Daily Security: “State of MCP Server Security 2025: 5,200 Servers, Credential Risks

Daily Security @ethers_security · 4.02K subscribers

Post #360 671 Oct 16, 2025, 22:11 UTC

Forwarded from AISecHub

State of MCP Server Security 2025: 5,200 Servers, Credential Risks - https://astrix.security/learn/blog/state-of-mcp-server-security-2025/

We analyzed over 5,200 unique, open-source MCP server implementations to understand how they manage credentials and what this means for the security of the growing AI agent ecosystem.

- 88% of MCP servers need credentials to function
- 53% rely on static API keys and Personal Access Tokens (PAT)
- Only 8.5% use modern OAuth authentication
- 79% store API keys in basic environment variables

#MCP #ModelContextProtocol #AIAgents #AgentSecurity #CredentialSecurity #SecretsManagement #OAuth #APIKeys #PATs #SecretRotation #LeastPrivilege #AstrixSecurity

Astrix Security State of MCP Server Security 2025: Research Report | Astrix 5K+ MCP servers analysis: 53% use insecure hard-coded credentials. Read the 2025 research and download the open-source MCP Secret Wrapper to mitigate risks.

❤ 1

Open in Telegram All posts from @ethers_security