latest servers
160Official registry entries marked latest in the fetched window.
public registry snapshot
A launch-readiness snapshot across current MCP Registry metadata and linked GitHub repos. This is aggregate analysis only: it shows where server launches tend to lose trust before a user ever connects a client.
topline
latest servers
160Official registry entries marked latest in the fetched window.
github repos
64 (40%)Listings with a GitHub repository URL attached.
website visible
144 (90%)Website URL visible in registry metadata, GitHub homepage, or README.
recent movement
79 (49%)Latest metadata updated within the last 45 days.
package path
30 (19%)Listings with package install metadata.
remote path
134 (84%)Listings with hosted remote server metadata.
current risk surface
stdio package path
30 (19%)Latest listings whose package metadata uses STDIO transport.
stdio docs visible
3 / 9Readable STDIO package READMEs that mention the command or local-process boundary.
package secrets
6 (4%)Listings whose package metadata declares secret environment variables.
remote secret headers
22 (14%)Listings whose remote metadata declares secret request headers.
why now
Recent MCP security research has put STDIO install configs, command review, and package pinning into the trust conversation. A clean launch page should make those boundaries obvious before a user connects a client.
read OX advisorysales angle
The fix is practical: align registry metadata, README install commands, STDIO warnings, secret handling, smoke tests, and directory proof. That maps directly to Shipcheck and the fixed MCP launch review.
paid MCP reviewsurface gaps
server samples
score 48/100 · remote
Remote MCP server for Tandem docs, install guides, SDKs, workflows, and agent setup help.
score 48/100 · package · stdio
Ephemeral data sandbox for AI workflows with guardrails and security
score 49/100 · remote
AI-native beauty ads, sponsored product discovery, and brand recommendations.
score 49/100 · remote
MCP-native AI SRE: ask what's broken in production, get a reviewed GitHub fix PR.
score 54/100 · remote
Check how to contact a business website, and whether that contact path actually works.
score 54/100 · remote
Did this contractor's licence change? Observed lapses and reinstatements, not a snapshot.
score 55/100 · package · stdio
Automated DOCX Redlining Engine
score 55/100 · remote
Actwise Ideation helps founders benchmark startup and product ideas before they build.
score 55/100 · remote
Google Ads MCP server — manage campaigns, keywords, and metrics.
score 55/100 · remote
AI agents that manage paid ads on Meta, LinkedIn, and Google Ads from any MCP client.
score 57/100 · remote
Measured agent costs, a one-page agent summary check, and an offline access map. No sign-in.
score 57/100 · remote
Dubai property prices, AED/sqft, sales, rents, yields and projects from DLD registered transactions.
score 57/100 · remote
AI-powered trading strategy development: backtesting, market data, and portfolio analysis
score 57/100 · package · stdio
AI-only ad scoring for Claude: score image, video or text ads on 13 dimensions before you spend.
score 59/100 · remote
Agent-to-agent trading intelligence exchange. Publish findings, vote on quality, earn reputation.
score 59/100 · remote
A free one-minute reset for people, delivered by AI, with no account or personal data.
score 61/100 · remote
Read-only Remote MCP for externally grounded AI agent trust receipts.
score 63/100 · remote
Answers on AEO, SEO, web and brand from GOJI's published material. Melbourne, Australia.
interpretation
01
When there is no local package path, the public docs need to make auth, transport, permissions, data access, and support boundaries easy to inspect.
02
A strong README still loses value if the registry title, website, package path, and description do not surface the same clarity.
03
The strongest submissions create a proof trail: package, registry metadata, smoke test, safety notes, score page, and curated PR context.
04
Clear install paths reduce support load, make buyers more comfortable, and give directory maintainers fewer reasons to skip a listing.
sources and method
registry
Fetched 300 registry entries from the public API and kept entries whose official metadata marked them latest.
registry endpointdocs
The public registry flow uses server metadata for discovery. This pulse treats metadata clarity as part of launch readiness.
registry quickstartsecurity
Recent public research called out STDIO-driven command execution paths across MCP-adjacent tooling. This pulse treats local command boundaries as public launch proof.
OX advisorygithub
When a listing exposed a GitHub repo, the script read public repo metadata and README text. Private code and private docs were not inspected.
aggregate JSONshipcheck
Shipcheck turns the same launch-readiness ideas into a local scanner, GitHub Action, MCP server, and paid review workflow.
open Shipcheckuse the pulse
Paste your metadata and public repo, then use the checklist or a fixed review to close the gaps.