Akto, a leader in API security, today announced the launch of Akto MCP Security, the world’s first purpose-built solution designed to secure Model Context Protocol (MCP) servers. As AI agents like ChatGPT, Claude, and GitHub Copilot rapidly become part of core enterprise workflows, developers are adopting MCP to enable these agents to safely and dynamically invoke APIs. But with this shift comes a new attack surface – MCP Servers.
Also Read: Zero Trust in the Cloud Era: Securing Hybrid and Multi-Cloud Environments
“MCP is the protocol powering the next generation of AI-native software,” said Ankita Gupta, Co-Founder and CEO of Akto.
In May 2025, a critical vulnerability in GitHub’s MCP server allowed attackers to embed malicious instructions in public issues. When processed by AI agents, those instructions led to unauthorized access and data leakage highlighting the urgent need for MCP-specific security controls.
Akto MCP Security is designed from the ground up to protect MCPs. It detects shadow MCP servers, tests for prompt injection and tool poisoning vulnerabilities, and monitors AI-to-API traffic in real time to flag suspicious behavior. The platform helps security teams stay ahead of threats in a world where APIs aren’t just passive endpoints, they’re actively invoked by autonomous agents that can introduce new risks with every interaction.
Built in collaboration with Akto’s enterprise customers, the Akto MCP Security platform includes three core modules at launch:
- MCP Server Discovery – Automatically detects all MCP-compatible servers and related API calls across environments using Akto’s 50+ traffic and code connectors, eliminating shadow MCPs.
- MCP Security Testing – Continuously tests MCP endpoints and tools for vulnerabilities like unauthorized access, prompt injection, insecure auth, and data exposure.
- MCP Monitoring & Threat Detection – Real-time behavioral analysis of MCP traffic to detect threats such as tool misuse, permission escalation, and malicious agent behavior.
“MCP opens powerful new possibilities, but also dangerous new paths for abuse,” said Ankush Jain, CTO at Akto. “We’ve built dedicated logic for how MCP works, so security teams can monitor, test, and protect these systems with context.”
Read More on CIO Influence: AI-Augmented Risk Scoring in Shared Data Ecosystems
Akto’s early access program is already onboarding enterprise customers who are actively building with MCP, including teams at leading banking, fintech, and healthcare companies. The company plans to expand its API Security capabilities to cover modern, new threats.
[To share your insights with us, please write to psen@itechseries.com]
