30,141
Model Context Protocol Observatory
A live tracker of the MCP server ecosystem — discovered across npm, PyPI, GitHub and the official registry, with releases, dependencies, and security signals updated as they happen.
Every grade and permission flag here is an inferred review prompt, not a verdict — and each one is tagged by what backs it: attested, reported, or inferred.
2,057
504
26
08-04 14:00 08-08 02:00 now
npm pypi github
peak 220 @ 14:00
- npm 736 2.4%
- pypi 144 0.5%
- github 26,760 88.8%
- gitlab 17 0.1%
- smithery 178 0.6%
- mcp.so 2,293 7.6%
- clients 13 0.0%
top maintainers
- 1 CSOAI-ORG 357 servers
- 2 Br0ski777 101 servers
- 3 MukundaKatta 90 servers
- 4 clauxel 72 servers
- 5 sandraschi 69 servers
- 6 cognis-digital 46 servers
- 7 pipeworx-io 46 servers
- 8 matematicsolutions 44 servers
- 9 malkreide 41 servers
- 10 wyre-technology 41 servers
- github release gaffer-sh/mcp@mcp-v0.9.0
- npm publish samarth-gtm-mcp@1.473.1 99t
- github release hjqcan/GoodMemory@v0.7.3
- github release CodeAlive-AI/ai-driven-development@v8.0.0
- github new_repo mirastacklabs-ai/mirastack-redfish-mcp 0t
- github new_repo dilpreet92/coldtrail 0t
- github release letian940-prog/ns-mcp-china@v2.0.0
- github release SakuraByteCore/codexmate@v0.1.11
- github release Prompthon-IO/agent-systems-handbook@release-2026.08.11.1
- npm publish iclavue@11.1.21 0t
- github release iwanro/forgetmenot@v0.5.4
- github release shrec/AIWorkHub@v0.9.43
- github new_repo letian940-prog/ns-mcp-china 0t
- github new_repo Elvesora/acceptora-php 0t
- github new_repo davidlosasgonzalez/codeagent-mcp 0t
- github release Forest-Isle/Praxis@v0.4.0
- npm publish samarth-gtm-mcp@1.473.2 99t
- github release weihuaguo270-ops/react-agent@v0.6.0
- npm publish gitnexus@1.6.10-rc.191 0t
- github new_repo lechiffre-cfo/model-drops 0t
- github release madhusudan-kulkarni/computase@v0.1.0
- npm publish ctx7@0.5.8 0t
- github new_repo Atif1299/conductor-agent-ops 0t
- github new_repo incline-ltd/awesome-agentic-engineering 0t
- github new_repo gbrlpzz/eth-euler-hpc-mcp 10t
- github new_repo madhusudan-kulkarni/computase 5t
- github release trudenboy/ma-provider-mcp@v2.1.2
- npm publish @upstash/context7-mcp@4.0.1 2t
- github release xydadada/question-bank-template@v0.1.14
- github new_repo n-schilling/office_365_exporter 8t
- github release jfrog/opencode-jfrog-plugin@v0.2.0
- github release noviqtechnologies/vexa-agentwall@v1.0.31
- github new_repo n-jinfess/Turumba-Bikes 0t
- github new_repo kosli-dev/mcp-server 0t
- github new_repo ihint/merchant-context 0t
- github release DGouron/review-flow@reviewflow-v3.51.1
- github new_repo dev-manul/kartograf 0t
- npm publish samarth-gtm-mcp@1.473.3 99t
- code advisory bilkulsahi1235/agent-egress-bench
- github new_repo humuhumu33/pin-the-protocol 0t
- github new_repo manalejandro/mcp-ine 0t
- github new_repo noviqtechnologies/vexa-agentwall 0t
- npm publish gitnexus@1.6.10-rc.192 0t
- github release clay-run/agent-plugins@clay-cli-v0.2.0
- github release natejswenson/local-fitness@v0.60.2
- npm publish @bike4mind/cli@0.0.0-fix-purge-strips-orphaned-lake-prefix-tags-20260811135421 0t
- code advisory noviqtechnologies/vexa-agentwall
- github new_repo Chevron7Locked/lm-chat 0t
- github new_repo smeltworks-labs/peek-api
- github new_repo SANTIAGORF24/Analisisbtc
j down k up gg top G end
- 8 high
- 0 medium
- 0 low
recent
- code analysis flagged committed secret in bilkulsahi1235/agent-egress-bench
- code analysis flagged hidden prompt content in getmcpm/cli
- code analysis flagged committed secret in jrollin/cartog
- code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
- code analysis flagged committed secret ×2 in ek33450505/claude-agent-team
454 critical / high
- CRITICAL 124
- HIGH 330
- MEDIUM 297
- LOW 38
- NONE 8
recent
- A scanned file could suppress its own findings by forging the analysis prompt frame…
- MCP server reads any file and writes to any directory (unconfined filesystem access)
- Duplicate report: literal pipe characters in argv could be reinterpreted as pipelin…
- Literal pipe characters in argv could be reinterpreted as pipeline operators
- Dev-mode UDFs bypass server sandbox denylist enabling unauthenticated filesystem or…
- Incomplete fix of GHSA-j4wj-p47h-f9cc - a third file-URI shape (file::http://host/a…
- Remote query files executed through anyquery run can invoke local shell commands vi…
- Server-mode sandbox arbitrary file write via ATTACH / VACUUM INTO with `?mode=memor…
| Maintainer | 07-13 | 07-20 | 07-27 | 08-03 | 08-10 |
|---|---|---|---|---|---|
| camudo | 479 | 498 | 367 | 412 | 51 |
| aflordelis | 67 | 211 | 475 | 350 | 144 |
| brilliantdirectories-user | 552 | 507 | 2 | 0 | 2 |
| csreyes92 | 120 | 235 | 124 | 163 | 42 |
| objectstack-ai | 0 | 169 | 135 | 187 | 69 |
| nifrajs | 0 | 0 | 120 | 347 | 0 |
| griffinwork40 | 120 | 72 | 122 | 100 | 28 |
| isatimur | 0 | 0 | 394 | 49 | 6 |
| zhinjs | 0 | 0 | 187 | 230 | 0 |
| arnaudjnn | 0 | 3 | 187 | 186 | 40 |
tool safety 13364
View tool safety →naming 3
View naming →licenses 10212
View licenses →abandonment 271
View abandonment →243 elevated (D/E) 243
| mcp-agentgate-core | npm | ↑ | +9900% | 100 |
| Zn070515/offipy | github | ↑ | +2300% | 24 |
| matteo-sung/lockvet | github | ↑ | +2100% | 66 |
| ucsandman/DashClaw | github | ↑ | +1650% | 35 |
| hupe1980/agentplane | github | ↑ | +1200% | 13 |
| emrecdr/devt | github | ↑ | +1000% | 22 |
| davesheffer/hunch | npm | ↑ | +1000% | 11 |
| kouroshez/coding-os | github | ↑ | +1000% | 11 |
| JAIPilot/jaipilot | github | ↑ | +850% | 19 |
| misospace/dispatch | github | ↑ | +800% | 9 |
- 24h 339
- 7d 2,490
- 30d 10,186