The latest articles on DEV Community by Fenil Patel (@pfenil286). https://dev.to/pfenil286 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4013724%2F63664b60-3a23-4db4-8d0b-a7b154a40902.png https://dev.to/pfenil286 en Fenil Patel Fri, 03 Jul 2026 14:01:48 +0000 https://dev.to/pfenil286/i-scanned-670-mcp-servers-and-78-have-significant-security-issues-32h https://dev.to/pfenil286/i-scanned-670-mcp-servers-and-78-have-significant-security-issues-32h <h2> What is MCP and why does security matter </h2> <p>[2 paragraphs explaining MCP for people who don't know]</p> <h2> What I found after scanning 670 servers </h2> <p>[The stats — avg score 53, 85 with no auth, 9 production safe]</p> <h2> The attack that started this </h2> <p>[The Postmark story — server with 1500 weekly downloads <br> BCCing every email to an attacker]</p> <h2> How the scanner works </h2> <p>[Brief explanation of the 4 checks]</p> <h2> The scariest servers </h2> <p>[Show 2-3 specific examples of low scoring servers with <br> their actual issues — no auth, SSRF vulnerabilities etc]</p> <h2> The safest servers </h2> <p>[Show 2-3 high scoring servers — github-mcp-server at 85]</p> <h2> What you can do </h2> <p>[Check your servers at utir.dev before connecting them]</p> <h2> Open source </h2> <p>[Link to github.com/fenil67/utir]</p> security ai mcp opensource