State of MCP Security

Security analysis of 200 MCP servers in the ecosystem

200

Servers Scanned

78

Average Score

107

Passing (80+)

22

Failing (<60)

22

With Criticals

99

Highest Score

Score Distribution

90-100

59

80-89

48

70-79

41

60-69

30

50-59

13

<50

9

Top 10 Servers

1 firecrawl/firecrawl-mcp-server99

2 upstash/context799

3 aws/aws-mcp-server99

4 val-town/val-town-mcp99

5 weaviate/weaviate-mcp99

6 clickhouse/clickhouse-mcp99

7 replicate-mcp/replicate-server99

8 microsoft/autogen98

9 zendesk-mcp/zendesk-server98

10 gitpod-io/gitpod-mcp97

Needs Improvement

posthog/posthog-mcp34

google-maps-mcp/maps-server35

lucia-auth/lucia-mcp40

cockroachdb/cockroach-mcp40

ghost-mcp/ghost-server43

intercom-mcp/intercom-server47

nextauth-mcp/next-auth-server47

payload-mcp/payload-server48

strapi/strapi-mcp48

bun-community/bun-mcp51

Last updated: 2026-09-20 · Data from 200 servers

Free Download

Get the full State of MCP Security Report

Detailed analysis of common vulnerabilities, attack vectors, and hardening recommendations for MCP server operators.

Want to see where your MCP server ranks?

Scan Your Server