State of MCP Server Security 2025: What 5,200 Servers Reveal, and the Open-Source Fix You Can Use Today - Seguridad Mania.com - España y América Latina

MCP servers serve as the backbone that enables AI agents to access the tools, data, and context they need to operate. By connecting these agents to everything from internal APIs and databases to third-party SaaS systems, MCP turns isolated AI models into fully capable, action-driven agents. New research by Astrix Security analyzed more than 5,200 open-source MCP servers and surfaced systemic risks: 1. 53% rely on static API keys or PATs 2. Only 8.5% use OAuth applications 3. 79% pass keys via simple environment variables In this webinar, we will unpack the data, methodology, and what it means for your attack surface. To help tackle these challenges, Astrix introduces its new open-source MCP Secret Wrapper, a practical way to eliminate hardcoded credentials by fetching secrets from a vault at runtime. In this session, you will learn how to apply the wrapper for quick wins, how to enforce least-privilege and short-lived access at scale, and how to align with compliance without slowing down your teams.