Security4 dSeptember 17, 2026, 13:04

2,967 MCP servers advertise OAuth; only 8% meet July spec

A scan of the official MCP registry found 32,380 unique servers, of which 2,967 claim OAuth support. Only 8% fully comply with the July 28, 2026 specification, including CIMD and RFC 9207.

DEV Community Open source

2,967 MCP servers advertise OAuth; only 8% meet July spec

Registry holds 105,315 records but only 32,380 unique servers
19,789 servers claim a remote endpoint across 13,088 hosts
CIMD supported by 19%, RFC 9207 iss by 23%
60% of operators run their own authorization server

#MCP#OAuth

NIO ES8 in Norwegian Mine: 90% of Traffic Went to Chinese Servers

Security

Fake LastPass Installers Pushed Kernel Driver That Killed 145 Security Tools

Security

Hacktron details attack chain that compromised OpenAI employee accounts

Security

2,967 MCP servers advertise OAuth; only 8% meet July spec

NIO ES8 in Norwegian Mine: 90% of Traffic Went to Chinese Servers

Fake LastPass Installers Pushed Kernel Driver That Killed 145 Security Tools

Hacktron details attack chain that compromised OpenAI employee accounts

iOS 27 lets apps ask your iPhone if you're being scammed