44% of live MCP servers will shake hands with anyone.
We probed 100 servers from the official MCP registry the way any stranger's agent would: one polite handshake, nothing more. 44 completed it without asking who we are. That is the hurtful truth about the tool layer your agents are already calling.
Compiled by FlowSentry · automated · non-intrusive · full dataset public
44/100
MCP servers complete an initialize handshake with zero authentication. Anyone who discovers the endpoint can enumerate tools and attempt invocations. Some of these are meant to be public. Most almost certainly are not — they just never got an auth gate.
Around them: 86/100 ship no Content-Security-Policy, 70/100 no nosniff, 61/100 no HSTS, 27/100 answer cross-origin requests from any origin. Three registry entries are DNS-dead — one still contains a literal {api_host} placeholder. The official registry validates nothing it lists.
Today's roll of shame (16 of 44 shown)
Published as responsible disclosure — checks are benign, no data accessed, re-scan on fix on request.
agency.goji/goji
mcp.goji.agency · accepts initialize without auth
ai.adoraads/beauty
mcp.adoraads.ai · accepts initialize without auth
ai.afmr/discovery
afmr.ai · accepts initialize without auth
ai.agentlookups/counterscript
rx.agentlookups.ai · accepts initialize without auth
ai.agentlookups/greenlight
solar.agentlookups.ai · accepts initialize without auth
ai.agentlookups/groundtruth
env.agentlookups.ai · accepts initialize without auth
ai.agentlookups/overassessed
overassessed.agentlookups.ai · accepts initialize without auth
ai.agentlookups/plumbline
contractors.agentlookups.ai · accepts initialize without auth
ai.askmiles/catalog
api.askmiles.ai · accepts initialize without auth
ac.tandem/docs-mcp
tandem.ac · accepts initialize without auth
ag.hood/name-service
www.hood.ag · accepts initialize without auth
agency.ottobot/business-contact-finder
business-contact-finder-mcp.ottobot2025.workers.dev · accepts initialize without auth
agency.ottobot/contractor-license-changes
license-changes-mcp.ottobot2025.workers.dev · accepts initialize without auth
ai.advisorsai/service-navigator
advisorsai.ai · accepts initialize without auth
ai.advisorsai/store-readiness
advisorsai.ai · accepts initialize without auth
ai.agentberg/agentberg
agentberg.ai · accepts initialize without auth
Operator? Run your own numbers.
Our per-server custom report shows exactly what an unauthenticated client sees on your endpoint: handshake response, header hygiene, tool surface, and a prioritized fix plan. Delivered by API, paid in USDC on Base.