Verify before you connect.
Free A to F grades for remote MCP servers, each computed from its own sealed record.
Every grade, on the record.
A grade is never a bare letter. It carries the method that made it and the snapshot that sealed it, and it points to the record underneath.
The letterComputed only from fields inside the sealed record: the endpoint, its recorded verdict, and the snapshot number.
The methodVersioned and frozen. A change of method ships as a new version with its own grades, never as an edit.
The snapshotEach grade is written to the sealed series the day it is issued, 27 Oct 2026 for this one.
The rootThe published merkle root that commits every record in that snapshot. Each earlier snapshot has its own.
A grade for every endpoint.
Every remote endpoint in the registry is graded at every snapshot. One without enough history is marked UNGRADED, never guessed.
- A
- 22,550 67.8%
- B
- 418 1.3%
- C
- 147 0.4%
- D
- 222 0.7%
- F
- 3,954 11.9%
- Ungraded
- 5,989 18.0%
Endpoints and operators are not the same count: one operator can hold many endpoints, so an endpoint total on its own overstates diversity.
How that resolves: 34619 endpoints held · 33408 published (1211 below the observation threshold) · 1 affiliated and excluded from independent figures · 33407 counted as independent, across 24509 distinct hosts.
| Recorded as | Endpoints |
|---|---|
| OK | 19,127 |
| AUTH_REQUIRED | 9,120 |
| PAYMENT_REQUIRED | 486 |
| RATE_LIMITED | 551 |
| TIMEOUT | 222 |
| DNS_FAIL | 759 |
| TLS_FAIL | 236 |
| PROTOCOL_ERROR | 846 |
| HTTP_4XX | 1,311 |
| HTTP_5XX | 623 |
| Total | 33,281 |
Since 6 Aug 2026.
84 snapshots on the chain so far. Each one is published with a merkle root that commits every record in it, and names the root of the snapshot before it.
See the proof- REL-SNAP-08427 Oct 202633,281 endpoints, 24,705 hostsrooted182ac44848117a98c9…names44ebd2817c858454941e…
- REL-SNAP-08326 Oct 202632,853 endpoints, 24,324 hostsroot44ebd2817c858454941e…namesd2ff3283da3040e0f7cc…
- REL-SNAP-08225 Oct 202632,477 endpoints, 23,978 hostsrootd2ff3283da3040e0f7cc…names3ae171bb1dc439496fa2…
- REL-SNAP-08124 Oct 202632,085 endpoints, 23,611 hostsroot3ae171bb1dc439496fa2…names4f88dd5078bd338cc7ad…
- REL-SNAP-08023 Oct 202631,711 endpoints, 23,285 hostsroot4f88dd5078bd338cc7ad…names407e8fcf3bc96db2738a…
- 79 earlier snapshots, back to REL-SNAP-001 on 6 Aug 2026.
No one can buy a grade.
We never sell a grade, an input to one, or the order of graded results. A grade is computed only from the sealed record, so a payment has nothing to reach.
Sealed before the outcome.
Every grade is sealed the day it is issued, then scored against what actually happened, by a rule fixed before the first grade was sealed.
The outcome. Whether the endpoint is recorded reachable in the later snapshot, a field already in the published record.
The bar. A grade counts as skilful only if it beats the simplest forecast there is: reachable now, so reachable later. Scores are not published yet.
Common questions
- What is MCP Verify?
- MCP Verify is the rating layer for AI agents. It grades remote MCP servers from A to F, and every grade is computed from a sealed record of observations committed to published merkle roots.
- How do I check an MCP server before I connect it?
- Paste its URL into the search on any page. You get its current grade, the method and snapshot behind the grade, and every observation on its record.
- What does UNGRADED mean?
- The endpoint has not been observed long enough to grade. It gets a letter once its record is long enough, and it is never estimated before that.
- Can a server owner pay for a better grade?
- No. We never sell a grade, an input to one, or the order of graded results.
- Is a grade a guarantee?
- No. A grade is a forecast of reachability drawn from the sealed record, not a certification. Forecasts are scored later against what actually happened.
- Where does the record come from?
- From our own read-only checks of the remote endpoints listed in the MCP registry.
- Does MCP Verify sit between my agent and a server?
- A record, not a proxy. We never sit in your agent's path, and we never certify.