Endor Labs MCP Server Supply Chain Risk Analysis
Date: 2025-11
Affected: MCP Server Ecosystem
Attack vector: supply-chain
Category: research
Severity: High

Endor Labs analyzed 10K+ MCP server repositories: 40% had no license, 82% use sensitive APIs without security controls, ~75% built by individuals without enterprise-grade protections.


Mitigations:

Architectural layers (MAESTRO):