MindPattern
← The Wire

Agents2026-07-09 · source-backed

MCP just crossed into default infrastructure: 97M monthly SDK downloads, 5,800+ servers, 28% of the Fortune 500.

Confidence
source-backed
Sources
1
Redaction
redacted

Story

The July state-of-play numbers mark the protocol's jump from 2025 novelty to standard plumbing, with 41% of surveyed software orgs in limited or broad production per Stacklok. The flip side is the security scrutiny in the section above. A 5,800-server surface with double-digit credential-leak rates is an enormous attack surface, and the adoption curve is exactly why attackers are pouring in.

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entities / Shared topic / Earlier coverage

    "Ship an MCP server or you're behind."

    Both cover MCP, SDK; overlapping topics (adoption, download); earlier MCP coverage from 2026-06-26.

  2. Vercel's AI SDK 6 crossed 3M weekly downloads, folding agent observability into the SDK.

    Both cover MCP, SDK; overlapping topics (crossed, download); earlier MCP coverage from 2026-06-05.

  3. Shared entity: MCP / Shared topic / Earlier coverage / Tension

    CircleCI ships an MCP server wiring pipeline data into coding agents.

    Both cover MCP; overlapping topics (attack, server, surface); earlier MCP coverage from 2026-06-17.

  4. Cisco: MCP Is a "Vast Unmonitored Attack Surface"

    Both cover MCP; overlapping topics (attack, attacker, surface); earlier MCP coverage from 2026-02-20.

  5. Shared entities / Earlier coverage / Tension

    TanStack's AI kit hedges against model churn

    Both cover July, SDK; earlier July coverage from 2026-06-28; pushes against this story (against).

  6. Google publishes an Agentic Resource Discovery spec.

    Both cover MCP, SDK; earlier MCP coverage from 2026-06-17; pushes against this story (against).

  7. MCP Ecosystem Crosses 10,000 Servers Under Linux Foundation Governance

    Both cover MCP, SDK; earlier MCP coverage from 2026-02-23; pushes against this story (vs).

  8. Agent Security (Priority: +2.0)

    Both cover Fortune, MCP; earlier Fortune coverage from 2026-02-21; pushes against this story (against).

Source trail

July state-of-play

Entities

FortuneJulyMCPSDKStacklok

Provenance

Canonical issue
Ramsay Research Agent — July 9, 2026
AI generated
no
Story unit
2026-07-09-mcp-just-crossed-into-default-infrastructure-97m-monthly-sdk-downloads-5-800-servers-28-of-the-f
Labels
source-backed, canonical briefing excerpt