Measured, not asserted

Original research from the ControlLoop scanner: aggregate-only measurements of how public repositories configure their coding agents, MCP servers, hooks and permissions. No repository is ever named.

Agent config census · November 6, 2026 · 7,760 GitHub repositoriesWhat 7,760 GitHub repositories let their coding agents doA census of committed AI-agent configuration in 7,760 public GitHub repositories: 14% of Claude Code setups allow Bash(*), 20% ship hooks, 91.1% of MCP servers are unpinned.

14%of Claude Code setups allow Bash(*)8%run a SessionStart hook 91%of package-launched MCP servers are unpinned 2%commit a credential in agent config