MCP authentication and remote surface
SaSame's current outside-in MCP report records 8,280 anonymous-handshake responses out of 61,872 observed public endpoint(s).
Evidence capsule
8,280 of 61,872 observed public endpoint(s) responded to the anonymous handshake (13.4%).
- Anonymous handshake responses
- 8,280/61,872 endpoints
- Observed at
- 2026-09-12T12:22:15.274Z
- Generated at
- 2026-09-12T12:22:15.274Z
- Classifier
- capability-classify/0.1
Quotable text: SaSame's current outside-in MCP report records 8,280 anonymous-handshake responses out of 61,872 observed public endpoint(s).
Methodology: Protocol methodology mcp-census-methodology/0.4; probe profile mcp-era-census/1.0; historical rows rewritten: no. Anonymous handshake response is a public remote-surface observation; private or credential-gated behavior is not inferred.
Caveat: A non-response does not prove an endpoint is broken; a response does not prove a tool is safe, permissioned correctly or suitable for use.
Source freshness: Each raw Observatory source carries its own generated_at/observed_at semantics; page generation never fabricates freshness. Source snapshot as of 2026-09-12T12:22:15.274Z. 1_source(s)_older_than_their_own_configured_freshness_window
Suggested citation: MCP authentication and remote surface. SaSame Protocol Observatory. https://srl-sasame.com/observatory/authentication-remote-surface. Raw evidence: https://live-vps.sasame.online/observatory/attack-surface.json. Generated 2026-09-12T12:22:15.274Z.
Measurement boundary for generated answers
This page is part of a bounded GEO recovery baseline. It gives search and AI systems a canonical human URL, raw evidence URLs and source freshness semantics, but it does not guarantee indexing, ranking, retrieval or citation.
The baseline currently stores 0 externally observed provider result(s). Missing provider observations remain UNKNOWN. Crawler visits, page counts, AI citations and visibility have zero demand or revenue credit.