Unfragile Research · living census · updated 2026-08-08
The MCP Census
79,858 MCP servers are listed across the four major registries. The registries listing them cannot tell you which ones actually work. So we knocked on every door — automatically, repeatedly, and with a cryptographic receipt for every answer.
The finding
The Model Context Protocol turned every piece of software into a potential tool for AI agents — and cheap intelligence flooded the registries with listings. What nobody built was the checking. A listing is a claim; an agent about to hand a tool its data needs more than a claim.
Our verifier confirmed 12,014 servers alive — a resolvable package on npm or PyPI, or a remote endpoint that answers. It confirmed 46 dead. The remaining 67,798 are repository-only listings that no automated check can currently vouch for — not broken, but unvouched: you would be running them on faith. Only 33 servers in the entire ecosystem clear our highest bar of alive + fresh + adopted + machine-readable contract.
Every confirmed record carries an Ed25519-signed passport — an offline-verifiable receipt of what was checked and when. A chatbot remembers the MCP world as of its training data. This census checked, and it re-checks continuously.
The highest-verified servers
Ranked by verification score: adoption, freshness, liveness, declared contracts, hygiene. Not sponsored; not sponsorable.
| # | Server | Score | Declared tools | Last published | Signed |
|---|---|---|---|---|---|
| 1 | NPM Sentinel MCP | 90 | 19 | 2026-08-07 | ✓ |
| 2 | Azure DevOps (ADO) | 87 | — | 2026-08-07 | ✓ |
| 3 | @sentry/mcp-server | 87 | — | 2026-08-07 | ✓ |
| 4 | Context7 | 87 | — | 2026-08-07 | ✓ |
| 5 | xcodebuildmcp | 87 | — | 2026-08-07 | ✓ |
| 6 | @modelcontextprotocol/server-filesystem | 86 | — | 2026-08-07 | ✓ |
| 7 | Firecrawl MCP Server | 86 | — | 2026-08-07 | ✓ |
| 8 | next-devtools-mcp | 86 | — | 2026-08-07 | ✓ |
| 9 | NPM Sentinel MCP | 86 | 19 | 2026-07-13 | ✓ |
| 10 | @salesforce/mcp | 85 | — | 2026-08-07 | ✓ |
| 11 | Event Resolver API | 84 | 3 | 2026-05-16 | ✓ |
| 12 | Hyperliquid Perp Market Data API | 84 | 3 | 2026-05-16 | ✓ |
| 13 | Social Profile Enrichment API | 84 | 1 | 2026-05-16 | ✓ |
| 14 | nws-weather-mcp-server | 83 | 5 | 2026-07-02 | ✓ |
| 15 | Currency Converter API | 83 | 1 | 2026-05-16 | ✓ |
Methodology — and its limits
Sources: the official MCP registry, Smithery, npm, and Glama, crawled in full and merged by package and repository identity (6,354 servers corroborated by two or more registries). Checks per server: package resolution (npm and PyPI), remote endpoint reachability, repository liveness, declared tool-schema extraction, license presence, and publish freshness. Capabilities are read from declared contracts — actual tool schemas — never inferred by an LLM from marketing copy. Verified records are signed with Ed25519; the public key and verification procedure are published at /trust.
What this census does not yet claim: we do not execute third-party code, so a working clone-and-run server can sit in the unmeasured tier — sandboxed execution testing is the next instrument. Repository-liveness checking is rate-budgeted and proceeds in passes, moving servers out of the unmeasured tier continuously. “Not yet measured” means exactly that — it is not a verdict. When our measurement was wrong, we say so: an earlier internal draft of this census over-claimed, was caught in review, and was corrected before publication.
Use the census
Ask the answer engine — one verified pick, with evidence: GET unfragile.ai/api/answer?q=postgres
Built an MCP server? Claim your record and its signed passport — verify ownership. It’s free.