The agentic world, mapped

Where MCP servers are exposed to the internet, and where this week's agentic security events happened. Exposure figures are aggregate counts from published internet censuses. No IP address or hostname is ever shown.

Scroll over the globe to enter the agentic world

Exposed MCP services by country

Country	Services	Hosts	Share
United States	3,057	2,586	24.4%
China	950	710	7.6%
Germany	720	592	5.8%
Hong Kong	350	326	2.8%
France	332	285	2.7%
Singapore	285	241	2.3%
India	223	178	1.8%
Japan	217	180	1.7%
Finland	209	132	1.7%
Netherlands	180	139	1.4%
Other 46 countries	5,997		47.9%

Source: Censys, data collected 2026-04-24 to 2026-04-28, query web.endpoints.endpoint_type=MCP. Passive Internet-wide scan data indexed by Censys; services identified as MCP endpoints. Counts are services, not organisations. Only the top 10 countries were published. For how other censuses compare, read How many MCP servers are exposed?

How the map is built

Exposure: Aggregate counts of internet-reachable MCP endpoints from internet-wide scan indexes (Censys, Shodan) and published research. We record counts by country and network only.
Events: Incidents, vulnerabilities and platform or protocol releases from the reports in the library, placed where they happened or where they came from.
CVEs: Vulnerabilities in MCP servers, SDKs and agent frameworks orbit the globe instead of being pinned to it, because a software flaw has no location: it exists wherever the software runs. Red satellites are known to be exploited in the wild (for example, listed in CISA's Known Exploited Vulnerabilities catalog). Larger ones have higher CVSS scores.
Ethics: Collection is passive: we query search indexes and never connect to, probe or call tools on third-party servers. We never publish IP addresses or hostnames, because a list of unauthenticated servers is a target list.

Exposed MCP services by country

By hosting network

How the map is built