Preliminary research

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang · arXiv.org

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

First measurement of authentication in remote Model Context Protocol servers. Of 7,973 live servers found, 40.55% expose their tools with no authentication at all. Among the rest OAuth dominates, but MCP deployments combine open client environments, dynamic client registration and delegated authorization, which produces three MCP-specific classes of flaw beside conventional OAuth misconfiguration.

Record

Researcher

Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang

Published by

arXiv.org

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• oauth
• llm
• ai-agent
• measurement-study
• large-scale-scan
• auth-bypass
• owasp-a01-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang, first published at the original source. Preserved copies are kept so the citation survives its host.