We scanned 306 MCP servers – 10% have critical vulnerabilities

Show HN: We scanned 306 MCP servers – 10% have critical vulnerabilities

We scanned 306 MCP servers – 10% have critical vulnerabilities is a company in show hn launch.

Profile

We've been scanning MCP (Model Context Protocol) servers to understand the security posture of the ecosystem. After 306 servers and 1,211 vulnerabilities, here's what we found:- 69 critical vulnerabilities - 32 servers using eval() on untrusted input - 31 SQL injection vulnerabilities - 32 servers with hardcoded API credentials10.5% of servers have at least one critical vulnerability.MCP servers run with your permissions. AI agents trust them implicitly. A prompt injection can exploit them remotely.MCPSafe (https://mcpsafe.org) lets you scan before you connect. Free tier includes 30 top servers.Feedback welcome: What patterns are we missing? CI/CD integration useful?

We scanned 306 MCP servers – 10% have critical vulnerabilities is positioned in show hn launch, a segment that rewards a clear, focused offering.

It is recorded at the Show HN launch stage.

Website: mcpsafe.org