> ## Documentation Index
> Fetch the complete documentation index at: https://docs.enkryptai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get MCP Hub Scan Statistics

> Aggregate, read-only statistics across all MCP Hub scans — total servers and tools scanned, vulnerability totals, the severity breakdown, and the most common vulnerability types. Intended for dashboards and reporting.

**Enterprise data-license feature:** requires MCP Hub API access enabled for your organization, otherwise returns `403`. Contact support@enkryptai.com.



## OpenAPI

````yaml GET /mcp-hub/dashboard-stats
openapi: 3.0.0
info:
  title: Enkrypt AI APIs
  version: 2.0.0
servers:
  - url: https://api.enkryptai.com
security:
  - apiKeyAuth: []
tags:
  - name: Guardrails
  - name: Code of Conduct
  - name: Endpoints
  - name: Datasets
  - name: Redteam
  - name: Deployments
  - name: AI Proxy
  - name: Leaderboard
  - name: Archived
  - name: MCP Hub
    description: >-
      MCP Hub vulnerability scanning APIs. Submitting scans (the POST endpoints)
      is open to all authenticated callers. The scan **retrieval** APIs — Get
      Scan Job Status, Get Complete Scan Results, List Scans, and Get MCP Hub
      Scan Statistics (the GET endpoints) — are an **enterprise data-license
      feature**: they require your organization to have MCP Hub API access
      enabled by Enkrypt, otherwise they return `403`. Contact us at
      support@enkryptai.com to enable access.
  - name: MCP Registry Servers
  - name: MCP Gateways
  - name: MCP Playground
paths:
  /mcp-hub/dashboard-stats:
    get:
      tags:
        - MCP Hub
      summary: Get MCP Hub Scan Statistics
      description: >-
        Aggregate, read-only statistics across all MCP Hub scans — total servers
        and tools scanned, vulnerability totals, the severity breakdown, and the
        most common vulnerability types. Intended for dashboards and reporting.


        **Enterprise data-license feature:** requires MCP Hub API access enabled
        for your organization, otherwise returns `403`. Contact
        support@enkryptai.com.
      operationId: mcp_hub_dashboard_stats
      responses:
        '200':
          description: Aggregate scan statistics
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MCPHubDashboardStatsResponse'
        '401':
          $ref: '#/components/responses/MCPHubUnauthorized'
        '403':
          $ref: '#/components/responses/MCPHubForbiddenNoAccess'
components:
  schemas:
    MCPHubDashboardStatsResponse:
      title: MCPHubDashboardStatsResponse
      type: object
      description: Aggregate MCP Hub scan statistics across all scanned servers.
      properties:
        total_servers_scanned:
          type: integer
          example: 25268
        mcps_scanned_this_month:
          type: integer
          example: 4
        servers_with_vulnerabilities:
          type: integer
          example: 18472
        total_tools_scanned:
          type: integer
          example: 268213
        avg_tools_per_server:
          type: number
          example: 10.6
        total_vulnerabilities:
          type: integer
          example: 143524
        avg_vulnerabilities_per_server:
          type: number
          example: 5.7
        critical_risk_rate:
          type: number
          description: >-
            Percentage of scanned servers with at least one critical-severity
            vulnerability.
          example: 7
        servers_with_critical_issues:
          type: integer
          example: 1834
        vulnerabilities_by_severity:
          type: object
          description: Vulnerability counts grouped by severity.
          properties:
            critical:
              $ref: '#/components/schemas/MCPHubSeverityBucket'
            high:
              $ref: '#/components/schemas/MCPHubSeverityBucket'
            medium:
              $ref: '#/components/schemas/MCPHubSeverityBucket'
            low:
              $ref: '#/components/schemas/MCPHubSeverityBucket'
        top_vulnerability_types:
          type: array
          description: >-
            Vulnerability counts grouped by detector/type, ordered by count
            descending.
          items:
            $ref: '#/components/schemas/MCPHubVulnerabilityTypeStat'
    MCPHubSeverityBucket:
      title: MCPHubSeverityBucket
      type: object
      description: Count and percentage of vulnerabilities at one severity level.
      properties:
        count:
          type: integer
          example: 7855
        percentage:
          type: number
          example: 5.5
    MCPHubVulnerabilityTypeStat:
      title: MCPHubVulnerabilityTypeStat
      type: object
      description: Count and percentage of vulnerabilities of one detector/type.
      properties:
        type:
          type: string
          example: prompt_injection
        count:
          type: integer
          example: 30070
        percentage:
          type: number
          example: 21
    MCPHubAuthErrorResponse:
      title: MCPHubAuthErrorResponse
      type: object
      description: Error envelope returned by the MCP Hub auth/permission failures.
      properties:
        detail:
          type: string
    MCPHubForbiddenResponse:
      title: MCPHubForbiddenResponse
      type: object
      description: >-
        Error envelope returned when the caller's organization lacks MCP Hub API
        access (enterprise data-license feature).
      properties:
        code:
          type: integer
          example: 403
        error:
          type: string
          example: Forbidden
        message:
          type: string
          example: >-
            MCP Hub APIs are an enterprise feature not enabled for your
            organization. Contact us at support@enkryptai.com for access.
        request_id:
          type: string
        time:
          type: number
  responses:
    MCPHubUnauthorized:
      description: Unauthorized — missing or invalid Authorization header
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/MCPHubAuthErrorResponse'
    MCPHubForbiddenNoAccess:
      description: >-
        Forbidden — your organization does not have access to the MCP Hub APIs.
        These retrieval/list endpoints are an enterprise data-license feature;
        contact support@enkryptai.com to enable access.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/MCPHubForbiddenResponse'
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: apikey

````