Research
MCP Server Security Analysis 2026: 15,465 Servers Expose AI Supply Chain Risks
First reported · Discovered aviatrix.ai
Page published
Earliest dated coverage: 6 Oct 2026 · First observed: 21 Oct 2026 · Latest dated coverage: 6 Oct 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
Unvetted MCP servers and potentially reclaimable domains can expose enterprise AI agents to attacker-controlled tools, making server approval and endpoint ownership verification important defenses.
OX Security's reported analysis of 15,465 publicly indexed MCP servers identified gaps in marketplace security review, consumer-tunnel hosting, and potentially hijackable domains. The study reported that 2.3% of servers were associated with dangling domains, highlighting AI supply-chain exposure without establishing observed exploitation.