Censys found 12,520 exposed MCP servers

Thousands of credentialless MCP endpoints show agent tooling is being deployed faster than it is being secured

Many organizations are adopting AI faster than they are securing it. Censys scanned the internet and found 12,520 exposed MCP servers across 8,758 IPs. No credentials required to connect. New research from Censys ARC researcher Mark Ell
Ranked #2 on backlist 2026-05-27 (27 May 2026 UTC) · by (Censys) ·

How it ranks: Backlist reads my Twitter/X timeline, scores every tweet for substance with an LLM rubric (not engagement), and publishes the daily top picks with a one-line takeaway. Curated by Surya Dantuluri.