MCP Server Discovery - October 24, 2026 (Midday Sweep)

Six hours after the night capture, and the directory was flat. mcpservers.org still counted 17,243 servers, so /all pages 1 to 3 returned 86 unique slugs and every one of them carried a prior disposition. The feed served four cards past the night capture, two of which the night pass had already read. The submission window advanced fourteen issues.

One entry cleared the bar, and it is the first surface in this catalog where a music catalog, its pitches, its licenses and its royalty statements sit behind one server.

New Servers Catalogued

Server	Category	What it does
DropCue MCP	Media	Music catalog and rights operations for composers, producers, publishers and sync agencies, over one local stdio server that talks to https://dropcue.app/api/v1. The kit is published publicly at https://dropcue.app/kit/dropcue-kit.tar.gz and was downloaded, installed and driven in this sweep: initialize returned serverInfo dropcue 0.19.1 on protocol 2025-06-18 with the tools capability and listChanged, and tools/list returned 105 tools, the same count the kit's own version.json declares, with the API routes behind each documented in its openapi.yaml (4,057 lines). The business record set: search_tracks with bulk update_track_metadata and nest_versions, preview_upload and replace_audio that show a plan first and keep the previous master for 30 days, the pitch pipeline through list_pitches, log_follow_up and create_pitch, tracked share links where add_share_recipient gives each supervisor a ?r= link and their plays show under their name, the License Tracker through list_licenses, add_license, license_statuses, attach_license_file and agreements with delivery checklists, the Royalty Tracker through import_royalty_statement (a PRO or publisher CSV up to 4 MB and 50,000 lines, dry run first, unknown layouts returned with their column headers so the user names the title and amount columns) and royalty_summary (totals by PRO, network, show, usage, society and territory, with top and bottom earning tracks), report_summary setting opens, plays, listeners and downloads against the same number of days before, and whats_next deriving overdue, soon, waiting and no-date attention items from the records themselves while stating that plays and downloads never appear there. Safety enforced in the tool surface rather than promised in prose: nothing among the 105 deletes a track, playlist, contact or company (removal archives), there is no send tool at all, writers, publishers and ISRCs are never changed with fill_track_credits filling empty fields only, the only delete is an unpublished portfolio draft, and the two public actions, a share link and a portfolio publish, stop for the user's confirmation. Auth is a personal API key read from DROPCUE_API_TOKEN or the macOS Keychain item dropcue-api-token, never written into a result, an error or a log line. Priced as paid DropCue Studio from $29 a month billed annually with the API and the assistant connection included and trials excluded, video intake on Pro or higher, make_stems at one stem credit a run and unavailable on Starter and Artist. Gap named rather than claimed: no tool that reaches the API was called, because every one needs a paid account with a personal key this sweep does not create; the entry rests on the published kit, its real tools/list, its OpenAPI spec, the vendor's docs and pricing, and the vendor's dated September 28, 2026 comparison that puts DISCO's API on Enterprise only and says ReelCrafter lists no API. No official registry entry exists: a registry.modelcontextprotocol.io search for dropcue returned zero servers on October 24, 2026.

Candidates Read and Held

uplads (#6026, https://uplads.com/api/mcp, official registry com.uplads/uplads 1.0.0 active since 2026-10-24T10:49:22Z) is the strongest hold of the cycle and the closest call. Probed live: unauthenticated POST initialize returned HTTP 401 naming resource_metadata at https://uplads.com/.well-known/oauth-protected-resource, which returns HTTP 200 with resource https://uplads.com/api/mcp, authorization server https://uplads.com, scope mcp and header bearer. One connector spans Meta, Google Ads, TikTok, Snapchat and LinkedIn, imports creatives from Dropbox and Google Drive, reads a Brand Context and copy templates before writing, creates campaigns paused, stages launches in its own launcher for the operator to press, and applies a per-workspace switch plus a cross-network daily spend ceiling to everything assistants put live, with an audit log marking every MCP-origin change. Held as class-covered, and the reason is worth recording: PaidSync already names Google, Microsoft, Meta, LinkedIn, ChatGPT, TikTok, Snapchat, Reddit, Pinterest and X as its ad platforms, Markifact carries the approval-gated Google and Meta pair, Meta Ads MCP (Official) holds the first-party surface and Adrails the revenue-reconciled slice. The one capability with no counterpart here is the cross-network daily ceiling that sums spend across every network and every call, and it is recorded for a spend-control section if the catalog ever opens one.

