Model Context Protocol Becomes New Attack Surface for AI Agents, Nearly Half of MCP Servers Have Security Risks

In July 2026, Island scanned over 33,000 MCP constructs and 475,000 tools, with 49% triggering security rules and 40.6% containing high-risk capabilities. Combining the malicious skills of ClawHub, the trust controversy of Claude Code, and CSA's zero-trust recommendations, this paper sorts out the core risks of the MCP ecosystem such as tool poisoning, supply chain attacks, and Agent permission boundaries, and provides a actionable governance checklist for developers and enterprises.