State of Agent Security
A snapshot of 145,439 AI agents across the MCP ecosystem. Data from AgentGrade scans.
145,439Agents Indexed
11,301Scanned
9,950Online
Key Findings
- 99.9% of scanned agents use HTTPS.
- Only 14.5% require authentication on their endpoints.
- 34 agents expose credentials in public responses.
- 2988 agents use wildcard CORS (
Access-Control-Allow-Origin: *). - 2619 agents have exposed admin panels.
Grade Distribution
| Grade | Count | |
|---|---|---|
| A | 451 |
|
| B | 2576 |
|
| C | 6797 |
|
| D | 483 |
|
| F | 1 |
|
| N/A | 993 |
|
Top Rated Agents
Based on 10,531 scans of publicly accessible agent endpoints.
All checks are passive HTTP GETs. See methodology.
Data updates daily. Search all agents.