MCP Server Discovery - October 24, 2026 (Late Sweep)¶
Ten hours after the midday supplement, and the directory counter had not moved: mcpservers.org still read 17,243 servers. The listing body underneath it had moved a great deal, because the burst that took the directory from 16,715 to 17,243 happened inside October 24, and a fresh sitemap pull put 563 URLs into the schedule that the day's earlier captures did not carry. So this pass read wide rather than deep: /all pages 1 to 20, 600 cards in all, against 363 unique server pages.
Four entries clear the bar, and the first of them was driven end to end.
New Servers Catalogued¶
| Server | Category | What it does |
|---|---|---|
| Tariff Monitor MCP | Business Operations | The live npm package tariffmonitor-mcp 1.3.0 (MIT, io.github.daleweaver1981/tariffmonitor-mcp 1.3.0 active) was installed and spoken to over stdio: initialize returned serverInfo tariffmonitor 1.3.0 on protocol 2025-06-18 with the tools capability, and tools/list returned three tools, lookup_hts_code, calculate_tariff and compare_origins, over a 19,856 line HTS schedule. Three real calls: lookup_hts_code on "athletic footwear" reported that no description contains the whole phrase and searched "footwear" instead, returning 12 lines from 6812801000 to 6402993135; calculate_tariff on 6404112030 from China at 800,000 dollars a year returned MFN base 10.5 percent plus Section 301 China List 4A (heading 9903.88.15) 7.5 percent plus the 2026 Section 301 forced-labor tariff 12.5 percent for 30.50 percent and 244,000 dollars of annual duty, with the Federal Register documents named and the China exclusion end date of 9 November 2026 stated; compare_origins on the same line returned Mexico 20.50 percent (forced-labor layer 10 percent, heading 9903.05.55), India 20.50 percent (9903.05.44), Vietnam 23.00 percent (9903.05.84), Thailand 23.00 percent (9903.05.77) and China 30.50 percent, with the USMCA assumption spelled out under U.S. note 52(h) and 9903.05.94. Free, no key, upstream at https://adcreator-ai.com/api/tem, and the package also serves the same tools over HTTPS from src/http.js so a team can run one instance. The one warning worth carrying: the generated explanation paragraph misread 6404112030 as men's clothing while the structured rate stack was correct. |
| Mighty Accounting MCP | Finance | The books of a UK limited company behind https://api.mightyaccounting.com/mcp, probed live: unauthenticated POST initialize returned HTTP 401, so the endpoint exists and is key-gated, with an organisation API key created in the app. 26 documented tools over the owner's dashboard (bank balance, net profit, corporation tax, VAT liability, dividends available, invoices outstanding), profit and loss, balance sheet and trial balance with prior-period comparatives, sales invoices, uncategorised bank transactions and their match candidates, the Post Box receipt scan, and HMRC-rate mileage with a distance lookup. The boundary is in the tool surface rather than in prose: bank categorisations are saved as drafts and never approved, a Post Box document becomes an expense the owner finalises or a receipt attached to a payment, mileage is the one write that posts immediately because Mighty has no draft claim, records are labelled AI-created, and the assistant cannot move money, approve a categorisation or send anything to HMRC. Priced as the service it is: 60 GBP plus VAT a month billed annually or 70 GBP plus VAT monthly, with a registered address at 10 GBP plus VAT a month and additional non-spouse payroll at 5 GBP plus VAT each. No official registry entry exists for Mighty Accounting. |
