Research · curated 5 Aug 2026
Exposed by Design: A Dynamic Security Assessment of Internet-Facing MCP Servers at Scale
First reported · updated · 2 reports arxiv.org
Coverage timeline
Why it matters
MCP servers act as amplifiers that translate attacker influence over tool descriptions or outputs into privileged machine actions, and this study shows the vast majority of internet-facing deployments lack authentication and expose exploitable, agent-native attack surfaces at scale.
A research paper, 'Exposed by Design,' presents the first dynamic behavioral security assessment of internet-facing Model Context Protocol (MCP) servers, combining passive discovery across eleven data sources with active testing via Corvus, a purpose-built framework of 34 test modules covering 10 MCP-specific vulnerability classes. Across July 2026 measurement runs the authors confirmed 640 production MCP servers, audited 414, and uncovered 68 reportable vulnerabilities including SQL injection, SSRF against cloud metadata, prompt template injection, and cursor-based path traversal, finding 91.8% lacked OAuth authentication and 687 tool instances exposed shell execution without access controls. Corvus is released as open-source.