In MCP registries, for every server provided by a verified technology vendor there are up to 15 lookalike servers from untrusted sources.

One in five developers grant AI agents permission for unrestricted file deletion, risking recursive wiping of a project or system.

Almost 20% of developers let AI automatically save changes to the project's main code repository without human review.

One in five developers grant AI code agents unrestricted access to perform high-risk actions without human oversight.

14.5% of AI agent configuration files grant arbitrary code execution permissions for Python.