| Vanthal MCP | Business Operations | A Latin American small business as one record set at https://vanthal.com/api/mcp, probed live: POST initialize returned HTTP 401 with the server saying in Spanish that the connection is not authorised and that a key must be sent as a bearer credential. Registry entry com.vanthal/vanthal 1.1.0 active since 2026-10-19. 34 documented tools, 24 read and 10 write: today's income with money owed and products to restock, sales by product or seller, the current cash register shift, variant stock, customer accounts, records with history and comments, appointments with free slots, team tasks, goals, absence and workload, weekly or monthly reports, shipment tracking with a carrier quote that books nothing, Argentina e-invoicing status read only, and Lumi as a scoped catch-all. Writes cover counter sales that decrease stock and add income to the till or the account, records, comments, tasks, appointments, events and notes, and stop well short of expenses, cash withdrawals, card charges, invoices, pipeline stage changes and Finance, HR, Legal or Management records. OAuth gives the owner a read-only or read-and-write choice at connect time, every key is capped at 300 calls a day, every write lands in an activity log with undo, and pricing runs at US 19, 49 or 99 a month by Lumi message volume with modules and users uncounted. |
| EU AI Act Explorer MCP | Compliance | The amended AI Act as nine keyless tools at https://mcp.euaiactlaw.com/mcp, driven live: initialize returned serverInfo eu-ai-act-explorer 1.0.0 on protocol 2025-03-26 with an instruction block limiting it to a read-only reference that cites the Official Journal and is not legal advice, and tools/list returned get_article, get_recital, get_annex, get_definition, search_text, get_obligations, get_deadlines, assess_compliance and send_feedback. Two real calls: get_deadlines returned the amended timeline as of 2026-10-25, Chapters I and II in force from 2 February 2025, notified bodies and general-purpose AI from 2 August 2025, Articles 102 to 110 from 27 July 2026, the new Article 5(1)(ba) to (bb) prohibitions and the Article 50(2) deadline for pre-existing systems from 2 December 2026, Annex III high-risk duties from 2 December 2027 and Annex I duties from 2 August 2028; get_obligations for deployer returned a numbered list with an article link on every line, Article 4 AI literacy from 2 February 2025 with current wording from 27 July 2026, Article 5 with points (ba) to (bb) from 2 December 2026, and Article 26(1), (2), (4) and (5) from 2 December 2027 or 2 August 2028. The class is not empty: the registry also carries com.eurogpsr/eu-ai-act 1.1.0, dk.powerquant/eu-ai-act and CSOAI at 1.8.15, and a September submission called EU AI Act Compliance was held as thin documentation, so this entry rests on the enumerated tool surface and the citations rather than on novelty of topic. |
Candidates Read and Held¶
The mcp.so feed (30 cards, 28 unique, eight posted after the 16:08Z card this day's passes had already read). OdileM2M (agents reach a business by its phone number, leave a message, check hours or book a slot, 50 free tasks a month) held in the voice and telephony class carried by KaiCalls, DialNexa and the Deyaho hold. Leviathan Systems Public Content (anonymous read-only search of published GPU deployment and cabling resources) held as a vendor marketing surface, the site-published content shell precedent. AwardTape (US defense and homeland security contract awards since FY2024 plus daily Pentagon announcements, 0.02 dollars a call) held against the federal contracting class, which the catalog already carries through the 1102tools family of acquisition-gov, usaspending-gov, sam-gov and federal-register servers, with Otnox covering tenders. cp0x MCP (referral deals, trading races, DeFi geo-restriction monitoring) in the crypto class. CardNexus, a one-line listing whose entire description is "a remote MCP server available at" a host, held as a thin listing with no readable tool surface. Pugi (a product team that builds sites plus a passive security grade from A+ to F) held as web security scanning beside ShipLatch and MacroCyber. Convertlyft (website analytics with per-visit counts and to-dos) against the saturated SEO and analytics class carried by DrUrls, squirrelscan, seomatic and AnotherSEOGuru. Candor Finance (a consumer finance app over real bank, card and loan accounts) as consumer personal finance, the class the avenir-mcp household budgeting hold set on the night pass.
