Ecosystem stats
MCP ecosystem statistics
How big is the MCP registry, and what is actually in it? This page tracks the official Model Context Protocol registry over time: server growth, registry lifecycle (active, deprecated, deleted), the packages and transports servers ship on, and how their trust scores are distributed. These are VerifyMCP's own measurements, recomputed hourly from the official MCP registry: an independent read on the state of the ecosystem rather than a republished server list. To browse or search the servers themselves, use the directory. Last updated 2026-09-13.
Pick a 7/30/90-day window above, switch any chart between line and bar, and hover a point for exact figures. For which packages are currently flagged, and by what, see the malware register.
Last 7 days
Packages with a malware verdict
Catalogued packages carrying a supply-chain malware verdict on each day we recorded one. A scanner match is an alert the vendor's rules matched directly; a model suspicion is one its model raised on its own, which is a weaker claim and is counted separately, never added to the first. Unusable counts packages a scanner has flagged in this window that we could not check on the day, so a drop in coverage cannot be misread as malware going away. All of it is the vendor's verdict rather than our own analysis. Days nothing could be scanned on break the line rather than plotting zero, today is excluded until it is fully scored, and readings are kept for 90 days.
| Label | Scanner match | Model suspicion only | Verdict unusable |
|---|---|---|---|
| 2026-09-06 | 0 | 47 | 8 |
| 2026-09-07 | 0 | 43 | 12 |
| 2026-09-08 | 1 | 41 | 11 |
| 2026-09-09 | 1 | 39 | 14 |
| 2026-09-10 | 0 | 41 | 14 |
| 2026-09-11 | 1 | 36 | 20 |
| 2026-09-12 | 1 | 42 | 16 |
Score distribution (latest)
Servers by best component score, newest snapshot.
| Label | Servers |
|---|---|
| unscored | 4 |
| 0–9 | 2132 |
| 10–19 | 860 |
| 20–29 | 2183 |
| 30–39 | 7309 |
| 40–49 | 2071 |
| 50–59 | 2562 |
| 60–69 | 2327 |
| 70–79 | 6555 |
| 80–89 | 5086 |
| 90–100 | 840 |
New vs updated
Servers added vs updated in the 24h before each snapshot.
| Label | New | Updated |
|---|---|---|
| 2026-09-07 | 350 | 504 |
| 2026-09-08 | 393 | 402 |
| 2026-09-09 | 1473 | 457 |
| 2026-09-10 | 352 | 471 |
| 2026-09-11 | 731 | 347 |
| 2026-09-12 | 472 | 341 |
| 2026-09-13 | 242 | 334 |
Ecosystem mix
Servers exposing at least one component of each kind.
| Label | Remote | npm | PyPI | OCI | NuGet | MCPB |
|---|---|---|---|---|---|---|
| 2026-09-07 | 16885 | 8419 | 3657 | 876 | 109 | 717 |
| 2026-09-08 | 17223 | 8470 | 3673 | 880 | 112 | 724 |
| 2026-09-09 | 18532 | 8518 | 3701 | 883 | 112 | 748 |
| 2026-09-10 | 18828 | 8559 | 3721 | 890 | 113 | 758 |
| 2026-09-11 | 19509 | 8590 | 3741 | 893 | 114 | 761 |
| 2026-09-12 | 19701 | 8620 | 3763 | 895 | 115 | 794 |
| 2026-09-13 | 19817 | 8669 | 3774 | 897 | 116 | 796 |
Transport mix
Servers with a component declaring each transport (overlaps).
| Label | streamable-http | sse | stdio |
|---|---|---|---|
| 2026-09-07 | 16325 | 1164 | 13043 |
| 2026-09-08 | 16662 | 1165 | 13121 |
| 2026-09-09 | 17971 | 1165 | 13208 |
| 2026-09-10 | 18269 | 1166 | 13274 |
| 2026-09-11 | 18950 | 1166 | 13330 |
| 2026-09-12 | 19144 | 1167 | 13412 |
| 2026-09-13 | 19261 | 1169 | 13475 |
Protocol version
Components by the MCP protocol version their latest capture declared. Anything that is not an official spec version is bucketed as invalid; components we never handshook with are not counted at all.
| Label | 2024-11-05 | 2025-03-26 | 2025-06-18 | 2025-11-25 | 2026-07-28 | invalid |
|---|---|---|---|---|---|---|
| 2026-09-07 | 786 | 1901 | 1575 | 13338 | 2458 | 4 |
| 2026-09-08 | 782 | 1941 | 1612 | 13471 | 2520 | 4 |
| 2026-09-09 | 785 | 3200 | 1635 | 13621 | 2568 | 4 |
| 2026-09-10 | 788 | 3315 | 1655 | 13713 | 2627 | 4 |
| 2026-09-11 | 791 | 3664 | 1669 | 13795 | 2676 | 4 |
| 2026-09-12 | 792 | 3904 | 1688 | 13912 | 2716 | 4 |
| 2026-09-13 | 791 | 3917 | 1732 | 13987 | 2737 | 4 |
Catalogue growth
Logical servers and their scored components over time.
| Label | Servers | Components |
|---|---|---|
| 2026-09-07 | 29086 | 31587 |
| 2026-09-08 | 29479 | 32012 |
| 2026-09-09 | 30861 | 33427 |
| 2026-09-10 | 31213 | 33800 |
| 2026-09-11 | 31944 | 34539 |
| 2026-09-12 | 32210 | 34828 |
| 2026-09-13 | 32386 | 35013 |
Lifecycle status
Registry lifecycle of catalogued servers.
| Label | Active | Deprecated | Deleted |
|---|---|---|---|
| 2026-09-07 | 28073 | 319 | 694 |
| 2026-09-08 | 28450 | 329 | 700 |
| 2026-09-09 | 29825 | 333 | 703 |
| 2026-09-10 | 30174 | 331 | 708 |
| 2026-09-11 | 30896 | 334 | 714 |
| 2026-09-12 | 31154 | 335 | 721 |
| 2026-09-13 | 31323 | 337 | 726 |
Trust score trend
Median and average of each server's best component score.
| Label | Median | Average |
|---|---|---|
| 2026-09-07 | 60 | 53.643692608498306 |
| 2026-09-08 | 60 | 53.564013960399464 |
| 2026-09-09 | 52 | 53.407095649886564 |
| 2026-09-10 | 53 | 53.731230694196064 |
| 2026-09-11 | 53 | 53.76517403394381 |
| 2026-09-12 | 54 | 53.504772104450815 |
| 2026-09-13 | 54 | 53.48817541111981 |