Model Context Protocol Observatory

A live tracker of the MCP server ecosystem — discovered across npm, PyPI, GitHub and the official registry, with releases, dependencies, and security signals updated as they happen.

Every grade and permission flag here is an inferred review prompt, not a verdict — and each one is tagged by what backs it: attested, reported, or inferred.

Browse all servers →

tracked servers
39,038
github 37,495 · npm 905 · pypi 638
releases · 24h + 199
3,203
3,004 in the prior 24h
active maintainers · 24h
693
zhinjs leads (175)
this hour
57
3,203 in last 24h window
release timeline · 7d 20780 releases
08-07 10:00 08-10 22:00 now
npm pypi github peak 247 @ 14:00
source breakdown 39,038 servers · 27,602 maintainers
  • npm 905 2.3%
  • pypi 638 1.6%
  • github 34,995 89.6%
  • gitlab 17 0.0%
  • smithery 174 0.4%
  • mcp.so 2,294 5.9%
  • clients 15 0.0%

top maintainers

  1. 1 pipeworx-io 1322 servers
  2. 2 CSOAI-ORG 357 servers
  3. 3 cyanheads 132 servers
  4. 4 Br0ski777 101 servers
  5. 5 mcp-dir 97 servers
  6. 6 UdotCASH 96 servers
  7. 7 MukundaKatta 91 servers
  8. 8 sandraschi 76 servers
  9. 9 clauxel 72 servers
  10. 10 lazymac2x 51 servers
stream live · last 50 · times UTC
  1. github new_repo danielkliem/mcp-cookidoo 7t
  2. github new_repo kychee-com/run402-examples 0t
  3. github new_repo OtterMind/Chat2DB 0t
  4. github new_repo anunay999/relay 11t
  5. github new_repo narko4u/mcp-evidence-validator 0t
  6. github new_repo hootandy321/dsh-orchestrator 13t
  7. github new_repo Oizopower/ClaudeSwitch 0t
  8. github release Miraculix2050/LoxBerry-Plugin-MCP-Server@v0.4.0-alpha.11
  9. pypi publish poker-coach-engine@0.1.0 1t
  10. github release shrec/AIWorkHub@v0.9.56
  11. npm publish patchwork-os@1.2.0-beta.2.canary.608 0t
  12. code advisory SxLiuYu/charlie-voice-assistant
  13. github release verified Ecocitizenz/ecz-id-mcp-verifier@v0.8.3
  14. code advisory varun29ankuS/Roshera-CAD
  15. code advisory DemonDamon/AgenticX
  16. github new_repo Jinansh230705/ncert-mcp 13t
  17. github new_repo sammyghe/pangenome 0t
  18. github new_repo takara-ai/miru-code 5t
  19. github new_repo LOWSZEHAO/Uplink 0t
  20. github release Zn070515/offipy@v0.16.0
  21. pypi publish qiao-mcp@0.3.0 132t
  22. pypi publish ogm-mcp-skills@0.2.0 26t
  23. pypi publish mcp-facture-electronique-fr@0.8.2 34t
  24. npm publish @sellable/install@0.1.643 0t
  25. code advisory SxLiuYu/charlie-voice-assistant
  26. github new_repo dongsheng123132/dsh-surface-contract-proof 2t
  27. pypi publish dbx-tools-graphiti@0.6.124 0t
  28. github new_repo ly95/agentruntime 0t
  29. pypi publish ogm-mcp-skills@0.2.1 26t
  30. pypi publish verified devhelmhq/mcp-server@1.5.0 0t
  31. pypi publish mcp-worker-protocol@1.0.0 0t
  32. github release HenC49/dsh-mcp-manager@0.1.0
  33. code advisory bigduu/Lotus
  34. pypi publish tai42-skeleton@1.12.0 0t
  35. github new_repo HenC49/dsh-mcp-manager 0t
  36. github new_repo Netzhirsch/contao-mcp-bundle 0t
  37. github new_repo atpaawej/openboard 0t
  38. npm publish @sellable/mcp@0.1.880 0t
  39. pypi publish cai-mcp-server@0.2.8 28t
  40. npm publish verified comfyui-mcp@0.51.43 36t
  41. code advisory davekilleen/Dex
  42. pypi publish milu@0.5.2 0t
  43. github release adsagents/adsagent-ai-skills@v0.7.59
  44. code advisory pai-list/AxiomID
  45. github new_repo kindrat86/vc-deal-flow-signal 0t
  46. github new_repo byte-ish/mocking-agents-mcp-a2a 0t
  47. github new_repo rShetty/relay 0t
  48. github new_repo Cambrionic/winnow 0t
  49. pypi publish ogm-mcp-skills@0.2.2 26t
  50. pypi publish claude-code-kit@0.80.0 0t
j down k up gg top G end
cve overview 821 advisories · 156 in 30d · as of 3h ago · next check in 13m
HIGH: 347 (42.3%)MEDIUM: 301 (36.7%)CRITICAL: 127 (15.5%)LOW: 38 (4.6%)NONE: 8 (1.0%)821CVEs

474 critical / high

  • CRITICAL 127
  • HIGH 347
  • MEDIUM 301
  • LOW 38
  • NONE 8

recent

  • SSH config poisoning via downloadFile turns remote command execution into local RCE
  • SCP Remote-Spec Host Allowlist Bypass via `localPath` in `downloadFile`
  • A scanned file could suppress its own findings by forging the analysis prompt frame…
  • MCP server reads any file and writes to any directory (unconfined filesystem access)
  • Duplicate report: literal pipe characters in argv could be reinterpreted as pipelin…
  • Literal pipe characters in argv could be reinterpreted as pipeline operators
  • Dev-mode UDFs bypass server sandbox denylist enabling unauthenticated filesystem or…
  • Incomplete fix of GHSA-j4wj-p47h-f9cc - a third file-URI shape (file::http://host/a…
    MEDIUM julien040/anyquery
maintainer activity · 30d 10 maintainers
Release counts per maintainer over the last 30 days, grouped into 7-day buckets. Rows are maintainers; columns are date ranges within the window (oldest on the left, most recent on the right).
Maintainer 07-16 07-23 07-30 08-06 08-13
camudo 560 358 490 382 103
storm-software 47 639 425 393 0
Bike4Mind 143 322 454 399 37
aflordelis 130 317 442 347 0
brilliantdirectories-user 831 74 2 2 3
csreyes92 194 150 111 217 33
objectstack-ai 169 68 135 188 69
zhinjs 0 34 383 0 175
nifrajs 0 0 307 160 116
arnaudjnn 0 7 311 147 5
security signals 36,992 open

tool safety 21311

View tool safety →

naming 7

View naming →

licenses 15383

View licenses →

abandonment 291

View abandonment →
risk pulse 39,024 scored

217 elevated (D/E) 217

  • E · critical 16
  • D · high 201
  • C · elevated 3426
  • B · low 10819
  • A · minimal 24562
top movers · 7d 10 servers
discovery funnel new servers by first-seen
daily · 30d peak 2,696 @ Aug 13
  • 24h
    2,178
  • 7d
    7,553
  • 30d
    16,339