Preliminary research

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang · arXiv.org

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

First measurement of authentication in remote Model Context Protocol servers. Of 7,973 live servers found, 40.55% expose their tools with no authentication at all. Among the rest OAuth dominates, but MCP deployments combine open client environments, dynamic client registration and delegated authorization, which produces three MCP-specific classes of flaw beside conventional OAuth misconfiguration.

Record

Researcher

Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang

Published by

arXiv.org

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• oauth
• llm
• ai-agent
• measurement-study
• large-scale-scan
• auth-bypass
• owasp-a01-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang, first published at the original source. Preserved copies are kept so the citation survives its host.