Enkrypt AI Scans 1,000 MCP Servers: 33% Critically Vulnerable, Average 5.2 Vulnerabilities Each

Enkrypt AI·medium signal

Enkrypt AI's industry-first quantitative study of MCP server security found that 32% of the top 1,000 MCP servers contain at least one critical vulnerability, servers average 5.2 vulnerabilities each, and some popular projects had 20+ flaws. Their automated scanner uses agentic static analysis to detect command injection, path traversal, prompt injection, code injection, and network posture issues. The scanner integrates with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) to block vulnerabilities before deployment. Configuration, code security, tool-level, and network posture checks run automatically on every commit.