Research
We publish what we learn.
Studies, tools and advisories on how AI agents and MCP servers handle access. Everything here uses public information or our own test systems.
- Studyin progress
State of MCP Scopes
Most MCP servers give a connected AI agent everything the user can do, by default. First results from 500 servers picked at random and the most-used ones, using public information only.
First results 11 Oct 2026 · full report December 2026
- Toolin progress
Scopegauge
Open-source tool that compares the scopes an MCP server requests with the scopes its tools use.
Release due December 2026
The population
Where our first study starts.
The official MCP Registry lists every server that has been published to it. We count it, filter it, and sample from the servers companies host themselves.
- All servers in the official MCP Registry41,598
- Active, with a hosted (remote) URL26,156
- …published under a verified company domain13,528
- …hosted by that company itself (gateways, free hosting and duplicates removed)10,811
How we do research
Three rules, no exceptions.
- 01
Public information only
Documentation, published scopes and open-source code. We don't probe systems we aren't authorized to test.
- 02
Owners hear first
Anything that affects a real product goes to its owner through their disclosure channel before we publish, never with a sales pitch attached.
- 03
No naming until it's fixed
Studies report patterns and counts. We name a product only after its owner has fixed the issue or agreed to it.