Published
State of MCP servers, October 2026
We probed every remote endpoint in the official MCP registry without credentials and checked every public tool list and dependency graph. This is what the ecosystem looks like at the end of October 2026.
- 14%of remote endpoints answer the 2026-07-28 protocol
- 64%of OAuth endpoints offer only the deprecated Dynamic Client Registration
- 51%of servers with resolved dependencies carry a known advisory
- 42%of servers cannot be scored from the outside