The risk hiding behind exposed MCP servers

The Model Context Protocol (MCP, a system that lets AI agents use remote software tools) is being deployed across many cloud environments, but security features are lagging behind adoption. Researchers found that about 1 in 6 cloud environments expose at least one unauthenticated MCP server (servers anyone on the Internet can access without logging in), and these exposed servers often reveal sensitive data like employee information and business records, allow changes to production systems, or even grant access to cloud credentials. MCP servers are particularly risky because they automatically describe all their capabilities in a machine-readable format, making it easy for attackers to discover what they can do, and because one generic tool can interact with any MCP server worldwide.