MCP 2026 Statistics (Updated September)

How many MCP servers are there

1. 1

   The official MCP Registry listed 35,286 active servers on September 24, 2026, in TAM Graph's count of its API.

   Source: TAM Graph · latest version of each server, pulled 2026-09-24 · 35,663 servers in the registry, 377 of them deprecated or deleted · method

2. 2

   30,084 public GitHub repositories carry the mcp-server topic, in TAM Graph's GitHub Search API query on September 24, 2026.

   Source: TAM Graph · queried 2026-09-24 · public GitHub repositories · method

3. 3

   418 of 35,286 active registry servers (1.2%) mention CRM, lead generation, prospecting, sales intelligence or B2B contact and company data in their name or description.

   Source: TAM Graph · pulled 2026-09-24 · 35,286 active servers · method

4. 4

   Anthropic counted more than 10,000 active public MCP servers in December 2025, when it donated the protocol to the Agentic AI Foundation under the Linux Foundation.

   Source: Anthropic, 2025 ^[1]

5. 5

   Claude's connector directory listed more than 75 connectors built on MCP at the same date.

   Source: Anthropic, 2025 ^[1]

6. 6

   Digital Applied's pull from the official MCP Registry API on May 24, 2026 counted 9,652 latest server records and 28,959 server/version records.

   Source: Digital Applied, 2026 ^[2]

7. 7

   The GitHub Search API returned 15,926 repositories tagged with the mcp-server topic on May 24, 2026, according to Digital Applied.

   Source: Digital Applied, 2026 ^[2]

8. 8

   A 2025 crawl of six MCP marketplaces collected 17,630 raw entries, of which only 49.1% were valid, working projects; the rest were placeholders, forks or abandoned repositories.

   Source: arXiv, 2025 ^[3]

9. 9

   In a 2025 arXiv study that crawled six MCP marketplaces, 43.4% of MCP.so's 16,646 server records and 26.4% of MCP Market's 14,280 passed validation as working projects.

   Source: arXiv, 2025 ^[3]

10. 10

    41.9% of valid MCP projects appear in more than one marketplace, and 6.9% are listed in four or more.

    Source: arXiv, 2025 ^[3]

11. 11

    Astrix Security estimated in 2025 that about 20,000 GitHub repositories implement an MCP server, out of roughly 50,000 MCP-related repositories.

    Source: Astrix Security, 2025 ^[4]

12. 12

    Block, the company behind Square and Cash App, has built more than 60 MCP servers for its own use.

    Source: Block, 2025 ^[5]

How fast MCP use is growing

1. 13

   The official MCP Python and TypeScript SDKs passed 97 million monthly downloads in December 2025, one year after launch.

   Source: Model Context Protocol, 2025 ^[6]

2. 14

   By July 2026 the MCP maintainers reported close to half a billion SDK downloads a month across their Tier 1 SDKs.

   Source: Model Context Protocol, 2026 ^[7]

3. 15

   The TypeScript and Python SDKs have each passed 1 billion total downloads.

   Source: Model Context Protocol, 2026 ^[7]

4. 16

   Honeycomb, an observability company, reported in the maintainers' July 2026 release post that nearly 20% of its monthly interactive queries are now made by AI agents.

   Source: Model Context Protocol, 2026 ^[7]

How many companies use MCP in production

1. 17

   12% of senior technical leaders at large companies in software, retail and financial services said their organization uses MCP servers in broad production, and 29% in limited production.

   Source: Stacklok, 2026 ^[8]

2. 18

   30% of senior technical leaders at large US, Canadian and UK companies in software, retail and financial services were piloting MCP servers and 29% were still planning or evaluating, in Stacklok's 2026 survey.

   Source: Stacklok, 2026 ^[8]

3. 19

   In Stacklok's 2026 survey of 100 software-company leaders, 19% reported broad production use of MCP servers.

   Source: Stacklok, 2026 ^[8]

4. 20

   39% of software-company leaders called MCP adoption a high priority (a top-5 initiative) and 10% a critical priority (a top-3 initiative).

   Source: Stacklok, 2026 ^[8]

5. 21

   Software developers are the expected main users of MCP servers at 80% of the software companies Stacklok surveyed, and data analysts or data scientists at 68%.

   Source: Stacklok, 2026 ^[8]

6. 22

   Test generation is the most common planned MCP use case at software companies (68%), followed by code review automation (67%).

   Source: Stacklok, 2026 ^[8]

7. 23

   72% of MCP users surveyed by Zuplo expect their MCP usage to increase over the next 12 months.

   Source: Zuplo, 2026 ^[9]

8. 24

   54% are confident MCP will persist or become an industry standard.

   Source: Zuplo, 2026 ^[9]

9. 25

   40% expect MCP to account for a quarter to half of their AI tool usage within a year.

   Source: Zuplo, 2026 ^[9]

10. 26

    58% of MCP builders wrap existing APIs, and 23% create new APIs specifically for MCP.

    Source: Zuplo, 2026 ^[9]

11. 27

    In interviews with 20 practitioners at eight companies, 90% said MCP improved the quality of LLM output and 60% said it reduced monthly costs.

