Hardcoded Secrets

We Built an MCP Security Scanner — Here's What We Found Scanning 50+ Servers

A security scan of over 50 open-source MCP servers revealed that 72% had critical or high-severity vulnerabilities, including hardcoded API keys and insecure command execution. This highlights a significant security gap in MCP servers, which are increasingly used by AI assistants but often built without proper defense mechanisms.