VendorsAstrix Security
Astrix Security
Cybersecurity reports and statistics published by Astrix Security
8 categories1 reports
Research Reports
Reports and publications from Astrix Security
Recent Statistics & Reports
Over 16,000 MCP servers are indexed by unofficial registries such as mcp.so.
10/15/2025•
Model Context Protocol
79% of API keys found in open-source MCP server implementations are passed via simple environment variables.
10/15/2025•
Model Context ProtocolAPI keys
There are a total of 20,000 MCP server implementations on GitHub.
10/15/2025•
Model Context ProtocolGitHub
Unofficial marketplaces have indexed upwards of 17,000 open-source Model Context Protocol (MCP) server implementations.
10/15/2025•
Model Context Protocol
8.5% of open-source Model Context Protocol (MCP) server implementations adopt modern and secure authentication methods, such as OAuth.
10/15/2025•
Model Context ProtocolAuthenticationOAuth
88% of open-source Model Context Protocol (MCP) server implementations require credentials.
10/15/2025•
Model Context ProtocolCredentials
53% of open-source Model Context Protocol (MCP) server implementations rely on insecure, long-lived static secrets, such as API keys and Personal Access Tokens (PATs).
10/15/2025•
Model Context ProtocolSecretsAPI keys
There was a 30% drop between the total number of repositories downloaded and those implementing real open-source Model Context Protocol (MCP) servers.
10/15/2025•
Model Context Protocol
There are an estimated 20,000 repositories in GitHub implementing open-source Model Context Protocol (MCP) servers.
10/15/2025•
Model Context ProtocolGitHub