MarketsMCP Ecosystem 1412 Servers 38.7% Zero AuthenticationBloomberry·high signalXBlueskyLinkedInCopy link232% growth from 425 to 1412 servers. 50% have no public API — MCP is first machine interface. 38.7% no auth, 22.9% open CORS, 2.4% rate limiting.SourceSource pageBloomberry↳ Follow the threadPolicy dependency / Stack layerThe MCP 2026-07-28 Spec Went Final With a Stateless Core, and Anthropic Is Rolling It Into Claude NowModel Context Protocol Blog (corroborated by Anthropic's Claude blog)Stack layer / Threat patternBlack Hat USA 2026: 15+ vendors launch agent-infrastructure security products in 48 hours, codifying a new market categorySecurityWeekPolicy dependency / Stack layerRust adopts an LLM policy that bans autonomous agent contributions outright: "fine to review, not to create"Rust Blog (Inside Rust)Policy dependency / Stack layerMistral Ships Shieldstral: a 3B Apache-2.0 Safety Classifier That Takes Plain-Language Policies at Inference Time Instead of a Frozen TaxonomyMistral AI (via r/LocalLLaMA, 237 upvotes / 41 comments)Policy dependency / Stack layerrust-lang/rust Adopts an LLM Policy: 'Fine to Analyze, Distill, Check, Review — Not to Create'Inside Rust BlogStack layer / Contrast600 Visual Accessibility Reports Mined From Copilot, Cursor, Claude Code, Codex, and OpenCode Issue TrackersarXiv 2608.05116Threat pattern / ContrastBlack Hat USA 2026 Turns Into an Agent-Containment Product Launch: Zero Networks, Airlock, Acalvio, Astelia All Ship the Same WeekSecurityWeekStack layer / ContrastSimon Willison Ships LLM 0.32, Calling It 'The Most Significant New Version Since the Initial Launch of the Project'simonwillison.net