I Scanned Every Server in the Official MCP Registry. Here's What I Found.

The first complete security audit of all 518 servers in the Model Context Protocol registry. The MCP ecosystem is growing fast. As of February 2026, the Official MCP Registry lists 518 servers — tools that give AI agents access to databases, APIs, code execution, cloud infrastructure, and more. I scanned all of them. The headline number: 41% have no authentication at all. That's 214 servers where any AI agent — or anyone with a POST request — can enumerate every available tool with zero credentials. What "No Auth" Actually Means Before diving in, a distinction that matters: MCP-layer auth (the dangerous gap): The server exposes tools/list and sometimes tools/call without requiring any authentication at the protocol level. The tool is openly discoverable by any agent. API-layer auth (the right way): The server lists tools freely, but actual calls require user credentials ( Authorization: Bearer ... ). This is like a menu you can see without logging in, but you need to pay to eat. Of the