Ox Security: MCP Servers Create Major Enterprise Governance Gaps

Ox Security's analysis of 15,465 MCP servers found that nearly 16% of 5,095 unique hostnames resolve outside the US, including in Russia and China, while over 2% no longer resolve and are available for purchase. A test of Claude Code with Haiku 3.5 showed a single always-allow permission let a malicious server access sensitive files like .env without further approval.

• 15,465 MCP servers analyzed across three public registries
• Nearly 16% of 5,095 hostnames resolve outside the US, including Russia and China
• Over 2% of hostnames no longer resolve and could be bought for impersonation
• One always-allow permission in Claude Code exposed .env without a prompt