MCP Scorecard

The MCP registry explodes from 3,121 to 4,484 servers in a single collection cycle. Average trust score drops from 48.4 to 45.9 as low-quality suite publishers flood the registry. Microsoft ships nine WorkIQ servers (all score 32), Auth0 and Mastercard enter, and one developer registers 33 utility servers in a single namespace.

Microsoft registers nine new MCP servers under the WorkIQ brand covering Outlook, Teams, SharePoint, Word, Calendar, and M365 Copilot. All score 32. No license, no packages, a personal GitHub repo. This is Microsoft's second low-scoring batch after Agent365.

Auth0 (Okta) registers an identity management MCP server at score 74. Mastercard registers a developer toolkit at 68. AWS Labs adds OSCAL compliance. Enterprise vendors are no longer watching — they are registering.

A single developer registers twelve servers covering every public API of the UK Parliament — bills, committees, Commons votes, Lords votes, members, treaties, Erskine May, and more. The most complete legislative data suite in the registry.

Seven publishers in this batch registered five or more servers each, collectively accounting for 118 entries. rog0x brought 33 utility servers, junct-bot brought 24 DeFi protocols, and ansvar added 21 more countries. The registry is becoming a place where a single namespace can dominate by volume.

Four MCP servers now target the Godot game engine — three new this batch. The open-source engine joins Unity and Unreal in having dedicated AI tooling bridges, though scores remain low.

A browser automation platform that uses computer vision instead of DOM selectors enters the registry with 20,800 stars and a trust score of 79. It is the most-starred project to register an MCP server since Scrapling, and the fourth established project in the high-trust neighborhood in three weeks.

A Python dead code detector with 332 stars becomes an MCP tool — letting AI agents identify unused functions, classes, and imports via static analysis before refactoring. Score 73. The kind of practical developer workflow integration that justifies the protocol.

SAP's Cloud Application Programming model — the framework that Fortune 500 companies use to build custom applications on SAP's business platform — registers an official MCP server. Score 73. No flags. The enterprise wave is no longer theoretical.

IBM's open-source quantum computing SDK registers an MCP server for its documentation library. Score 74. Twenty-one stars undersell the institutional weight — Qiskit is the most widely used quantum computing framework in the world, and this is the registry's first quantum entry.

Microsoft registered eight agent365 MCP servers in a single batch — covering Word, Teams, SharePoint, Calendar, Admin, Copilot, OneDrive, and personal profile. Together they form the most comprehensive enterprise suite ever registered by one vendor. Every one of them scores 32. The repo appears empty. There is no license, no source code, no package, and no visible development activity. This is the biggest name in the registry doing the opposite of what high-trust servers do.

A mature, 331-star Sega Master System and Game Gear emulator written in C++ registers as an MCP server. Score 72. The intersection of retro gaming emulation and AI agents is genuinely novel — and the MCP ecosystem keeps getting weirder.

A Python library for SEC EDGAR data with 1,834 stars and perfect maintenance signals registers its own MCP server and scores 84 — the highest new entry this batch. Previously seen at score 71 under a different namespace, the project's direct registration demonstrates what clean metadata and a permissive license can do for a trust score.

305 of 549 new servers this batch are developer tools — browser automation, database connectors, code analyzers, API bridges. The ratio is not diversifying; it is consolidating. Established projects like Skyvern (20.8k stars) and edgartools (1.8k stars) continue choosing MCP as a distribution channel. Meanwhile, visual output tools, security scanners, and quantum computing documentation signal where the devtool frontier is heading next.

The spiritual successor to OrientDB — a multi-model database supporting graph, document, key-value, time-series, and vector search in a single engine — registers two MCP servers under different namespaces. The packaged entry scores 77; the repo-only entry scores 69. The gap illustrates what packaging does to a trust score.

1,059 MCP servers — 34% of the registry — now declare streamable-HTTP transport. 897 of those have no stdio fallback at all. SSE lingers at 6%. The transport layer transition is no longer theoretical.

232 new servers push the registry past 3,100. Kubeshark (11,800 stars) is the only new High Trust entry. Streamable-HTTP now accounts for a third of all transport declarations. The agent economy gets its first payment rails, and ham radio gets ten MCP servers.

A battle-tested Kubernetes network traffic analyzer with 11,800 stars, 519 forks, and years of active development adds MCP support. Score 84 — the only new High Trust entry this batch, and the third established project to claim a top-tier position in two weeks.

One developer registered ten amateur radio MCP servers in a single batch — ADIF log parsing, eQSL verification, LOTW tracking, Parks and Summits on the Air, WSPR propagation analysis, solar weather, and callsign lookup. This is MCP reaching a community that has nothing to do with software development.

One developer shipped six MCP servers covering GOES satellite imagery, hurricane reconnaissance flight data, WAVEWATCH III wave forecasts, USGS streamflow, and two ocean model debuggers. This is operational science tooling — the kind NOAA researchers actually use.

Roughly 25 new MCP servers in this batch deal with agent payments — USDC escrow on Base, per-call micropayments, spending limits with human approval, A2A service marketplaces, and Lightning Network integration. The infrastructure for agents paying agents is arriving before the agents that need it.

A Boise developer wired up 13 free US government APIs as MCP servers — safety recalls, disaster intel, court records, cybersecurity vulnerabilities, and more. No API keys required for most. Government data is better than you think.

