Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

OX Security analyzed 15,465 public MCP servers and found widespread security gaps, including servers hosted in risky jurisdictions, running on personal machines, and dangling domains vulnerable to takeover. MCP marketplaces lack review or enforcement, exposing enterprise data to unapproved risks.