mcpcensus

Check an MCP server before you install

The MCP Census checks public evidence for an MCP server and returns PASS, REVIEW, BLOCK, or UNKNOWN. It is a first gate, not a malware scan. No account is required for the call below.

Get a free key

free · 10/day · no signup·Lookup·Preflight·Audit a config·API for agents

manual install·developers·prompt.md·llms.txt

try it

No signup

This call needs no account and is unmetered. Latest data capture: .

curl -s https://api.mcpcensus.com/v1/stats

Same facts over MCP, also with no key: https://api.mcpcensus.com/mcp · tool census_stats

60,152
servers
31,229
GitHub
8,450
issues
39,347
remotes

Live from the census database · latest capture 7 November 2026, 23:32 UTC · read 8 November 2026, 12:08 UTC

facts

Facts

FactValue
ProductThe MCP Census
OperatorJaco Veldsman, Australia
Contact[email protected]
DecisionPASS, REVIEW, BLOCK, or UNKNOWN
NotA malware scanner, a pen-test, or the official MCP registry
No accountUnmetered GET /v1/stats and MCP census_stats. Search and lookup: 10 unique names per day per IP.
MCP endpointhttps://api.mcpcensus.com/mcp
PricesFree account 1,000 credits each UTC month. Builder $19/mo. Pack $9. Team $49/mo. Pricing
new in the registry
loading…
  • loading…

Directories list. We check.

Is it the vendor’s server or a lookalike? Still maintained? What can you open as proof?

Forbuilders and agents that install MCP servers
Notstar rankings, black-box scores, or fake logos

Comparisons → · How we differ → · Policy preflight → · Live coverage →

for agents

Your agent checks. Every time.

One call audits a whole MCP config. One rule line makes the agent run it before every install or tool call. One cursor tells it what changed since last time. Nothing to remember, nothing to re-read.

AuditPOST /v1/audit · .mcp.json in, one verdict per server out
VerdictsPASS · REVIEW · BLOCK · UNKNOWN, with reasons and an exit code
Ruleone line in CLAUDE.md, AGENTS.md or .cursor/rules
ChangesGET /v1/changes?since=cursor · unmetered
CIcensus-preflight.yml · fails the PR on BLOCK
Cost1 credit per config per day · keyless: one config a day
# the whole recurrence mechanism — paste into your agent's instructions
Before adding, enabling or calling any MCP server, run a Census stamp. Stop on BLOCK. Ask on REVIEW.

Audit your config → · Claude Code, Codex, Cursor, VS Code → · GitHub Action →

changes

What changed since you last looked

Every cron writes what it saw: a server appears in the registry, a hosted endpoint goes down or comes back, a tool list changes, health or verification flips, an endpoint moves. Pull it with a cursor. No key, no credits.

live · last 24 h
loading…
  • loading…
PullGET /v1/changes?since=cursor or census_changes
PushPOST /v1/watch · one server to your webhook · API key

Feed contract → · Watch docs → · llms.txt →

findings · live

8,450 servers have a verified problem

That is 14% of the 60,152 servers tracked. A verified problem is a fact such as a gone repo, an archived repo, a deprecated package, or no push in 6+ months. Servers we have not assessed yet are counted separately, never as healthy.

Healthy44,733
Verified problem8,450
Unknown (not enough evidence)5,137
Not yet assessed1,832
July 2026 snapshot: problems by type and categories

From the 7 July 2026 deep analysis of 15,382 servers. These breakdowns are not refreshed daily; the live counts are above. Methodology · July 2026 snapshot report

GitHub repo gone (deleted/pr1,880No repo push in 6+ months299npm package deprecated218registry_deprecated166GitHub repo archived126npm package missing25PyPI package missing15
View as table
ProblemServers
GitHub repo gone (deleted/private)1,880
No repo push in 6+ months299
npm package deprecated218
registry_deprecated166
GitHub repo archived126
npm package missing25
PyPI package missing15
dev-tools11,697ai-ml1,943api-integration1,672security864finance847communication544media536files-documents461data-analytics406databases399weather-geo377productivity302
View as table
CategoryServers
dev-tools11,697
ai-ml1,943
api-integration1,672
security864
finance847
communication544
media536
files-documents461
data-analytics406
databases399
weather-geo377
productivity302

July 2026 snapshot report → · Live coverage → · Citable stats →

pricing

Free to check. Credits when agents run at scale.

Anonymous10 unique lookups/day · no account
Free1,000 credits/month · account + API key
Builder$19/mo · 2,000 credits
Pack$9 · 1,000 never-expire credits

Team $49/mo · 10,000 credits. Search/lookup 1 · config audit 1 per config per day · preflight/stamp 5 · watch 10. Repeats same UTC day are free. The change feed is unmetered. A daily audit of a 10-server config stays inside the free grant.

See prices Check a server

faq

Common questions

What is The MCP Census?

The MCP Census is a public-evidence gate for MCP servers. It returns PASS, REVIEW, BLOCK, or UNKNOWN. It is not a malware scan and it is not the official MCP registry.

Can I try it with no account?

Yes. curl -s https://api.mcpcensus.com/v1/stats needs no key and is unmetered. The MCP endpoint https://api.mcpcensus.com/mcp accepts the census_stats tool with no signup. Search and lookup without an account are limited to 10 unique names per day per IP.

How can an agent check a server before it connects?

Add one rule: before adding, enabling, or calling any MCP server, run a Census stamp, stop on BLOCK, and ask a human on REVIEW. The agent calls census_stamp or census_audit_config at https://api.mcpcensus.com/mcp.

Can I audit a whole MCP config at once?

Yes. POST the config to https://api.mcpcensus.com/v1/audit. You get one PASS, REVIEW, BLOCK, or UNKNOWN line per entry. One config of up to 25 entries per IP per day is free without a key.

How is this different from Smithery, Glama, and mcp.so?

Those sites help you find, and in some cases host or connect, MCP servers. The Census checks public evidence and returns a policy decision. Short comparisons are at mcpcensus.com/compare/. We do not host their servers or sign you into their tools.

What does UNKNOWN mean?

UNKNOWN means the Census has no row for that entry. It is not a pass.

limits

What this is not

The MCP Census is a live registry health and identity check. It is not a full security audit, pen-test, compliance certification, or guarantee that a server is safe to run in production. Unknown means we lack evidence, not that the server is fine. Methodology →

[email protected] · 14-day refunds · ACL applies · no marketing cookies

Support is human. Data is public sources; the product is the live check.

pricing · agent-setup/prompt.md · llms.txt · manual install →