An MCP server wraps the Screaming Frog SEO Spider CLI — 8 tools for launching crawls, exporting data, and analyzing results through conversation. One catch: you have to close the GUI first.

A mature Python web scraping framework with 19,000 stars adds MCP support and immediately claims the top trust score in the registry. This is what it looks like when established projects decide MCP is worth supporting.

184 new servers push the registry past 2,800. Scrapling — a 19,000-star Python scraping framework — enters the top 25 at #1. Game engines get API lookup servers, one developer ships 13 government data bridges, and the EU AI Act deadline starts casting shadows.

Jon Radoff — the creator of Game of Thrones Ascent, Star Trek Timelines, and a Substack with 38,000 subscribers — ships a free, MIT-licensed SaaS boilerplate and a CMS. Both were built entirely through Claude Code. Both include MCP servers as first-class interfaces.

An MCP server that searches GitHub, Hacker News, npm, PyPI, and Product Hunt before you write a line of code. Describe your idea in natural language, get a market saturation score and ranked competitors. 219 stars in five days.

One developer built a matched pair of MCP servers that pre-index the full Unity and Unreal Engine API surfaces — 42,000 records for Unity 6, 114,724 for Unreal 5.7 — with sub-millisecond lookups. AI coding assistants hallucinate game engine APIs constantly. These servers fix that.

An MCP server builds HMAC-SHA256 hash-chained audit logs for AI systems operating under European regulations. The EU AI Act's high-risk obligations take effect August 2, 2026. The clock is ticking.

The EU AI Act's high-risk obligations take effect August 2, 2026. AI agents that use MCP tools don't fit neatly into the Act's categories — but the supply chain provisions reach everyone. Here's what matters for the MCP ecosystem.

An MCP server that lets AI agents perform arithmetic, schedule analysis, and ML inference on encrypted data. The server is mathematically guaranteed to never see plaintext. Pay-per-query in USDC. Alpha stage, but the concept is real.

An AI-native SAST tool that builds AST, control flow, and data flow graphs — then lets AI agents query them via MCP. Claims 98% fewer false positives than pattern-matching scanners. 110 stars.

A single developer published four MCP servers that form a safety toolkit for autonomous AI agents — check the calendar before acting, verify values are normal, run pre-flight safety checks, and confirm actions are reversible.

39 tools for US individual tax calculations — federal brackets, state taxes for all 50 states, retirement strategies, and OBBB Act provisions. Everything runs locally. No credentials, no network calls, no telemetry.

A Singapore company built a SwiftUI component library designed from the ground up to be consumed by LLMs. The MCP server delivers recipes — implementation guides that AI agents use to build iOS apps. 315 stars, the highest in this batch.

An R package connects RStudio to Claude, Codex, and Gemini via MCP — letting multiple AI agents execute code, capture plots, and read htmlwidgets in a shared live session. 128 stars and counting.

The registry jumps to 2,638 servers. A single publisher registers 49 generic utility servers in three days. Elsewhere: RStudio gets an AI bridge, Coolify gets a copilot, and a tax calculator arrives just in time for filing season.

PEAC Protocol standardizes verifiable interaction records for AI agents operating across organizational boundaries — a discoverable policy file, a signed receipt format, and a portable evidence bundle for offline verification. Score: 73.

A Harvard Extension School graduate in Tel Aviv built a regression testing framework for AI agents — golden baseline diffing that catches behavioral drift after prompt changes, model swaps, or tool updates. 45 stars, no API keys required.

A new MCP memory server claims 80% accuracy on the LOCOMO benchmark — a 19.6% improvement over Mem0's published results — with three tiers of memory intelligence. Ten days old, proprietary license, bold claims.

A UK developer built an MCP server that wraps the entire Coolify self-hosted PaaS API — 38 tools for managing servers, deployments, databases, and environment variables through AI assistants. 185 stars, 37 forks.

A Canadian university student built an MCP server for Statistics Canada's open data API — and it's the highest-provenance government data server in the registry. Eight government and open-data servers now exist. The public sector is arriving.

11 new servers push the registry to 2,468. Three are blockchain, one live-codes music, and a $10M translation company ships closed-source. The ecosystem diversifies.

A $5.5M-funded cross-chain protocol, a zkSync development toolkit, and a privacy-preserving on-chain verifier all registered MCP servers in the same scan. DeFi is treating agent interfaces as infrastructure.

An MCP server that turns Claude into a live-coding DJ, generating Strudel music patterns in real-time with a retro web interface at claude.dj.

A Tel Aviv entrepreneur building a paid MCP marketplace and an FFXIV modder solving context bloat both shipped proxy servers in the same scan. The middleware layer is forming.

An anonymous collective published an exploit intelligence MCP server with no source code, no GitHub presence, and a Proton Mail contact. Score: 29.

The registry crossed 2,440 servers overnight. Two bulk publishers account for 72% of new entries. The shape of what's showing up matters more than the count.

A solo cybersecurity professional in Sweden used Claude to mass-publish 70 country-specific law MCP servers in a single month. The registry's first template-factory stress test.

An NSF-funded research lab at Illinois Tech just registered 16 MCP servers wrapping HDF5, Slurm, ADIOS, and ParaView. The scientific computing community is treating MCP as research infrastructure.

A solo developer in Virginia built a headless browser MCP server that returns 336 characters where Playwright returns 61,230. Progressive disclosure for the agent era.