Preliminary research

A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

[2605.22333] A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang · arXiv.org

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

First measurement of authentication in remote Model Context Protocol servers. Of 7,973 live servers found, 40.55% expose their tools with no authentication at all. Among the rest OAuth dominates, but MCP deployments combine open client environments, dynamic client registration and delegated authorization, which produces three MCP-specific classes of flaw beside conventional OAuth misconfiguration.

Record

Document

[2605.22333] A First Measurement Study on Authentication Security in Real-World Remote MCP Servers

Researcher

Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang

Published by

arXiv.org

Topic

Identity

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• oauth
• llm
• ai-agent
• measurement-study
• large-scale-scan
• auth-bypass
• owasp-a01-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Huijun Zhou, Xiaohan Zhang, Haozhe Zhang, Haoyang Zhang, Mi Zhang and Min Yang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.