ログイン中: ログイン状態を復元中...

ResearchJun 10, 2026Abcas Security Research

16,649 Entries in Other Show MCP Taxonomy Is Still Immature

The public Registry has 16,649 entries in the other category. This does not make the category useless; it shows that MCP use cases are expanding faster than taxonomy.

Terminology

TermMeaning
Public RegistryInspected MCP candidates searchable in the public Registry
Profile evidenceInspection-profile aggregates used to interpret public candidates in more depth
Review/action rowsEntries in WARN, NEED_REVIEW, RESTRICT, or BLOCK that require reasoned adoption review

Lead

Coarse categories produce coarse review. Because authority, data, and operation scope differ by use case, taxonomy improvement is risk management, not housekeeping.

Key Findings

  1. The public Registry has 16,649 entries in the other category. This does not make the category useless; it shows that MCP use cases are expanding faster than taxonomy.
  2. The 20,629 public Registry entries and 11,627 profile-evidence rows answer different questions and should not be mixed casually.
  3. The observation is an adoption input, not a final approval for a specific environment.
  4. Counts are snapshot evidence, so adoption review should check the observation date before treating the number as current state.

Dataset

ItemValue
Article date2026-06-10
Public Registry snapshot20,629 entries, synced 2026-06-06T01:17:38.963Z
Detailed profile evidence11,627 rows, generated 2026-05-20/21
Public disclosure levelAggregates, distributions, anonymized observations, and operational interpretation

Observed Metrics

MetricValueMeaning
other category16,649Candidate not closed by explicit category
developer_tools2,333Largest explicit category
Total public entries20,629Public Registry population

What We Observed

Coarse categories produce coarse review. Because authority, data, and operation scope differ by use case, taxonomy improvement is risk management, not housekeeping. This lens matters because MCP servers are not just plugins; they are bundles of authority exposed to an AI agent.

Practical Reading

Entries in other become more useful when reclassified by use case, data touched, execution location, and external destinations. Review should record execution location, destinations, data touched, and unresolved evidence, not only the server name or README.

Limits

  1. The evidence uses public aggregate data and anonymized observations, not internal detection mechanics.
  2. Counts are snapshot values and will change as the Registry updates.
  3. This is not a claim that any named MCP server is safe or unsafe.

Conclusion

Entries in other become more useful when reclassified by use case, data touched, execution location, and external destinations. Keeping this evidence in the intake record makes the review repeatable across teams and deployments.


MCP Guard continuously turns public Registry and profile evidence into adoption-review signals for MCP security teams.