518 MCP Servers Scanned: 41% Have Zero Auth
Infrastructure

518 MCP Servers Scanned: 41% Have Zero Auth

Stack Overflow published how MCP authentication should work. I scanned 518 production servers to see what they actually do. Spoiler: 156 servers let anyone call tools that post tweets, trigger CI/CD, and send emails. No token required.

· 4 min read