According to CoinMeta, as reported by Forkast, in August 2026, there were five unpatched MCP servers within the U.S. federal government. Researchers identified approximately 15,930 public model context protocol servers across four registration sites. This protocol has been embedded into the federal government's data infrastructure, and the U.S. Census Bureau released open-source MCP servers on GitHub. Despite the widespread use of MCP within the government, these deployments lack a dedicated security authorization framework and do not adhere to any FedRAMP standards. The current security status of MCP is not optimistic; only 8.5% of public MCP servers use OAuth authentication, and it is estimated that 30% to 82% of public servers have exploitable vulnerabilities.