39,038
Model Context Protocol Observatory
A live tracker of the MCP server ecosystem — discovered across npm, PyPI, GitHub and the official registry, with releases, dependencies, and security signals updated as they happen.
Every grade and permission flag here is an inferred review prompt, not a verdict — and each one is tagged by what backs it: attested, reported, or inferred.
3,203
693
57
08-07 10:00 08-10 22:00 now
npm pypi github
peak 247 @ 14:00
- npm 905 2.3%
- pypi 638 1.6%
- github 34,995 89.6%
- gitlab 17 0.0%
- smithery 174 0.4%
- mcp.so 2,294 5.9%
- clients 15 0.0%
top maintainers
- 1 pipeworx-io 1322 servers
- 2 CSOAI-ORG 357 servers
- 3 cyanheads 132 servers
- 4 Br0ski777 101 servers
- 5 mcp-dir 97 servers
- 6 UdotCASH 96 servers
- 7 MukundaKatta 91 servers
- 8 sandraschi 76 servers
- 9 clauxel 72 servers
- 10 lazymac2x 51 servers
- github new_repo danielkliem/mcp-cookidoo 7t
- github new_repo kychee-com/run402-examples 0t
- github new_repo OtterMind/Chat2DB 0t
- github new_repo anunay999/relay 11t
- github new_repo narko4u/mcp-evidence-validator 0t
- github new_repo hootandy321/dsh-orchestrator 13t
- github new_repo Oizopower/ClaudeSwitch 0t
- github release Miraculix2050/LoxBerry-Plugin-MCP-Server@v0.4.0-alpha.11
- pypi publish poker-coach-engine@0.1.0 1t
- github release shrec/AIWorkHub@v0.9.56
- npm publish patchwork-os@1.2.0-beta.2.canary.608 0t
- code advisory SxLiuYu/charlie-voice-assistant
- github release Ecocitizenz/ecz-id-mcp-verifier@v0.8.3
- code advisory varun29ankuS/Roshera-CAD
- code advisory DemonDamon/AgenticX
- github new_repo Jinansh230705/ncert-mcp 13t
- github new_repo sammyghe/pangenome 0t
- github new_repo takara-ai/miru-code 5t
- github new_repo LOWSZEHAO/Uplink 0t
- github release Zn070515/offipy@v0.16.0
- pypi publish qiao-mcp@0.3.0 132t
- pypi publish ogm-mcp-skills@0.2.0 26t
- pypi publish mcp-facture-electronique-fr@0.8.2 34t
- npm publish @sellable/install@0.1.643 0t
- code advisory SxLiuYu/charlie-voice-assistant
- github new_repo dongsheng123132/dsh-surface-contract-proof 2t
- pypi publish dbx-tools-graphiti@0.6.124 0t
- github new_repo ly95/agentruntime 0t
- pypi publish ogm-mcp-skills@0.2.1 26t
- pypi publish devhelmhq/mcp-server@1.5.0 0t
- pypi publish mcp-worker-protocol@1.0.0 0t
- github release HenC49/dsh-mcp-manager@0.1.0
- code advisory bigduu/Lotus
- pypi publish tai42-skeleton@1.12.0 0t
- github new_repo HenC49/dsh-mcp-manager 0t
- github new_repo Netzhirsch/contao-mcp-bundle 0t
- github new_repo atpaawej/openboard 0t
- npm publish @sellable/mcp@0.1.880 0t
- pypi publish cai-mcp-server@0.2.8 28t
- npm publish comfyui-mcp@0.51.43 36t
- code advisory davekilleen/Dex
- pypi publish milu@0.5.2 0t
- github release adsagents/adsagent-ai-skills@v0.7.59
- code advisory pai-list/AxiomID
- github new_repo kindrat86/vc-deal-flow-signal 0t
- github new_repo byte-ish/mocking-agents-mcp-a2a 0t
- github new_repo rShetty/relay 0t
- github new_repo Cambrionic/winnow 0t
- pypi publish ogm-mcp-skills@0.2.2 26t
- pypi publish claude-code-kit@0.80.0 0t
j down k up gg top G end
- 8 high
- 0 medium
- 0 low
recent
- code analysis flagged dynamic code execution ×2 in davekilleen/Dex
- code analysis flagged committed secret, dynamic code execution in SxLiuYu/charlie-v…
- code analysis flagged committed secret, dynamic code execution ×2 in DemonDamon/Age…
- code analysis flagged committed secret, dynamic code execution in SxLiuYu/charlie-v…
- code analysis flagged dynamic code execution in amos-labs/amos-agent
474 critical / high
- CRITICAL 127
- HIGH 347
- MEDIUM 301
- LOW 38
- NONE 8
recent
- SSH config poisoning via downloadFile turns remote command execution into local RCE
- SCP Remote-Spec Host Allowlist Bypass via `localPath` in `downloadFile`
- A scanned file could suppress its own findings by forging the analysis prompt frame…
- MCP server reads any file and writes to any directory (unconfined filesystem access)
- Duplicate report: literal pipe characters in argv could be reinterpreted as pipelin…
- Literal pipe characters in argv could be reinterpreted as pipeline operators
- Dev-mode UDFs bypass server sandbox denylist enabling unauthenticated filesystem or…
- Incomplete fix of GHSA-j4wj-p47h-f9cc - a third file-URI shape (file::http://host/a…
| Maintainer | 07-16 | 07-23 | 07-30 | 08-06 | 08-13 |
|---|---|---|---|---|---|
| camudo | 560 | 358 | 490 | 382 | 103 |
| storm-software | 47 | 639 | 425 | 393 | 0 |
| Bike4Mind | 143 | 322 | 454 | 399 | 37 |
| aflordelis | 130 | 317 | 442 | 347 | 0 |
| brilliantdirectories-user | 831 | 74 | 2 | 2 | 3 |
| csreyes92 | 194 | 150 | 111 | 217 | 33 |
| objectstack-ai | 169 | 68 | 135 | 188 | 69 |
| zhinjs | 0 | 34 | 383 | 0 | 175 |
| nifrajs | 0 | 0 | 307 | 160 | 116 |
| arnaudjnn | 0 | 7 | 311 | 147 | 5 |
tool safety 21311
View tool safety →naming 7
View naming →licenses 15383
View licenses →abandonment 291
View abandonment →217 elevated (D/E) 217
| skynetcmd/m3-memory | github | ↑ | +2800% | 58 |
| emrecdr/devt | github | ↑ | +2300% | 24 |
| 3aKHP/prts-mcp | github | ↑ | +2000% | 21 |
| Coddyum/flowlio-agents | github | ↑ | +1700% | 18 |
| MeMikko/hoodgrow-mcp | github | ↑ | +1400% | 15 |
| @claude-flow/cli | npm | ↑ | +1300% | 14 |
| Mandark-droid/genai_otel_instrument | github | ↑ | +1300% | 14 |
| atharvpatil2748/Mnemo | github | ↑ | +1300% | 14 |
| SeloraHomes/ha-selora-ai | github | ↑ | +1100% | 12 |
| macitkaraca/brampp | github | ↑ | +1000% | 11 |
- 24h 2,178
- 7d 7,553
- 30d 16,339