Evidence · DiggingBeagle record
OX Security: 15,465 MCP servers, 0 governance
Research landing page states sample sizes and hostname-resolution results and describes a model-specific Claude Code permission-persistence test; full report methodology is not accessible from the landing page.
- Published
- Oct 6, 2026
- Publisher
- OX Security
- Source role
- primary disclosure
Evidence record
Research landing page states sample sizes and hostname-resolution results and describes a model-specific Claude Code permission-persistence test; full report methodology is not accessible from the landing page.
Claim-level citations (4)
- supportsA model-specific MCP test reused an earlier always-allow permission for file access: The same OX Security page says its tested attack did not succeed against Opus 4.6 or Opus 4.7.
Key Findings, Trust That Outlives the Original Permission
- supportsA model-specific MCP test reused an earlier always-allow permission for file access: OX Security reports that a prior Claude Code Always-Allow grant enabled later malicious MCP prompt injection to trigger privileged file access without another confirmation in its Haiku 3.5 test.
Key Findings, Trust That Outlives the Original Permission
- supportsAn MCP infrastructure survey found nonresolving and unregistered tool hostnames: OX Security reports that 2.3% of surveyed hostnames failed DNS resolution and six were unregistered domains, describing them as potential takeover paths rather than confirmed exploitation.
Key Findings, Low-Cost Domain Takeover Paths
- supportsAn MCP infrastructure survey found nonresolving and unregistered tool hostnames: OX Security reports analyzing 15,465 published MCP server listings associated with 5,095 unique hostnames.
Download the Report; Inside the Report