Credential Risks, and an Open-Source Fix

Recent Statistics & Reports

Over 16,000 MCP servers are indexed by unofficial registries such as mcp.so.

Model Context Protocol

79% of API keys found in open-source MCP server implementations are passed via simple environment variables.

Model Context Protocol API keys

There are a total of 20,000 MCP server implementations on GitHub.

Model Context Protocol GitHub

Unofficial marketplaces have indexed upwards of 17,000 open-source Model Context Protocol (MCP) server implementations.

Model Context Protocol

8.5% of open-source Model Context Protocol (MCP) server implementations adopt modern and secure authentication methods, such as OAuth.

Model Context Protocol Authentication OAuth

88% of open-source Model Context Protocol (MCP) server implementations require credentials.

Model Context Protocol Credentials

53% of open-source Model Context Protocol (MCP) server implementations rely on insecure, long-lived static secrets, such as API keys and Personal Access Tokens (PATs).

Model Context Protocol Secrets API keys

There was a 30% drop between the total number of repositories downloaded and those implementing real open-source Model Context Protocol (MCP) servers.

Model Context Protocol

There are an estimated 20,000 repositories in GitHub implementing open-source Model Context Protocol (MCP) servers.

Model Context Protocol GitHub

Top Categories

Model Context Protocol

9

2

2

1

1

1

1

Related Vendors