Research
Exposing the Unseen: Mapping MCP Servers Across the Internet
Publication date unknown · Discovered knostic.ai
Page published
Publication date unknown · First observed: 10 Nov 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
MCP exposure research helps defenders prioritize server authentication and tool-description review before connecting agents, while distinguishing capability disclosure from demonstrated unauthorized execution.
Spellwarden’s November 2026 census reports that 16,470 of 26,548 responding MCP hosts exposed tool listings without authentication, including 9,691 listings containing tools not declared read-only. A separate Knostic study found unauthenticated tool listings on all 119 manually verified servers from 1,862 discovered internet-exposed MCP servers. Exposed listings do not establish unauthorized tool execution, and Spellwarden explicitly states that it never invoked tools.