MCP Server Discovery - October 19, 2026 (Midday Sweep)

Midday delta about eight hours after the October 19 night capture. The interesting change is where the yield came from: the mcp.so /feed page 1 produced nine cards newer than the 03:10 capture and none of them cleared the bar, while mcpservers.org /all pages 1-4 - pulled through the r.jina.ai reader proxy because the origin answers a plain request with a 403 - produced 117 slugs, 42 of which are named nowhere in the night sweep or the two cycles before it. Two entries were catalogued with guides, and one of them closes a hole that had been open in this catalog since the beginning: there was no YouTube channel operations server at all.

New Servers Catalogued

Server	Category	What it does
YouTube Kit MCP	Social Media Management	Local stdio server (uvx youtube-kit mcp) plus the ytk CLI, from the youtube-kit 0.6.0 PyPI package - Python 3.12+, MIT, github.com/eukosh/youtube-kit created August 21, 2026, last push October 19, 2026, two open issues, no stars yet. The operator's own channel as tools: analytics totals and breakdowns by day, month, video, country, device, OS, traffic source, playback location, age, gender and subscriber status; videos (get, categories, resumable upload with progress, metadata update, set thumbnail, wait for processing, like or dislike, rating, delete); comments (list published, held for review or likely spam, replies, post, reply, edit, delete, approve, hold, reject, ban the author); playlists (list, get, items, create, update, image, add, remove, move, delete); channel (get, recent activity, logged-in channels, about info, banner, watermark, home-page sections); search over videos, channels and playlists; subscriptions. Multi-channel: one ytk auth login per channel, --my-channel / my_channel per call, YOUTUBE_CHANNEL for a default. What makes it safe to leave connected: one JSON document per command on stdout, a JSON error object whose type is mirrored in the exit code (2 bad input through 10 timeout), quota cost printed in every --help and every tool description, two-step deletes that need a second call naming the exact target, damage limits that refuse to delete a video above 100 views or a public video older than 7 days, and idempotent already_gone results. Auth is your own Google Cloud project (YouTube Data API v3 plus YouTube Analytics API, Desktop OAuth client, about five minutes guided by ytk auth guide) because the 10,000-unit daily quota belongs to a project rather than a shared client: reads 1 unit, search 100 per page of 50, most writes 50, guarded deletes 52, an upload 1,600; Analytics runs on a separate quota. Not covered: captions, localizations, live streaming, channel memberships. Not affiliated with Google. Gap closed: the only other video-platform entry in the catalog is tiktok-transcript-mcp.
PhilForms MCP	Compliance	Local stdio client (npx -y github:philforms/philforms-mcp, Node 18+, no dependencies, MIT) over the PhilForms HTTPS API - OpenAPI 3.1, api version 1.0.0, live at philforms.com/api/v1/openapi.json and stating 1,342 forms. Covers BIR, SSS, PhilHealth, Pag-IBIG, GSIS, COA, CSC and GPPB, with every input mapped to its printed box so a TIN lands digit by digit in its cells. Five tools: search_forms, get_form_parameters (the fill contract - parameter, label, type, format, choices), check_form_values (validate before filling, rendered as it would print), fill_form (PDF plus tamper-evident document id), verify_pdf (prove the file is unaltered). The wider documented API adds dossier, ingest, scan and extraction endpoints, a verification ledger and key rotation. The design decision worth recording: a value the form cannot hold is refused with the reason instead of being coerced, so a workflow fails at the check step rather than printing a plausible wrong certificate. Pricing in PHP from /api/v1/plans (200): free watermarked tier that still issues clean first-of-pack forms plus 5 clean 2307s a quarter and 5 clean 2316s a year, 500 test fills on a pk_test_ key, credits where fill costs 1 and check, preview and verify cost 0 (revise 0, within 7 days, at most 5 edits), packs at 79 PHP for one form and 299 PHP for five, valid 12 months. is_checkout_available was false at probe time, so the schedule is confirmed and the purchase path is not. Fills and prints; you file. Not affiliated with any agency.

Sources

• mcp.so /feed page 1 (28 server and client links, nine posted after the 03:10 night capture: appcreator24, dreamwork, arvx, status-is-down, veltake-studio, searcherries, caimera, neuralverge and golfdata)
• mcpservers.org /all pages 1-4 via the r.jina.ai reader proxy with X-Return-Format: html (117 slugs, 42 not named in the night sweep or the two preceding cycles; a direct fetch of the origin returns 403)
• Owner/slug diff against the October 16 canonical snapshot r126 (15,835 URLs) to separate genuinely new listings from re-served ones; 35 owner/slug paths were newer than that snapshot, and the two catalogued entries are among them
• Vendor documentation for every survivor: the youtube-kit README and skill (quota table, output contract, delete protections), the PhilForms README, philforms.com/api/v1/openapi.json and philforms.com/api/v1/plans
• Live probes: philforms.com 200, openapi.json 200 (154 KB), /api/v1/plans 200; PyPI JSON for youtube-kit 200 (v0.6.0, uploaded 2026-10-18, Python >=3.12); GitHub API 200 for both repositories (stars, created and pushed dates, licence)
• Not run this cycle, and not claimed: the twelve-sitemap canonical refresh and the chatmcp/mcpso issue window. Both return on the next full-window sweep.

