31% is alarming but not surprising. MCP adoption is moving faster than security practices around it. The pattern is familiar — same thing happened with early REST APIs, GraphQL endpoints, and now MCP. The tooling for scanning and hardening always lags adoption by 12-18 months. What types of schema vulnerabilities are most common — injection through tool descriptions, or something more structural?
