MCP server sprawl: what it means for IAM and agent governance

TL;DR: MCP is turning AI agent connectivity into an identity problem, with over 1,000 servers live by early 2025 and thousands more appearing across the ecosystem according to Lasso Security. The real issue is that existing IAM and monitoring models were built for stable, reviewable identities, not fast-moving agents that can reach sensitive tools and data.

NHIMG editorial — based on content published by Lasso Security: Why MCP Agents Are the Next Cyber Battleground

Questions worth separating out

Q: How should teams govern MCP-connected AI agents in production?

A: Govern MCP-connected agents like privileged non-human identities, not like ordinary integrations.

Q: Why do MCP deployments increase identity risk so quickly?

A: MCP lowers the friction for connecting agents to tools and data, which means identities, permissions, and trust relationships can appear faster than governance processes can review them.

Q: What breaks when MCP servers are deployed without central security oversight?

A: What breaks is the ability to prove who approved access, what systems the agent reached, and when the access should end.

Practitioner guidance

• Inventory every MCP-connected agent and server Create a register of all MCP endpoints, connected tools, responsible owners, and business purpose.
• Scope permissions by resource and tool Separate read access, action execution, and workflow prompts into distinct entitlements.
• Log tool-boundary activity for every agent Capture which agent invoked which tool, what context was passed, what action executed, and what data returned.

What's in the full article

Lasso Security's full blog post covers the operational detail this post intentionally leaves for the source:

• A closer look at the specific MCP workflow patterns that create visibility gaps across tools and data sources.
• Examples of how developers are connecting agents into Slack, Google Drive, Jira, and cloud platforms without central approval.
• The security gateway controls the vendor describes for request and response filtering across connected MCPs.
• Product-roadmap details on risk scoring, monitoring, and transport support that implementation teams would need to evaluate.

👉 Read Lasso Security's analysis of why MCP agents are expanding enterprise attack surface →

MCP server sprawl: what it means for IAM and agent governance?

Explore further

View Full Forum →  |  NHI Foundation Course →