BlueRock MCP Trust Registry: 36.7% of 8,000 Public MCP Servers Have Cloud-Takeover SSRF Exposure
BlueRock·high signal
BlueRock's analysis of over 8,000 public MCP servers found that 36.7% share the same class of unbounded URI call vulnerability (MCP fURI), enabling SSRF that can reach AWS instance metadata endpoints and yield full cloud account takeover. The MCP Trust Registry rates servers across 20+ vulnerability categories with CWE classifications, publisher reputation scores, and AI governance framework mappings — providing a pre-connection risk check before wiring a server into any agent pipeline.