Story · arXiv (via papers.cool)
Same Name, Different Server: A Security Census of Silent Drift in the Model Context Protocol Ecosystem (arXiv (via papers.cool))
paper · Story page
A census of the public MCP registry, 21,643 servers and 72,606 version records, found 40.6% of multi-version servers silently changed what they advertise. Another 4.2% repointed their remote endpoint to a different host, a change installed clients never see.
In plain words
- A study found unannounced changes in services that connect artificial intelligence systems to outside software.
- Some services changed what their public directory listings advertised without announcing the change.
- Some redirected connections to a different internet address while keeping the same identity in the directory.
- People already using these services are not shown when their software starts contacting a different internet address.
Appeared in
- A shell beats a typed tool catalog, and agents barely report their work
Sep 16, 2026 · in the sections
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.