TL;DR – StackHawk now scans remote MCP servers for security vulnerabilities, the first DAST tool to do it. In this post, we’ll cover why MCP servers are a blind spot, what risks they carry, and how to start testing them with StackHawk. Over the past 18 months, MCP servers have become the de facto way to connect enterprise applications with AI services. MCP SDK downloads are nearing 1 billion monthly downloads, up from roughly 100k when Anthropic launched the protocol in November 2024.
Discovery
Learnings
- auto_storiesStories
- categoryAreas
- helpFAQ
- forumConversations
- descriptionPapers
- mailNewsletters
- video_libraryVideos
- timelineTimeline
Guidance
- codeTechnology of APIs
- business_centerBusiness of APIs
- campaignEvangelism of APIs
- gavelGovernance of APIs
- historyHistory of APIs
- account_balancePolitics of APIs
Toolbox
- domainProviders
- apiAPIs
- cloudSolutions
- buildTools
- verifiedStandards
- gavelRegulations
- horizontal_ruleHeaders
- layersOverlays
- extensionExtensions
- schemaSchema
- policyPolicies
- ruleRules