LATIDIA · Ciberseguridad

Same Name, Different Server: A Security Census of Silent Drift in the Model Context Protocol Ecosystem

arXiv: 2609.14119v1Tipo de anuncio: nuevo Resumen: El Protocolo de Contexto de Modelo (MCP) se ha convertido en la interfaz común a través de la cual las aplicaciones de modelos de lenguaje grandes llegan a las herramientas externas, y su registro público ahora distribuye

La noticia

arXiv:2609.14119v1 Announce Type: new Abstract: The Model Context Protocol (MCP) has become the common interface through which large language model applications reach external tools, and its public registry now distributes thousands of community-built servers with little of the vetting infrastructure that mature package ecosystems have accumulated. This paper reports a census of that ecosystem. We harvested the full public MCP registry (21,643 servers, 72,606 version records, August 2026 snapshot), fetched source code for 14,353 servers, and applied a pattern-based scanner covering an eight-class threat catalogue whose accuracy we measured against 414 hand-labeled findings. Observed prevalence is dominated by unauthenticated network exposure (9.57% of scanned servers); after correcting each class by