What I found scanning the top 500 MCP servers for security

Every MCP server you add to Claude, Cursor or your own agent is code that runs on your machine....