    Source: arXiv, 2026 ^[10]

12. 28

    Only 30% of teams in a 2026 arXiv interview study of 20 practitioners at eight Internet and financial companies had MCP permission control at the level of individual APIs; the rest relied on an administrator/regular user split.

    Source: arXiv, 2026 ^[10]

How MCP servers are built and hosted

1. 29

   61.3% of active servers in the official MCP Registry offer a remote endpoint an agent can connect to over the web; 37.5% ship only as a package to install locally.

   Source: TAM Graph · pulled 2026-09-24 · 35,286 active servers · method

2. 30

   Of the 13,234 registry servers that ship only as a local package, 8,360 (63%) are on npm and 3,580 (27%) on PyPI.

   Source: TAM Graph · pulled 2026-09-24 · 13,234 package-only servers · method

3. 31

   67.3% of active registry servers are published under a GitHub namespace (io.github.<user>) rather than a company-owned domain.

   Source: TAM Graph · pulled 2026-09-24 · 35,286 active servers · method

4. 32

   JavaScript (55.0%) and Python (38.3%) account for more than 93% of valid MCP servers; Go is 4.1% and Rust 0.9%.

   Source: arXiv, 2025 ^[3]

5. 33

   40.9% of valid MCP servers had been updated in the previous 90 days, and 21.9% had been inactive for more than a year.

   Source: arXiv, 2025 ^[3]

6. 34

   80.9% of MCP clients connect to only one server at a time; 19.1% support several concurrent server connections.

   Source: arXiv, 2025 ^[3]

How secure are MCP servers

1. 35

   88% of more than 5,200 open-source MCP servers that Astrix analyzed require credentials.

   Source: Astrix Security, 2025 ^[4]

2. 36

   53% of the 5,205 open-source MCP server repositories that Astrix Security analyzed in 2025 rely on long-lived static secrets such as API keys and personal access tokens, and 8.5% use OAuth.

   Source: Astrix Security, 2025 ^[4]

3. 37

   79% of MCP servers that use API keys read them from plain environment variables.

   Source: Astrix Security, 2025 ^[4]

4. 38

   Equixly's security tests of popular MCP server implementations found command injection flaws in 43% of them, SSRF in 30% and path traversal in 22%.

   Source: Equixly, 2025 ^[11]

5. 39

   When Equixly reported the flaws, 30% of the development teams released fixes, 45% called the risk theoretical or acceptable and 25% did not respond.

   Source: Equixly, 2025 ^[11]

6. 40

   Knostic found 1,862 MCP servers exposed to the internet through Shodan; all 119 it checked by hand listed their tools without asking for authentication.

   Source: Knostic, 2025 ^[12]

7. 41

   In a study of 1,899 open-source MCP servers, 7.2% contained general software vulnerabilities and 5.5% showed MCP-specific tool poisoning.

   Source: arXiv, 2025 ^[13]

8. 42

   66% of 1,899 open-source MCP servers had code smells, in a 2025 arXiv study.

   Source: arXiv, 2025 ^[13]

9. 43

   Hidden instructions in MCP tool descriptions worked against o1-mini in 72.8% of test cases in the MCPTox benchmark, built on 45 live MCP servers and 353 tools.

   Source: arXiv, 2025 ^[14]

10. 44

    No model in the 2025 MCPTox benchmark refused more than 3% of its 1,312 malicious test cases; Claude 3.7 Sonnet had the highest refusal rate.

    Source: arXiv, 2025 ^[14]

11. 45

    Security and access control is the top challenge for MCP builders, cited by 50% of Zuplo's respondents, and 38% say security concerns block wider adoption.

    Source: Zuplo, 2026 ^[9]

12. 46

    24% of Zuplo's respondents run MCP servers with no authentication.

    Source: Zuplo, 2026 ^[9]

How well AI models use MCP tools

1. 47

   On the MCP-Universe benchmark, which runs tasks against 11 real MCP servers, the best model, GPT-5, completed 43.72% of tasks.

   Source: arXiv, 2025 ^[15]

2. 48

   Grok-4 completed 33.33% of MCP-Universe tasks and Claude 4.0 Sonnet 29.44%.

   Source: arXiv, 2025 ^[15]

3. 49

   Letting an agent call MCP tools from code instead of loading every tool definition into context cut one workflow from 150,000 tokens to 2,000, a 98.7% saving, in Anthropic's tests.

   Source: Anthropic, 2025 ^[16]

Frequently asked questions

How many MCP servers are there?

The official MCP Registry listed 35,286 active servers on September 24, 2026, in TAM Graph's count, up from 9,652 latest records that Digital Applied counted in May 2026. Anthropic cited more than 10,000 active public servers in December 2025. Marketplace listings run higher but include many dead entries: a 2025 crawl of six marketplaces found only 49.1% of 17,630 entries were valid projects.

How many developers use MCP?

No survey counts MCP users directly. SDK downloads are the closest measure: the official Python and TypeScript SDKs passed 97 million monthly downloads in December 2025, and the maintainers reported close to half a billion SDK downloads a month in July 2026.

How many companies use MCP in production?

