MCP Server Discovery - October 23, 2026 (Midday Sweep)

A seven-hour delta after the night capture, and the two finds answer different halves of the same operator question. One manages what a seller publishes to six marketplaces from a single catalog. The other reads what customers already said and ranks it by the revenue attached.

The directory surfaces were quiet in the useful sense: mcpservers.org /all pages 1 to 3 returned the same 89 unique slugs as the night pass, every one carrying a recorded disposition, so nothing was re-litigated. The mcp.so feed contributed eight cards posted after the night cutoff at 09:27Z, one of which cleared the bar. The submission window #5984 through #5992 produced nine issues in about five hours, and the only entry that held up was also the only one where a live probe contradicted a directory card's framing.

New Servers Catalogued

Server	Category	What it does
3Dsellers MCP	Commerce & E-Commerce	One hosted endpoint for eBay, Amazon, Walmart, Etsy, Shopify and TikTok Shop. https://api.3dsellers.com/mcp, Streamable HTTP with OAuth 2.1 authorization code and PKCE S256 or a bearer token. Probed live: unauthenticated POST initialize returned HTTP 401 {"statusCode":401,"error":"Unauthorized","message":"This MCP server requires a bearer token. Discover the authorization server at https://api.3dsellers.com/.well-known/oauth-protected-resource/mcp"}; that advertised path returns 200 with resource https://api.3dsellers.com/mcp, fourteen scopes and client_id_metadata_document_supported, while /.well-known/oauth-authorization-server names authorize and token endpoints with code and refresh grants, client_secret_post and S256. 150+ tools across twelve areas, each marked read or write. The multichannel core is publish-products-to-channel, sync-new-skus pulling channel SKUs into the catalog and link-skus-cross-account keeping one SKU's stock in sync across selling accounts; behind it sit inventory (set-listing-inventory, set-variation-inventory, set-inventory-sync), orders (get-orders, set-order-tracking, generate-order-invoice), bulk jobs (create-action against hundreds of listings with get-action tracking), a full CSV pipeline with dry runs and scheduled supplier imports, helpdesk tickets and buyer replies, automations, watcher offer rules and channel category field mapping. Pricing: MCP included in every plan including the free trial, data reads free, AI actions sold in advance at $9 for 2,000 a month, $20 for 5,000 and $29 for 10,000, with 600 calls a minute and 50,000 a day on paid plans shared between REST and MCP. Security: per-token scopes from product:read to full access, approval before write tools, every REST and MCP call logged with secret-looking values redacted, one-click revoke. Official registry entry com.3dsellers/mcp 1.0.0. Gap named rather than claimed: no tool call was made, because every tool needs a 3Dsellers account with a connected selling account, and this sweep does not create accounts.
ClosedLoop AI MCP	Data & Analytics	Product insights built from the conversations a company already has: sales and success calls, support tickets, surveys, Slack threads and CRM notes, each insight ranked with the revenue of the accounts behind it and traceable to the original quote. https://mcp.closedloop.sh for the US and https://eu.mcp.closedloop.sh for the EU, Streamable HTTP with OAuth 2.1. Probed live: unauthenticated POST initialize returned HTTP 401 {"jsonrpc":"2.0","error":{"code":-32000,"message":"Authorization required"}} with www-authenticate naming resource_metadata="https://mcp.closedloop.sh/.well-known/oauth-protected-resource"; that document returns 200 with resource https://mcp.closedloop.sh, the same host as its authorization server, and scopes mcp:tools and mcp:read; /.well-known/oauth-authorization-server adds dynamic client registration, code, refresh and client_credentials grants and private_key_jwt with RS256 and ES256. 14 documented read tools plus 4 writes: get_overview, get_facets, get_trends, search_customers, get_customer, search_insights, get_insight, list_conversations, get_conversation, search_signals, get_competitors, get_signal, search_opportunities and get_opportunity, with the writes limited to a feedback note to the vendor, a create_watch notification and two test permission-request tools that never email a customer. Pricing is volume-based on customer feedback volume and quoted on contact, with unlimited team members and MCP access included. Gap named rather than claimed: no tool call was made, because every tool needs an OAuth connection to a workspace with connected sources. Discovery note: the apex product domain serves an HTML 404 on its bare well-known path, so the document that matters is the MCP host path the 401 header names.

