{"kind":"crawlcheck-mcp-index","v":1,"source":"https://registry.modelcontextprotocol.io/v0/servers","generated_at":"2026-10-07T18:54:10.907Z","import":{"run":1,"active":true,"started_at":"2026-10-06T19:18:01.109Z","finished_at":null,"servers":6400,"with_remote_endpoint":5858,"pages":64,"refresh_days":7},"observation":{"cycle_started_at":"2026-10-06T19:18:28.800Z","this_cycle":{"auth_required":234,"probed":550,"initialized":265,"http_error":35,"initialized_no_tools":5,"templated_url":4,"redirected":3,"invalid_url":1,"not_mcp":2,"unreachable":1,"tools_scanned_servers":20},"last_full_cycle":null,"per_tick":25,"method":"initialize, notifications/initialized, tools/list, DELETE session - no tools/call"},"tool_poisoning":{"servers_with_tool_lists_scanned":20,"servers_flagged":0,"by_severity":{},"by_kind":{},"basis":"this observation cycle so far","rule":"https://crawlcheck.io/rules#MCP_TOOL_POISONING","scan_any_server":"https://crawlcheck.io/api/v1/mcp/scan"},"tool_shadowing":{"state":"measured","at":"2026-10-07T16:19:46.425Z","servers_with_tool_lists":265,"reference_servers":253,"shadowing_servers":0,"by_kind":{},"most_shadowed":[],"backfill":"complete","reading":"reference = a server whose registry namespace is its endpoint's own domain; copies = another publisher on another domain exposes the reference's distinctive tool names with at least one identical description; collides = it shares three or more distinctive names and half of the smaller list. Evidence, not intent.","check_any_server":"https://crawlcheck.io/api/v1/mcp/shadow"},"auth_audit":{"state":"measured","at":"2026-10-07T16:20:12.867Z","queued":234,"audited":234,"auth_required":232,"with_findings":98,"by_severity":{"none":134,"high":13,"low":24,"medium":61},"by_finding":{"scope_privileged":12,"scope_excess_default":36,"audience_path_mismatch":2,"refresh_by_default":15,"audience_broad":22,"audience_other_host":1,"no_protected_resource_metadata":24,"authorization_server_metadata_missing":5},"default_scope_source":{"challenge":57,"scopes_supported":99,"none":76},"reading":"auth_required servers from the registry, read without signing in: the default scope request (the challenge's scope, else every listed scope), token audience against the endpoint, PKCE S256. Token lifetime is not observable without a token.","audit_any_server":"https://crawlcheck.io/api/v1/mcp/auth"},"recent":[{"name":"ai.getvda/rabbitmq-postgres-mongodb-stack-generator","url":"https://rabbitmq-postgres-mongodb-stack-generator.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:31.925Z","ms":1048},{"name":"ai.getvda/rabbitmq-redis-stack-generator","url":"https://rabbitmq-redis-stack-generator.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:31.925Z","ms":1547},{"name":"ai.getvda/structured-output-agent","url":"https://structured-output-agent.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:31.925Z","ms":1684},{"name":"ai.getvda/redis-minio-stack-generator","url":"https://redis-minio-stack-generator.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:31.925Z","ms":1772},{"name":"ai.getvda/redis-minio-postgres-stack-generator","url":"https://redis-minio-postgres-stack-generator.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:31.925Z","ms":1949},{"name":"ai.getvda/structured-output-agent-c2ddcc","url":"https://structured-output-agent-c2ddcc.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:33.874Z","ms":912},{"name":"ai.getvda/structured-output-mcp-agent-instructor","url":"https://structured-output-mcp-agent-instructor.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:33.874Z","ms":1527},{"name":"ai.getvda/structured-output-agent-openai","url":"https://structured-output-agent-openai.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:33.874Z","ms":1578},{"name":"ai.getvda/structured-output-mcp-agent-cryptography","url":"https://structured-output-mcp-agent-cryptography.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:33.874Z","ms":1704},{"name":"ai.getvda/structured-output-mcp-agent-authlib","url":"https://structured-output-mcp-agent-authlib.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:33.874Z","ms":1751},{"name":"ai.getvda/structured-output-mcp-agent-langchain-core","url":"https://structured-output-mcp-agent-langchain-core.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:35.625Z","ms":1245},{"name":"ai.getvda/traced-claude-format-guard","url":"https://traced-llm-proxy-anthropic.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:35.625Z","ms":1306},{"name":"ai.getvda/structured-output-mcp-traced-agent","url":"https://structured-output-mcp-traced-agent.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:35.625Z","ms":1322},{"name":"ai.getvda/traced-llm-proxy","url":"https://traced-llm-proxy.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:35.625Z","ms":1524},{"name":"ai.getvda/traced-llm-mcp-proxy","url":"https://traced-llm-mcp-proxy.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:35.625Z","ms":1559},{"name":"ai.giljo/hq","url":"https://app.giljo.ai/mcp","outcome":"auth_required","tools":null,"at":"2026-10-07T16:19:37.184Z","ms":1021},{"name":"ai.glasser/glasser","url":"https://api.glasser.ai/mcp","outcome":"auth_required","tools":null,"at":"2026-10-07T16:19:37.184Z","ms":1063},{"name":"ai.gigaverse/gigaverse","url":"https://gigaverse.ai/api/mcp","outcome":"initialized","tools":7,"at":"2026-10-07T16:19:37.184Z","ms":2319},{"name":"ai.getvda/traced-multi-llm-proxy","url":"https://traced-multi-llm-proxy.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:37.184Z","ms":2320},{"name":"ai.getvda/traced-openai-langchain-agent","url":"https://authenticated-mcp-agent-opentelemetry-api.getvda.ai/mcp","outcome":"initialized","tools":2,"at":"2026-10-07T16:19:37.184Z","ms":2811},{"name":"ai.good-sport/good-sport","url":"https://mcp.good-sport.ai/mcp","outcome":"auth_required","tools":null,"at":"2026-10-07T16:19:39.995Z","ms":528},{"name":"ai.goosybear/goosy","url":"https://app.goosybear.ai/api/mcp/mcp","outcome":"auth_required","tools":null,"at":"2026-10-07T16:19:39.995Z","ms":807},{"name":"ai.gomarble/mcp-api","url":"https://apps.gomarble.ai/mcp-api/sse","outcome":"auth_required","tools":null,"at":"2026-10-07T16:19:39.995Z","ms":1096},{"name":"ai.gondola/gondola","url":"https://mcp.gondola.ai/mcp","outcome":"initialized","tools":46,"at":"2026-10-07T16:19:39.995Z","ms":1434},{"name":"ai.go-rocket/go-rocket","url":"https://www.go-rocket.ai/mcp/","outcome":"initialized","tools":5,"at":"2026-10-07T16:19:39.995Z","ms":2356}],"reading":"Listed = the official MCP Registry names a remote endpoint. Observed = CrawlCheck sent the MCP handshake (initialize, then tools/list; no tool is ever called) and recorded the answer. initialized means the server completed the handshake; auth_required means it asked for credentials; drift means the tool list changed between two observations. A registry listing is the publisher's claim; the observation is what the endpoint did.","lookup":"https://crawlcheck.io/api/mcp/servers?host=<domain>"}