/research · monthly
MCP tool risk labels
A monthly count of how public MCP servers label the tools that delete, move money, run code, send or write, set against what those tools say they do. Built from the 7Maps daily checks. Totals only; no server or tool is ever named.
Latest edition
October 2026, the first edition ›
66.3%
of tools that delete, move money, run code or change access are not marked destructive
36%
of tools that delete or erase are not marked destructive
29.6%
of tools that change something carry no annotations at all
35.3%
of servers with high-risk tools mark none of them destructive
Every edition
A new edition comes out early each month. Data: index.json. All 7IT research.