58,240
Model Context Protocol Observatory
A live tracker of the MCP server ecosystem — discovered across npm, PyPI, GitHub and the official registry, with releases, dependencies, and security signals updated as they happen.
Every grade and permission flag here is an inferred review prompt, not a verdict — and each one is tagged by what backs it: attested, reported, or inferred.
2,694
778
58
09-08 13:00 09-12 01:00 now
npm pypi github
peak 322 @ 13:00
- npm 1,132 1.9%
- pypi 3,065 5.3%
- github 51,385 88.2%
- gitlab 17 0.0%
- smithery 179 0.3%
- mcp.so 2,445 4.2%
- clients 17 0.0%
top maintainers
- 1 pipeworx-io 1505 servers
- 2 mcp-dir 1111 servers
- 3 CSOAI-ORG 416 servers
- 4 alphaparkinc 394 servers
- 5 Alpha-Park 254 servers
- 6 cyanheads 133 servers
- 7 UdotCASH 105 servers
- 8 Br0ski777 101 servers
- 9 sandraschi 101 servers
- 10 MukundaKatta 95 servers
- github release xuzhougeng/ScientificFigureLibrary@v0.8.0-preview.4
- pypi publish arkforge-mcp@1.2.21 7t
- github release IdeaSpaces-xyz/claude-code-plugin@v0.3.43
- code advisory Sertelegger/holdfast
- code advisory jeikl/jeikcode
- npm publish mcp-searxng@2.3.0 4t
- github new_repo Pinnwire-Pinnacle-Odds-API/.github 0t
- github new_repo eminboydak/embedded-agent-skills 0t
- npm publish huaweicloud/huaweicloud-devkit@1.1.5 0t
- pypi publish agent-inbox@1.4.2 16t
- pypi publish nautobot-mcp@0.2.2 97t
- code advisory talos-kernel/Talos
- code advisory UnknownAlienHuman/eliot-memory-os
- pypi publish uipath-mcp@0.3.1 50t
- code advisory evoila/meho
- github release Churma16/wallet-mcp-budgetbakers-bot@v0.1.6-snapshot.4dd5f54
- pypi publish mrtineu/edupage-mcp@0.1.3 13t
- pypi publish session-buddy@0.26.3 160t
- code advisory inso1337/revl
- github release alisaitteke/photoshop-mcp@v1.7.11
- github new_repo Ahmetshbzz/web-search-mcp 0t
- github new_repo anon5376/codex-agent-plugins 0t
- github new_repo CRM-Solid/google-ads-mcp 11t
- pypi publish retrieval-mcp@0.4.11 33t
- github new_repo gyuco/mcp-http-client 7t
- pypi publish homeassistant-ai/ha-mcp@8.4.3.dev2659 5t
- code advisory MoltyCel/moltrust-api
- code advisory PrismorSec/prismor
- code advisory UnknownAlienHuman/eliot-memory-os
- pypi publish dryhack-mcp@2.1.0 4t
- github release alisaitteke/photoshop-mcp@v1.7.12
- pypi publish dryhack-mcp@2.1.1 4t
- code advisory shleder/vetto
- github release nMaroulis/protoagent@v0.2.3
- github release homeassistant-ai/ha-mcp@v8.4.3.dev2659
- github new_repo ethanl05/gatehouse 0t
- pypi publish ida-mcp@2026.915.2 0t
- code advisory evoila/meho
- pypi publish purview-mcp-server@1.15.10 88t
- pypi publish ndi-mcp@0.8.0 26t
- code advisory Gadsotek/artifactflow
- github release kopachlager/prerenderbuddy-mcp@v0.2.5
- pypi publish fd-open-data-protocol@0.3.0 0t
- npm publish clawdi@0.14.86 0t
- github new_repo JungHoonGhae/odeduck
- github new_repo Jesrey0/codex-connect
- github new_repo GabrielKqw/weave
- pypi publish mrexodia/zeromcp@1.10.1 1t
- code advisory githits-com/githits-cli
- pypi publish ida-mcp@2026.915.3 0t
j down k up gg top G end
all tracked drift 20695
- 20,614 high
- 60 medium
- 21 low
recent 5
- code analysis flagged committed secret in githits-com/githits-cli
- code analysis flagged committed secret in Gadsotek/artifactflow
- code analysis flagged committed secret in MoltyCel/moltrust-api
- code analysis flagged committed secret in talos-kernel/Talos
- code analysis flagged committed secret ×27 in Sertelegger/holdfast
535 critical / high
- CRITICAL 145
- HIGH 390
- MEDIUM 313
- LOW 36
- NONE 8
recent
- op_run tool leaks OP_SERVICE_ACCOUNT_TOKEN master credential to subprocesses and mo…
- Unauthenticated Path Traversal in ServeMode File APIs via SafeJoin() Boundary Bypass
- Remote code execution (RCE) via command injection in the backup subsystem (`ssh_bac…
- Remote Command Injection via ssh_db_dump outputFile (and ssh_backup_create MongoDB …
- Command injection in read-only monitoring tools (ssh_service_status, ssh_tail) bypa…
- Unauthenticated pre-auth integer-overflow denial of service via Content-Length in t…
- Missing Host/Origin validation on Prism's local dashboard allows DNS rebinding to r…
- Unauthenticated MCP transport gives any network client remote control of x64dbg, in…
| Maintainer | 08-17 | 08-24 | 08-31 | 09-07 | 09-14 |
|---|---|---|---|---|---|
| camudo | 474 | 498 | 371 | 205 | 73 |
| sandbaseai | 129 | 342 | 290 | 0 | 0 |
| zhinjs | 354 | 302 | 0 | 100 | 0 |
| Bike4Mind | 266 | 238 | 98 | 37 | 52 |
| hashgraph-online | 125 | 164 | 170 | 130 | 12 |
| mondaycom | 127 | 190 | 115 | 0 | 0 |
| griffinwork40 | 142 | 108 | 88 | 86 | 4 |
| kojiwakayama | 82 | 246 | 54 | 43 | 7 |
| samuelgursky | 54 | 39 | 230 | 98 | 11 |
| stone-foundation | 269 | 160 | 0 | 0 | 0 |
tool safety 40580
View tool safety →naming 4
View naming →licences 22767
View licences →abandonment 477
View abandonment →375 elevated (D/E) 375
| IHUI-INF-AI/IHUI-AI | github | ↑ | +2400% | 50 |
| kinti/a11y-toolkit | github | ↑ | +1900% | 20 |
| punkpeye/mcp-remote | github | ↑ | +1550% | 33 |
| ashishsinha1602/schemagate | github | ↑ | +1367% | 44 |
| mcp-gway | pypi | ↑ | +1100% | 12 |
| mechbench | pypi | ↑ | +1100% | 12 |
| n24q02m/crg | github | ↑ | +1000% | 22 |
| dfrancislyondflabc-tech/agentic-recall | github | ↑ | +1000% | 11 |
| lucaswilliameufrasio/jira-mcp | github | ↑ | +1000% | 11 |
| nuroctane/nur-cli | github | ↑ | +1000% | 11 |
- 24h 669
- 7d 3,554
- 30d 16,354