MCP servers exposed 24,000+ secrets in their first full year of adoption.

The State of Secrets Sprawl 2026

May 27, 2026

MCP servers exposed 24,000+ secrets in their first full year of adoption. — This cybersecurity statistic was published by The State of Secrets Sprawl 2026 in May 2026. It covers topics including MCP, Leaked Secrets. The original data appears in GitGuardian. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 3/17/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

MCP servers exposed 24,000+ secrets in their first full year of adoption. This data was published by The State of Secrets Sprawl 2026 and covers MCP, Leaked Secrets.

Where does this data come from?

This statistic comes from GitGuardian, published by The State of Secrets Sprawl 2026 on May 27, 2026. You can view the original report at https://www.gitguardian.com/state-of-secrets-sprawl-report-2026.

What cybersecurity topics does this cover?

This statistic relates to MCP, Leaked Secrets. Browse more statistics on MCP or from The State of Secrets Sprawl 2026.

CYBERSTATS

MCP servers exposed 24,000+ secrets in their first full year of adoption.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

46% of security teams struggle to correlate Model Context Protocol (MCP) actions with execution outcomes.

70% of developers are aware of the Model Context Protocol (MCP).

Only 10% of developers are using MCP regularly.

Internal repos are 6x more likely to contain hardcoded secrets than public ones.

Leaks outside of the codebase are 13% more likely to be categorized as critical than secrets discovered inside the code.

Secrets found in self‐hosted, private GitLab instances and Docker registries were 3 to 4 times more likely to be valid.

Browse by Topic

Stay Ahead of Cyber Threats