I scanned 670 MCP servers and ... Note

I scanned 670 MCP servers and 78% have significant security issues

What is MCP and why does security matter[2 paragraphs explaining MCP for people who don't know]What I found after scanning 670 servers[The stats — avg score 53, 85 with no auth, 9 production safe]The attack that started this[The Postmark story — server with 1500 weekly downloads BCCing every email to an attacker]How the scanner works[Brief explanation of the 4 checks]The scariest servers[Show 2-3 specific examples of low scoring servers with their actual issues — no auth, SSRF vulnerabilities etc]The safest servers[Show 2-3 high scoring servers — github-mcp-server at 85]What you can do[Check your servers at utir.dev before connecting them]Open source[Link to github.com/fenil67/utir]