69% of destructive MCP tools carry no safety hint

A review of about 20,000 MCP tools found that 69% of tools that delete or overwrite data in Docker's MCP Catalog carry no destructiveHint. One server marked 15 delete tools as read-only due to a framework default, and the catalogue still served the old version three months after the vendor's fix.

• 69% of destructive MCP tools in Docker's catalog lack a safety hint
• One server marked 15 delete tools read-only via a framework default
• MCP spec says clients must treat annotations as untrusted
• Gateway policy blocks delete_customer before it reaches the server