Next free-source huntWe check for new free data every weekday.
Global MacroMCP serverFirst audited Nov 13, 2026

The MCP Census

Vet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: Tool text contains phrasing worth a human review.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 216 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://api.mcpcensus.com/mcp

Website Streamable HTTP · protocol 2025-06-18 · server version 1.4.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Warning: Tool text contains phrasing worth a human review.

    • Mentions a file that usually holds secrets (tool census_audit_config: description): "…P client config in one call (.mcp.json, claude_desktop_config.json, .cursor/mcp.json, .vscode/mcp.json, Co…"
  • Passed: Connections are encrypted (HTTPS).

Safety labels

  • Note: 5 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • census_watch_subscribe
    • census_watch_unsubscribe
    • census_preflight
    • census_stamp
    • census_audit_config
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 15 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-06-18.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (15)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • census_lookupGet the live health verdict for one MCP server by its exact registry name (e.g. 'io.github.owner/name'). Returns stars, last-push recency, gone/archived/deprecated flags, name-collision count, and a…Read-only
  • census_searchSearch MCP servers by keyword or partial name (e.g. 'github', 'postgres'). Returns ranked matches with health/trust. Also returns: resolved_query (auto typo fix), disambiguate (when unsure), known_br…Read-only
  • census_statsEcosystem headline numbers from the live census (same payload as GET /v1/stats). Unmetered. Returns total servers, healthy/issues counts, popular (gh_stars>=1000), remote-capable count, github-linked…Read-only
  • census_recentNewest MCP servers by real first_seen_at (same payload as GET /v1/recent). Unmetered. Only rows with a known first-seen date — never invents or guesses discovery times. Optional limit 1–50 (default 2…Read-only
  • census_coveragePublic transparency report (same payload as GET /v1/coverage). Unmetered. Live D1 census/identity/remote/protocol/adoption/pipeline counts plus method notes — never invents completeness percentages o…Read-only
  • census_watch_subscribeSubscribe this agent (or a human email) to alerts for ONE specific MCP server. Fires only on real observed changes: remote_down, remote_up, health_change, verified_change, security. Requires x-api-ke…Can change things
  • census_watch_listList active per-server watches for this API key. Requires x-api-key.Read-only
  • census_watch_unsubscribeDeactivate a watch by id. Requires x-api-key that owns the watch.Can change things
  • census_preflightEvaluate one exact MCP server under a documented built-in install policy. Returns PASS, REVIEW, or BLOCK with evidence reasons, freshness, digests, and explicit limits. This is a first gate, not a se…Can change things
  • census_policy_listList the exact immutable Preflight v1 built-in policy objects, canonical ruleset, and policy digests. Unmetered.Read-only
  • census_creditsShow remaining Census credits for this API key (wallet after the UTC-month grant). Unmetered. Without a key, returns anonymous unique-per-day remaining — not a wallet.Read-only
  • census_stampCensus stamp for one exact MCP server under a built-in policy. Same input as census_preflight. Returns the preflight body plus compact CENSUS-STAMP/1 text and stamp_json. Cost matches preflight. Neve…Can change things
  • census_lookalikesContested identity for one exact server_name: official_for, name_collision_count, and up to 10 other census server_name values sharing the same namespace brand or tail. Never invents lookalikes. Cost…Read-only
  • census_audit_configAudit a whole MCP client config in one call (.mcp.json, claude_desktop_config.json, .cursor/mcp.json, .vscode/mcp.json, Codex config.toml text). Resolves every entry without guessing (url → remote_ur…Can change things
  • census_changesThe Census change feed (CENSUS-CHANGES/1): observed transitions across every server — server_new, remote_down, remote_up, tools_changed, health_change, verified_change, security, endpoint_moved, regi…Read-only

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200216 ms
initializedHTTP 20248 ms
tools/listHTTP 20086 ms
unknown-methodHTTP 20044 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.