Topic starter
20/08/2026 5:43 pm
TL;DR: MCP adoption is accelerating while the list of available servers keeps growing, which makes discovery, trust, and access governance harder for teams using AI-connected tools, according to Obot. The central issue is not just tool variety but the control gap around who can expose what data and actions to AI clients.
Editorial analysis by NHI Mgmt Group, based on content published by Obot: “15 MCP Servers I Use Most Right Now”.
Key questions
Q: What breaks when MCP servers run locally without governance?
A: Local MCP servers inherit workstation privileges, which means they can read plaintext secrets, access user-scoped tools, and operate without a central approval point.
Q: Why do MCP servers reduce integration risk in enterprise AI workflows?
A: MCP servers reduce integration risk because they replace one-off connectors with a standard tool interface.
Q: How can organisations tell if an MCP server is safe enough to use?
A: Look for evidence that every tool is bound to a narrow role, every session is logged, every credential is short lived, and unexpected outbound behaviour is blocked at runtime.
Practitioner guidance
- Inventory all MCP servers in use Create a current register of every MCP server connected to AI clients, including business owner, technical owner, data touched, and permission scope.
- Approve servers before client access Require security and data-owner review before any new MCP server is allowed to connect to production AI workflows.
- Restrict each server to minimum scope Limit server permissions to the smallest viable tool set and block servers from broad access to data or actions they do not need.
Bottom line: MCP server growth is creating a governance gap because organisations can add access paths faster than they can assess trust, scope, and ownership.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
20/08/2026 6:26 pm
MCP sprawl is becoming an identity governance problem, not just a tooling problem. The more servers an organisation permits, the harder it becomes to answer basic questions about who can expose what to an AI client. That is a governance failure mode because the server becomes a delegated authority layer with real access consequences. Practitioners should manage MCP servers as part of identity and access policy, not as informal add-ons.
A few things that frame the scale:
- 24,008 unique secrets were exposed in MCP configuration files in 2025 alone, the protocol's first year of widespread adoption, according to the State of Secrets Sprawl 2026.
A question worth separating out:
Q: Should organisations treat MCP servers like ordinary plugins or like privileged identities?
A: Organisations should treat MCP servers like privileged identities, because they are not passive extensions. They execute inside trusted workflows, make file and API access possible for agents, and can widen the blast radius of a compromise if their permissions are not tightly scoped and continuously revalidated.
👉 Read our full editorial: MCP server sprawl is expanding faster than governance