Candidates Read and Held

From the submission window #5984 through #5992, nine issues:

• CurlShip (#5992, https://curlship.com/mcp): the one keyless endpoint of the window. Probed live: POST initialize returned HTTP 200 as CurlShip version 1 with its own instructions string, Featured is the first tool. Paid actions return checkout_url. Opening that URL is the payment. Thirteen tools let an agent submit a website to a bot-friendly directory, list and search listings, upgrade a listing, bid on the featured spot, refresh or change a listing and verify the backlink badge. Held as directory infrastructure and a self-promotion surface, the meta class that already carries Startup OG, MCPALL and MCPwell: it is a place to be listed, not a system of record to read.
• Fluxmail Cloud (#5991, https://cloud.fluxmail.ai/mcp): hosted Gmail, Outlook and IMAP mailboxes behind OAuth, with read-only, read-write or full access per connection, search, read, draft, send, forward and organize, $15 a month after a seven-day trial. Probed live: HTTP 401 {"error":{"code":"unauthorized","message":"Connect with OAuth or use an active Cloud agent key."}} with www-authenticate publishing scopes mail.read mail.drafts mail.organize mail.trash mail.send offline_access. Held against Secure Email (Gmail and Outlook), which already carries redaction before content reaches the model and a full audit trail; a second hosted mailbox connector adds a vendor rather than a class.
• Oryah Mail (#5989, https://mail-mcp.infinihash.com/mcp): governed email and calendar for agents over Gmail, Microsoft 365 and IMAP, 30 tools, per-mailbox read, draft or full permission, a recipient-domain send allowlist, an audit log on every draft, send, change and refusal, and scoped API keys with presets, expiry and a daily send cap. Probed live: HTTP 401 {"error": "invalid_token", "error_description": "Authentication required"} with RFC 9728 metadata at /.well-known/oauth-protected-resource/mcp. Held in the same class as Fluxmail for the same reason, with the allowlist plus audit combination recorded as the strongest argument to revisit if that class thins.
• Rimbra (#5988, https://app.rimbra.app/mcp): hosting, PostgreSQL, MySQL and Redis, domains, an Email API and a WhatsApp API behind one connector, OAuth 2.1 with a dashboard key for agents acting under the person's role and unable to touch billing. Probed live: HTTP 401 {"error":"Connect Rimbra first: sign in through your agent, or use a key from Rimbra and MCP."} with protected-resource metadata. Held as deploy infrastructure alongside Cloudzyro and Lavela: developer platform work rather than an operator data surface.
• SnapshotFlow (#5987, https://api.snapshotflow.com/mcp): screenshot, batch screenshot, pixel diff, page-to-Markdown and job status through a real hosted browser, OAuth with Google, 300 screenshots free. Probed live: HTTP 401 {"error":"missing_token"}. Held as a developer utility, the same screenshot and page-reading class carried by screenshotrun one day earlier.
• Monito (#5985, https://www.monito.dev/api/mcp): browser test scenarios, saved runs, step verdicts and evidence screenshots, with a verified check promoted into a saved scenario. Probed live: HTTP 401 {"jsonrpc":"2.0","error":{"code":-32001,"message":"Authentication required"}} with protected-resource metadata. Held as quality-assurance tooling.
• WHM MCP Server (#5984, local Node.js from hosthobbit/whm-mcp-server): account create, modify, suspend and terminate, server information and updates, SSL, backups, email accounts, domains and security on a WHM/cPanel host, authenticated with a WHM API token. Held as server administration, infrastructure rather than a business system of record.
• NaCzarter (#5990, https://naczarter.pl/api/mcp): keyless yacht, motorboat and houseboat charter search on the Masurian Lakes with exact date quotes, three tools and no booking action. Probed live: POST initialize returned 200 over SSE as naczarter-charter 2.0.0, read-only. Held as travel vertical data: the quote discipline is good and the surface is a consumer booking decision.
• AIPayGen Site Intel v2 (#5986): skipped as an update request to an existing mcp.so listing rather than a new server, in the pay-per-call website and company intelligence class already carried by SalCrate Oracle and the x402 holdings.