In Stacklok's 2026 survey of senior technical leaders at large US, Canadian and UK companies, 12% reported broad production use of MCP servers and 29% limited production use, while 30% were piloting. Among software companies alone, 19% reported broad production use.

Are MCP servers secure?

Security studies from 2025 found common gaps. Astrix found that 53% of about 5,200 open-source servers rely on static API keys or tokens and 8.5% use OAuth. Equixly found command injection flaws in 43% of the popular servers it tested. Knostic found 1,862 MCP servers exposed to the internet, and all 119 it checked listed their tools without authentication.

What share of MCP servers are remote?

61.3% of active servers in the official MCP Registry offer a remote endpoint, and 37.5% ship only as a local package, mostly on npm and PyPI, in TAM Graph's count on September 24, 2026.

How well do AI models use MCP tools?

On the MCP-Universe benchmark, which runs tasks against 11 real MCP servers, GPT-5 completed 43.72% of tasks, Grok-4 33.33% and Claude 4.0 Sonnet 29.44%.

Sources

1. [1]Anthropic. 2025.↑4 ↑5
2. [2]Digital Applied. 2026.↑6 ↑7
3. [3]arXiv. “A Measurement Study of Model Context Protocol”. 2025.↑8 ↑9 ↑10 ↑32 ↑33 ↑34
4. [4]Astrix Security. 2025.↑11 ↑35 ↑36 ↑37
5. [5]Block. 2025.↑12
6. [6]Model Context Protocol. 2025.↑13
7. [7]Model Context Protocol. 2026.↑14 ↑15 ↑16
8. [8]Stacklok. 2026.↑17 ↑18 ↑19 ↑20 ↑21 ↑22
9. [9]Zuplo. 2026.↑23 ↑24 ↑25 ↑26 ↑45 ↑46
10. [10]arXiv. “Understanding How Enterprises Adopt the Model Context Protocol for LLM-Driven Software Engineering”. 2026.↑27 ↑28
11. [11]Equixly. 2025.↑38 ↑39
12. [12]Knostic. 2025.↑40
13. [13]arXiv. “Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers”. 2025.↑41 ↑42
14. [14]arXiv. “MCPTox: A Benchmark for Tool Poisoning Attack on Real-World MCP Servers”. 2025.↑43 ↑44
15. [15]arXiv. “MCP-Universe: Benchmarking Large Language Models with Real-World Model Context Protocol Servers”. 2025.↑47 ↑48
16. [16]Anthropic. 2025.↑49

Method

We searched Google for mcp statistics, model context protocol adoption and how many mcp servers are there, read the pages that ranked, and counted how many of them repeat each number. Each outside number was traced to the company, survey or paper that produced it and checked against that page on September 24, 2026. Several numbers that circulate on statistics pages had no source we could find, such as a 90% organisational adoption forecast and an MCP market size, and are left out. Five papers on arXiv supplied the measurement, security and benchmark figures; the adoption surveys are vendor surveys (Stacklok, Zuplo) with samples of about 100 to 300 people. Server counts differ by a factor of three or more depending on what is counted: registry records, GitHub repositories, marketplace listings, or servers that pass a validity check. TAM Graph's numbers come from the official registry API and the GitHub Search API on the same day; the registry accepts any published server, so its count includes test and duplicate entries.

TAM Graph numbers new on this page:

• The official MCP Registry listed 35,286 active servers on September 24, 2026, in TAM Graph's count of its API. Paged through registry.modelcontextprotocol.io/v0/servers?version=latest and kept one record per server name with status active.
• 61.3% of active servers in the official MCP Registry offer a remote endpoint an agent can connect to over the web; 37.5% ship only as a package to install locally. Remote = the server record lists at least one entry under remotes (streamable-http or sse). Package-only = packages and no remotes.
• Of the 13,234 registry servers that ship only as a local package, 8,360 (63%) are on npm and 3,580 (27%) on PyPI. registryType of each package in the server record; a server with packages on two registries counts once for each.
• 67.3% of active registry servers are published under a GitHub namespace (io.github.<user>) rather than a company-owned domain. Server names starting with io.github. The registry verifies these through a GitHub login; other namespaces are verified through DNS or HTTP on the publisher's domain.
• 418 of 35,286 active registry servers (1.2%) mention CRM, lead generation, prospecting, sales intelligence or B2B contact and company data in their name or description. Keyword match on name, title and description (b2b, lead generation, prospecting, firmographics, technographics, sales intelligence, contact or company data, data enrichment, crm and the names of large CRM and B2B data vendors). A keyword match is not a manual review; some matches will be loose.
• 30,084 public GitHub repositories carry the mcp-server topic, in TAM Graph's GitHub Search API query on September 24, 2026. GitHub Search API, q=topic:mcp-server, total_count. Repositories without the topic tag are not counted.

All 49 statistics as a CSV: mcp-statistics.csv.

Cite this page

TAM Graph, “MCP 2026 Statistics (Updated September)”, updated September 2026, https://tamgraph.com/research/mcp-statistics

To cite one number, link its anchor: each statistic has one, for example https://tamgraph.com/research/mcp-statistics#stat-1.