ADVISORYBrotli decoder flaw · check by handBrotli flaw · check by hand eMudhra certificate keys compromised · free checkeMudhra keys compromised · free check CL-61 · dfc2197 · Last deploy · 0 cookies · 0 third-party requestsLight-time to Deimos 11.4 min at
Sheet 2.01ASeries 2 · EvidenceDataset · Marklode (RECON)Recount 2026-10 · counted Metadata only. No server contacted.

The MCP registry census · Marklode · Deimos AI LLC

How many MCP servers are there?

We counted the public MCP registry. It lists 156,111 entries, and behind them stand 45,156 distinct servers. 13,383 of them, 29.6%, have no public source repository. The counts are yours to download, check and cite.

AThe count

Entries are not servers.

Registry entries156,111
Distinct servers behind them45,156
With no public repository13,383(29.6%)

Source · Marklode MCP registry census, October 2026 recount · as of VERIFIED

A registry counts listings. The same server published under several versions or entries is still one server, so a headline built on raw listings overstates the field several times over. This census counts the servers.

The September count, on 2026-09-12, found 31,309 servers behind 101,219 entries. Only those two figures were kept from it, so every breakdown below is from the October recount.

BMethod

How the count is made.

The Model Context Protocol (MCP) lets AI agents call tools and data through servers. The official public MCP registry lists those servers. Marklode reads every listing through the registry’s public API, then counts the distinct servers behind them.

The dedup rule

Registry entries are grouped by the server name the registry gives them, so the same server published under several versions or entries counts once. Each server’s figures come from its latest entry: the one the registry marks as latest, or, where none is marked, the last one listed. Its first-published month is the earliest publishedAt among all its entries.

A server has a public repository when its latest entry names one. How it is offered, its transports and its packages come from the same entry.

It is metadata only. We read what was published about each server, and nothing else. That limit is deliberate, and it shapes what the count can say.

Marklode’s API serves the live totals at api.marklode.com/v1/stats ↗. They move with each recount; this page keeps each recount as it stood.

CBreakdowns

Five cuts of one count.

Each table gives the servers in each category, their share of all 45,156 servers, and how many of them have no public repository.

T-01 Registry status

The status the registry gives each server’s latest entry.

CategoryServersShare of all serversNo public repo
Active44,61398.8%13,264
Deprecated5431.2%119
All servers45,156100.0%13,383

T-02 How a server is offered

From each server’s latest entry: a remote endpoint (an address an agent connects to), a package to install and run locally, both, or neither.

CategoryServersShare of all serversNo public repo
Remote only26,94859.7%12,391
Package only15,55734.5%706
Remote and package2,1444.7%212
Neither listed5071.1%74
All servers45,156100.0%13,383

T-03 Remote transport

Servers whose latest entry lists a remote endpoint of each transport type. A server listing both types counts under each, so the rows add up to more than the servers with a remote.

CategoryServersShare of all serversNo public repo
Streamable HTTP streamable-http28,35662.8%12,133
SSE (server-sent events) sse1,0852.4%635
Rows added up29,441A server can count in more than one row

T-04 Package registry

Servers whose latest entry lists a package in each registry (npm, PyPI, OCI images and others). A server published to several counts under each, so the rows add up to more than the servers with a package.

CategoryServersShare of all serversNo public repo
npm11,34425.1%624
PyPI4,50610.0%233
MCPB (MCP bundles) mcpb1,2102.7%36
OCI (container images) oci1,1452.5%45
NuGet1540.3%7
Cargo (crates.io) cargo800.2%0
Rows added up18,439A server can count in more than one row

T-05 Servers first published, by month

Each server under the month of its earliest publishedAt across all its entries (UTC). That is when the registry recorded it, not when it was built. The last month is partial: the pull ended on 17 Oct 2026.

Month first publishedServersShare of all serversNo public repo
4561.0%69
2970.7%79
1740.4%52
2770.6%59
3900.9%44
1,1582.6%127
1,9444.3%188
2,5515.6%377
3,0386.7%399
3,8608.5%706
5,08911.3%1,452
6,54714.5%2,231
11,87426.3%3,715
7,50116.6%3,885
All servers45,156100.0%13,383
DLimits

What the count does not say.

  • It does not say any server is safe, or unsafe. We never ran one, so we can’t tell you what any of them does.
  • It does not say how many servers are maintained, used, or used by anyone at all. A listing is a claim that something exists, not evidence that anyone depends on it.
  • It does not rank servers or vendors.
  • It does not say a server without a public repository is hiding anything. Plenty of honest software is closed source. It means you can’t read the code.
  • It does not name servers. The files hold counts only: no server name, address or description. To look up one server, use Marklode’s checker.
  • It covers one registry, the official public MCP registry. A server listed only somewhere else is not in it.
  • And it is a snapshot. Registries change daily, which is why the census is recounted monthly and every figure carries the date it was checked.
EDownload

Take the counts with you.

  • 2026-10.jsonJSON · 7,427 bytesEvery figure on this page in one file: the headline, the September count, each breakdown, the dedup rule and the limits.SHA-256 1dad04eeb345486d2ce9e050bfeac1ffd2392128eef3f8f52336362c0946910b
  • 2026-10.csvCSV · 1,592 bytesThe same figures, one row each: table, category, unit, count, share of all servers, and how many have no public repository.SHA-256 dda944829dac3c4b8ff196c6acfed489655dc8c56df1194a329bdecd75e5a92d
  • index.jsonJSON · 1,013 bytesEvery recount this site publishes, with each file’s size and SHA-256. Its own hash changes with each recount.SHA-256 6843a4e35d57c2f4e3d06ee7beccab9f1cf4030a1925e73b133c8a68a4fd661a

Check a download: shasum -a 256 2026-10.csv on a Mac, sha256sum 2026-10.csv on Linux. The result should match the line above.

Licence

The counts are published under Creative Commons Attribution 4.0 International (CC BY 4.0) ↗: use them, share them and build on them, with credit to “Marklode MCP registry census, Deimos AI LLC” and a link to this page.

FCite

How to cite it.

Deimos AI LLC (Marklode). The MCP registry census, October 2026 recount, counted 2026-10-17. https://www.deimoscore.com/marklode/census/. Licence: CC BY 4.0.

Cite the recount and its date, not the live totals: those move each month.