From the mcp.so feed, the eight cards posted after the night capture closed at 09:27Z:

• aicut (createdAt 2026-10-23T16:10:22Z, Media and Design): AI video, images, voiceovers and full story episodes rendered through Veo and Kling, then posted to TikTok, YouTube and Instagram. Held against the media generation class carried by Cliptude, Mage and Veo3 AI.
• vid-kraken (2026-10-23T15:34:46Z, Media and Design): YouTube download API in MP4 up to 4K or MP3 and AAC, clip cuts by start and end time, plus metadata, without yt-dlp or cookies. Held as a media utility.
• json2video (2026-10-23T10:51:47Z, Media and Design): template-driven video rendering with voiceovers, subtitles and images. Held as a media utility.
• hausverbot (2026-10-23T11:02:37Z, AI and Agents): BERGHAIN adversarial multi-agent stress testing. Held as agent infrastructure.
• TalkToHumans LinkedIn pair (linkedin-mcp-970122 at 2026-10-23T11:28:19Z and linkedin-mcp-85c25a at 2026-10-23T11:44:54Z): the same title, tagline and author listed twice eighteen minutes apart, one local and one remote. Held against the dense LinkedIn class already carried by AdPlug, EnvoAPI, LinkedIn Ghostwriter and LinkedIn MCP GTM, with the duplicate recorded as a directory behaviour rather than two products.
• Nexscope and Cliptude carried their night sweep dispositions, and every remaining card matched an earlier record.

Listing Verification

Re-checked live this cycle: mcpservers.org /servers/corpusiq-io still serves the listing (page title CorpusIQ MCP Server | Awesome MCP Servers), glama.ai/mcp/servers/CorpusIQ/corpusiq-docs returns HTTP 200, and mcp.so remains absent on all six slug forms probed (corpusiq, corpusiq-io, corpusiq-mcp, io.corpusiq, corpusiq-docs, the publisher handle form), unchanged since August. Smithery is listed: the registry search returned no body on the first call, and the detail route settled it, registry.smithery.ai/servers/@Cprusiq returning qualifiedName Cprusiq with displayName CorpusIQ, and the public page serving with the title CorpusIQ - MCP. PulseMCP's beta API is inside its published sunset window (the response returns API_SUNSET with a random-failure schedule), so it is not claimed this cycle; it was confirmed listed on the October 22 midday run.

Sweep Notes

• The window beat the feed again at a seven-hour gap. The two catalogued entries came one from the feed and one from the submission window, and the window carried nine issues against the feed's eight fresh cards, which is the same balance the night pass recorded.
• A directory card can be right about the product and wrong about the tool. 3Dsellers is listed on mcp.so as a local server with no tools detected, while the endpoint is hosted, requires a bearer token and publishes 150+ tools. The card was read as a card, not as evidence.
• Two vendors in one new class is a hold, not a double entry. Fluxmail Cloud and Oryah Mail arrived in the same window with the same governance pitch for the same mailboxes. One class, already carried by Secure Email, so both were held and the stronger argument recorded.
• Duplicate listings are a directory behaviour worth naming. The TalkToHumans LinkedIn server appeared twice with two slugs in eighteen minutes. It is not two products and it is not a catalog entry.

Catalog 978 to 980 servers (+858 to +860 guides).