mcpservers.org /all pages 1 to 20 (600 cards, 363 unique server pages). The SiteCheck family (Trade and Energy, Jobs and Property, Shop and Social, Health and Travel, Agent Intel, Company Records, 112 to 135 pay-per-call x402 tools each, 9 servers and 1,194 tools in total) carries a prior disposition from October and stands: x402 pay-per-call utilities per the Bilbop and Plumb rulings. ServiceNow MCP (ivanbbaev/servicenow-mcp-ai, 100 tools in 28 packages with plan-and-apply write safety) is a second implementation of a source the catalog already carries as ServiceNow MCP with 65 tools, and is held on that ground rather than on class. FMEPM Connect for Oracle EPM is the closest hold of the cycle: Oracle Fusion ERP is already carried by the datagrout Oracle MCP at 1,000+ tools, and EPM contributes the planning, budgeting and consolidation slice that Fusion's transactional surface does not, so it is recorded as the one capability to revisit if a planning section ever opens. 321label (real GLS, PostNord, DHL, UPS and Royal Mail labels in five European countries) held against ProShip, which carries label creation and carrier tracking. DirectMailAmerica (letters, Certified Mail and postcards) held against MailStream, which carries physical mail. Manuall (field service scheduling, jobs, equipment, estimates and invoices) held against ATLASS OS, which carries trades scheduling and jobs with double-entry books. Beancount.io (hosted plain-text ledgers with BQL, reports and bank imports) held as accounting for a developer audience, the carried ledgers being QuickBooks, Caribooks, Oracle and ATLASS. ConnectMyShop (Etsy listings, competitor and keyword research with an approval step) held against 3Dsellers, which names Etsy among six marketplaces. AdSparky (Google Ads, Meta Ads, GA4, GTM and Merchant Center across clients with preview, approval and one-step undo) and AdCopilot (Google Ads, GA4, Search Console and Tag Manager with proposed changes) held against PaidSync, Markifact, Meta Ads MCP (Official), Adrails and the uplads hold, the multi-client undo step noted as the one differentiator. The AI visibility cluster was dense again: geoseo-mcp, Promvia, Gensiv, Rankwise, Rillow, WebSEOTrends, sitebuilder-adcreator and ozhehkovski's self-hosted Search Console into ClickHouse all held in the saturated class per the geolint, LogNorm and Onsomble rulings. Bumblebox (mailbox triage over Gmail, Outlook and IMAP with reply preparation) held in the inbox class carried by Ficiel, Mailroom and Kaption. Rowsend, Signal by StackEnhance (competitor send-frequency across 800+ Nordic and German ecommerce brands), Eachspy, Adsparo, Eyepatch and ShortsIntel held in the outreach and ad-intelligence classes. Twelvebit, Pulsepanda and Lomen Analytics held in the analytics class carried by PostHog and Muvia BI. Karma Compass (a nonprofit board's decisions and open items) held as nonprofit governance with no operating business behind it, recorded as the one to revisit if a governance section opens. DocTable OCR (documents to JSON, Excel, Word, CSV, QBO or Xero with an arithmetic audit) held in the document-utility class per Docspeed and RelayPDF. EstimateKit (good, better, best quotes from a price book, already in the Claude and ChatGPT directories) held against ATLASS OS for quoting and field work. Africa Compliance Data (public holidays, business days, VAT, withholding tax, treaties, tax ID formats and filing deadlines for 54 countries) held as regional reference data per the regional company-data rule set by the OpenBase and Corporary dispositions, with the tax-treaty and filing-deadline slice named as the closest thing to a cross-border compliance surface yet seen. aVenture (private companies, founders, funding rounds with sources) held against the company intelligence class carried by Synorb, FinzData, SimilarLabs and Velarion. B2match (unofficial event matchmaking over an undocumented GraphQL API) held as event tooling built on a private interface. itsmyship (New Zealand working-day maths with the statute cited, plus IRD and ABN checks) held as single-country compliance utility. DocTable, Tariff and the rest of the fresh cohort that did not reach the bar resolved to developer, consumer, regional and single-purpose verticals already carried.
The canonical window r140 to r141. The sitemap union moved from 16,680 to 17,209 URLs, 563 additions against 34 removals, while the directory's own counter stayed at 17,243. That gap is the reason this pass read twenty listing pages instead of three: the burst that produced those additions is the same burst the day's earlier sweeps were reading three pages at a time, and 386 of the additions matched nothing in the catalog, the sweep reports or the last-sweep ledger by the normalised slug rule. Reading them as cards, rather than judging them by slug, is what produced the tariff, Vanthal and AI Act entries.
Source Behaviour Worth Recording¶
At a ten hour gap the counter is not the signal. Seventeen thousand two hundred and forty three at the night capture, the same number at midday, the same number at the supplement, and the same number again ten hours later, while the sitemap body gained 563 URLs across the day and /all served a cohort no earlier pass had seen. A flat counter plus a moving list is the ordinary churn of removals offsetting additions, and it is the reason a late pass should read pages, not counts.
Catalog 985 to 989 servers (+865 to +869 guides). Sources: mcpservers.org /all pages 1 to 20 via r.jina.ai, the mcpservers.org sitemap index and nine server sitemaps pulled fresh for r141, mcp.so /feed page 1 with a browser user agent (30 cards, 28 unique, newest watchcron-mcp at 2026-10-24T16:08:41.930Z), the official MCP registry search API for tariffmonitor, vanthal, mighty and eu-ai-act, the npm registry for tariffmonitor-mcp 1.3.0, the package source read locally, live JSON-RPC with initialize, tools/list and tool calls on three endpoints, and the vendor documentation and pricing pages for Mighty, Vanthal, tariffmonitor and the AI Act explorer.