MCPZoo says your MCP scanner is mostly noise.

Researchers built the largest dynamic-analysis corpus of MCP servers to date, 64,611 unique servers with 37,288-plus runnable, and measured what the scanners actually catch (arXiv). Current MCP security scanners flag 96.89% of servers as risky. Manual validation finds fewer than half of sampled alerts are true positives, and the scanners disagree wildly with each other. So if you're gating agent tooling on today's scanner verdicts, you're gating on close-to-random signal, which is worse than no gate because it feels like diligence. The paper released a public query interface for real risk assessment. Until the tooling matures, treat scanner output as a prompt to look, not a verdict.