What’s in the MCP registry

What is the server mainly for?

AI-classified. Produced by AI models with independent checks (a label is kept only when the checks agree); not hand-checked by a person. Read these figures as estimates. Measured against a blind AI reference (Claude Opus 5.5) on a seeded sample of 150: 82.5% agreement (113 of 137 labelled items; 95% range 75–88%), checked 2026-10-09. The 1,695 labels added afterwards by the Gemini + Claude consensus were not part of that measurement.

known

37,182 · 95.4% of applicable

not determined

1,795

does not apply

0

not in scope

0

all 38,977 entries · known for 95.4% of them

• method: An LLM (gemini-2.5-flash) labels the registry name, title and description twice with differently worded prompts; a label is kept only when both runs agree. Where the two runs disagreed, Gemini and Claude each labelled the entry once more, and a label is kept only when those two agree (1,695 labels). Label list is provisional (provisional-1: 31,019, provisional-2: 6,163).
• source registry.modelcontextprotocol.io — name, title, description
• checked 2026-10-08 to 2026-10-09

How is the product on the server’s website priced?

AI-classified. Produced by AI models with independent checks (a label is kept only when the checks agree); not hand-checked by a person. Read these figures as estimates. Measured against a blind AI reference (Claude Opus 5.5) on a seeded sample of 150: 84.1% agreement (90 of 107 labelled items; 95% range 76–90%), checked 2026-10-09. The 22 labels added afterwards by the Gemini + Claude consensus were not part of that measurement.

known

8,064 · 39.7% of applicable

not determined

12,257 (1,719 our limit)

does not apply

0

not in scope

18,656

all 38,977 entries · known for 20.7% of them · not in scope: registry entry has no websiteUrl

• method: The website named in the registry entry (and its pricing page when linked) is read with a plain request; robots.txt is honoured. An LLM (gemini-2.5-flash-lite: 7,671, gemini-2.5-flash: 337, gemini-3.5-flash-lite: 34) names the pricing model and quotes the page. An answer is kept only if the quote is found on the page, passes a rule check that those words can carry the value, and a second, independent call that sees only the quote reaches the same value; 531 answers from the first batches also needed two differently worded runs to agree (7,511 used one run plus these checks). 1,658 answers where the model said “freemium” but the quote shows only a free allowance plus metered credits are counted as usage-based, as the definition states. Every “contact sales” answer was judged again by Gemini and Claude; 22 answers kept from that pass are those where both agreed and the quote check passed.
• source registry.modelcontextprotocol.io — websiteUrl
• source the server’s own website — homepage and pricing page text
• checked 2026-10-08 to 2026-10-09

Which language is most of the linked GitHub repository written in?

known

18,804 · 77.6% of applicable

not determined

5,421

does not apply

14,752

not in scope

0

all 38,977 entries · known for 48.2% of them

• method: GitHub’s /languages byte counts for the linked repository; the language with the most bytes. A repository can be a monorepo, so this describes the repository, not necessarily the server alone.
• source api.github.com — GET /repos/{owner}/{repo}/languages
• checked 2026-10-08

Which MCP features does the server advertise when we connect?

known

18,889 · 60.3% of applicable

not determined

12,423 (23 our limit)

does not apply

0

not in scope

7,665

all 38,977 entries · known for 48.5% of them · not in scope: no HTTP remote and no npm/PyPI package we can start

A server can advertise several features, so the rows add up to more than 100%.

known via the remote endpoint 14,123 · via the package 4,766 · servers whose remote and package advertise different features: 69 (the remote’s answer is shown)

• method: Read-only connection: initialize plus tools/list, resources/list and prompts/list — no tool is ever called. Remote servers over HTTP; npm/PyPI packages launched inside an E2B sandbox. A server can advertise several features, so rows add up to more than 100%.
• source the server itself — MCP initialize result and list responses
• checked 2026-10-08 to 2026-10-09

What is the most severe published advisory anywhere in the resolved dependency tree of the listed version?

known

13,923 · 96.5% of applicable

not determined

508 (324 our limit)

does not apply

0

not in scope

24,546

all 38,977 entries · known for 35.7% of them · not in scope: not an npm or PyPI package

npm · 10,174 of 10,401 known

Critical 1.1% · High 9.3% · Moderate 2.1% · Low 0.3% · No known advisory 87.2%

PyPI · 3,749 of 4,030 known

Critical 2.5% · High 1.8% · Moderate 1.3% · Low 0.1% · No known advisory 94.2%

• method: npm: the listed version’s tree resolved with npm install --package-lock-only --ignore-scripts, then npm audit. PyPI: tree resolved with uv pip compile --no-build (Python 3.12, Linux x86_64), then OSV.dev. Nothing from the package is executed.
• source registry.npmjs.org — npm audit advisory database
• source api.osv.dev — PyPI advisories (querybatch)
• checked 2026-10-08 to 2026-10-09

Is the package’s declared license permissive, copyleft or something else?

known

13,419 · 90.0% of applicable

not determined

1,483 (2 our limit)

does not apply

24,075

not in scope

0

all 38,977 entries · known for 34.4% of them

• method: The SPDX identifier declared on npm/PyPI, sorted into permissive (MIT, Apache-2.0, BSD, ISC, …) or copyleft (GPL family, MPL, EPL, EUPL, CDDL); “other” is a real identifier we don’t sort, not a claim about OSI status.
• source registry.npmjs.org — license
• source pypi.org — license, license_expression, classifiers
• checked 2026-10-06

How recently was the linked GitHub repository pushed to?

known

24,256 · 84.4% of applicable

not determined

4,487

does not apply

10,234

not in scope

0

all 38,977 entries · known for 62.2% of them

• method: archived if GitHub marks it archived; otherwise active = a push within 90 days, slowing = 91–365 days, stale = over 365 days.
• source api.github.com — GET /repos/{owner}/{repo} → archived, pushed_at
• checked 2026-10-06

Does the server run on the vendor’s infrastructure, on your machine, or either?

known

38,506 · 98.8% of applicable

not determined

471

does not apply

0

not in scope

0

all 38,977 entries · known for 98.8% of them

• method: From the registry entry: a remote endpoint means it runs on the vendor’s infrastructure; a package means it runs on your machine; both means either. This says where it runs, not what it can reach or control.
• source registry.modelcontextprotocol.io — remotes[], packages[]
• checked 2026-10-06