Also Identified (Not Catalogued)

mcp.so feed, fresh cards (9): appcreator24 (Android app and APK builder as a remote server; dev utility) held; dreamwork (job search, tailored application materials and application tracking; the career class is covered by Level Jobs, OneResume, OpenHire and the job scrapers) held; arvx (email for long-term client relationships that reads each person first; CRM and email class dense) held; status-is-down (read-only outage intelligence over 13,500 services with regional activity and problem indicators; the uptime class per RealUptime, Healthchecks and PingCheck) held; veltake-studio (film and ad projects with scene building, render pricing and export; media-generation class dense) held; searcherries (AI visibility and SEO on the customer's own numbers; visibility class saturated per geolint, LogNorm, Cite42, Firemark and AIGROW) held; caimera (AI product photography - on-model and catalogue shots with edits; media-generation class dense, and imagery is not a data source) held; neuralverge (already catalogued as neuralverge-mcp in the October 14 evening sweep) repeat; golfdata (verified golf club data for Spain and Europe; single-sport vertical, novelty class) held.

mcpservers.org /all pages 1-4, closest call: Tracekit (cygnux-labs/tracekit) - a self-hosted MCP proxy that agents connect to instead of the underlying servers, where a Tracekit signer allows, blocks or holds each call. It is genuinely close to this repo's governance thesis and the best new idea of the cycle, but it is agent-security infrastructure built for developers rather than a business data or operations surface, and the role is already carried by AgenticRail Gate (step-order enforcement with signed receipts) and Poison Armor (prompt-injection firewall), with zn-gate held in the night sweep. Held, and flagged for a re-look if that class thins or if an operator-facing governance product does not appear first.

The rest, by class: MappaIQ (commercial real-estate listings, 1.3M+ records; real-estate class per RealtyPad, DFX Real Estate and LandLens) held; Uniscript (TikTok and Instagram carousels from a topic, photos or a video with layer editing; social generation class dense per PostNitro and InstantClips) held; Superdirector (research social videos, Brand DNA, content briefs; content-research class per Viral Outliers, TubeScout and Social Glass) held; SocialToAI (public posts, comments, profiles and trends across 18 platforms, pay per call; social-data class dense per Captapi and Buska) held; the B2B Email and Domain Scorer rapidapi shell (lead-quality scoring by email and domain; outreach class dense and the rapidapi wrapper policy stands) held; EveryCalc (69 calculators; commodity utility) held; Cognita (51 keyless reconnaissance tools across DNS, TLS, email security, IP reputation and OSINT; scanning class) held; Guarita (security scans for AI-built web apps with ownership verification and retests; scanning class per Security Recipes, Tenable MSSP and Botwire) held; HIVE, Sqwakie and AgentPeer (persistent agent messaging, walkie-talkie threads and signed post forwarding; agent-infrastructure class) held; LystBot (shared lists between people and agents), DiskWise (Mac disk reclaim), TurnSignal (Playwright CI results), Taskpend (task boards and docs; project-management class per Taskade, Monday and Trello), Posy (link-in-bio), Panaxio (paid starter kit), Bootstrapware (seven embeddable React SaaS component servers), the MCP Server Generator, SwiftSkills, VibeCodePicks and the skill directories as dev utilities held; Brandiseer (on-brand image generation from saved brand kits; media-generation class dense) held; MyStreetData, FlatHunt, ViaFrei, MappaIQ and Axons Mobility (US street records, Berlin furnished rooms, German transport and fuel data, commercial listings, shared golf-cart fleets; property, locality and fleet verticals already represented) held; EverythingMeetsAI and CN RegWatch (AI-sector headlines by sector, China travel and trade data; news and jurisdiction verticals) held; StylistIQ, Israel Flower, Guest Pictures Photo Booth, Muslim Prayer Reminder, Laplace's Mini World and MagicInterview (fashion, gifting, party, devotional, science-model and interview-prep verticals; novelty class) held; FiveM Docs and QBCore (game-server documentation; dev vertical) held; Energy North Journal and FAA Airport Status (UK electrical guides, US airport delays; single-vertical data) held; HobbyCardIndex (sold prices for 16 million trading cards by grade; collectibles vertical) held; with HirePulse, Crispy, Redra, SynRAG, 17NAS, Flowmingo, AppScreenStudio, ELO ECM, POPCORN, AskHound, GSCmate, Firemark, Pyxmark, Sequential, AgentReader, AssetDiet, Fizzdoc, MathPoint, Dexra, Celestio, Foundtofind, MyLeadTech, XLaunch, Chargezen's five slugs, MRR Ledger, Ledgerbell, Peerlace, Fairquery's three slugs, Doing Work, Dashly, WisePPC, TradesWithAI, carrierscan, Google Jobs via Apify and the rapidapi, zenith-ops and username-fragment remainders carrying their October 16, 18 and 19 dispositions.

CorpusIQ Listing State

Not re-probed this cycle: mcp.so, mcpservers.org, Glama and Smithery carry their October 19 night state (mcpservers.org listed at /servers/corpusiq-io with its review quote; mcp.so not listed, quarantine holds and no resubmit).

Result

Catalog moved from 939 servers (+825 guides) to 941 servers (+827 guides). Two guides written, both live-probed at the vendor endpoint that could be probed: PhilForms over its OpenAPI and plans endpoints, YouTube Kit over PyPI and GitHub metadata (the server itself is local, so there is no endpoint to initialize against).