State of MCP Server Security

An open-source scan of the MCP ecosystem, powered by Ninca · Try it live

0
servers discovered
0
analyzed (sample)
6+
detection rules
AI
hybrid classifier

How it works

Ninca discovers public MCP servers from the official registry, statically analyzes their tool descriptions (never running their code), detects attacks with fast rules plus a local AI model, and reports each finding with evidence and a fix.

Top languages (sample)

Licenses (sample)

Detection recall by approach

Adding a local AI classifier raised recall from 57% to 86%, with zero false positives.