8000+ MCP Servers Exposed on Public Internet Unauthenticated

Nyami Research·high signal

Researchers found 8,000+ MCP servers on the public internet with admin panels, debug endpoints, and API routes exposed without authentication. Default configs binding to 0.0.0.0:8080. Full agent conversation histories, API keys, database credentials exposed.