From the submission window #6026 through #6039, fourteen issues in about eight hours:

• subimpact data-mcp (#6029, 19 public-data tools on npm, each running a pay-per-result Apify actor on the operator's own token with a _maxChargeUsd default of $0.50): Google SERP with AI Overviews and AI Mode, Google Maps, Jobs and Trends, Ads Transparency, Southeast Asia news, ATS boards and more. Held in the Apify-actor class per the Metqo ruling, and its AI-visibility tools sit inside a class this catalog already saturates.
• hangel (#6031, keyless stateless https://hangel.org/api/mcp, registry org.hangel/hangel, ten read tools): Turkish NGOs with transparency scores, volunteering, open grant calls and donation-linked stores. Held as single-country civic data with no business system of record behind it.
• The Margin (#6037, com.themarginapp/the-margin, 459 workspace-scoped tools): boards, notes, family calendar, chores, meal plans and household budgets. Held as household planning, the class carried by Weeklane.
• Postkey (#6034, https://postkey.pro/mcp, registry pro.postkey/postkey): Instagram comment-to-DM automation and cross-network scheduling behind an approvals queue. Held against the social publishing class carried by UniPost and ViewsBase.
• Deyaho Phone Calls (#6030, com.deyaho/phone-calls): outbound AI voice calls to Mexico and Spain at $0.19 a connected minute with transcript and collected data. Held in the voice-telephony class carried by KaiCalls and DialNexa.
• GhostPaw Codex (#6032, local stdio, registry io.github.GhostPawJS/codex): agent memory stored as claims with source, certainty, evidence count, decay and revision history in one SQLite file. Held beside Aletheia and Varyz in the agent-memory class, the strongest idea in the window after DropCue.
• CVEmber (#6033, com.cvember/cvember): resume tailoring, scoring against a job description and PDF export. Held as a consumer job-search utility under the job-board ruling.
• Axiom Lab (#6035, online.axiomlab/azimo): PDF and PPTX decks to commercial video. Held against the dense media-generation class.
• The Agent Commons (#6038, keyless https://ai.affix-io.com/mcp, registry com.affix-io/agent-commons): a public message board where agents read and post. Held as agent-community novelty per the agent.social precedent.
• AstralRead (#6027, keyless https://astralread.com/mcp): natal charts, transits and Vedic calculations. Held as consumer novelty.
• Agent Bounty Feed (#6028, io.github.dailydollar-bot/agent-bounty-feed): funded bounties aggregated from agent bounty boards with payout evidence. Held inside the agent-labour class carried by ACTN.
• melb.si data (#6039, keyless https://data.melb.si/mcp, registry si.melb/data): Melbourne and Victoria civic facts with source links. Held as regional reference data.

From the feed, the two cards posted after the night capture closed: Guarddog (guarddog-mcp, createdAt 2026-10-24T15:35:17Z, verified and featured, https://github.com/Guarddog-top/mcp-server-guarddog) is 23ms on-chain token safety and honeypot detection returning PASS, WARN or BITE, held in the crypto class carried by CryptoKeyhole and token-verdict. Watchcron (watchcron-mcp, createdAt 2026-10-24T16:08:41Z, https://watchcron.com/docs/api) is cron and heartbeat monitoring for developers with monitors managed from any MCP client, held as developer observability infrastructure. The other two cards in the window, Total CMS and Tradetron, had been read and held by the night pass.

Source Behaviour Worth Recording

The directory count did not move between the night capture at 10:01Z and this pass at 13:22Z: 17,243 servers both times, while the /all pages served 86 unique slugs against the night pass's 87. A flat count with a shifting page is the ordinary churn of one card entering as another leaves, and it is the reason a same-day repeat sweep treats /all as a cross-check rather than a discovery lane. The productive lane at this gap was the submission window, which carried every one of the fourteen candidates.

The second thing worth recording is a source that resolves a candidate without an account. DropCue publishes its entire MCP kit as a tarball, so a local server that has no hosted endpoint to probe can still be read at tools/list and counted against the vendor's own declared total. That is a stronger evidence tier than a documentation read and a fairer one than a hold on the grounds that nothing could be probed.

Method

Sources: mcpservers.org /all pages 1 to 3 through the reader proxy (86 unique slugs, reader stamp Sat 24 Oct 2026 13:22:04 GMT), mcp.so /feed page 1 with a browser user agent (28 unique createdAt values, newest 2026-10-24T16:08:41.930Z), chatmcp/mcpso issues #6026 to #6039 with full bodies, the public DropCue kit downloaded, installed and driven over stdio at initialize and tools/list, the vendor docs and pricing page, the official MCP registry API for both uplads and dropcue, and live JSON-RPC and RFC 9728 probes on two endpoints plus detail reads on two feed cards.

Listing re-verification: mcpservers.org serving the CorpusIQ listing at /servers/corpusiq-io, Smithery returning Cprusiq with unlisted false, mcp.so absent on all four slug forms, and Glama LISTED: the server route https://glama.ai/mcp/servers/io.corpusiq%2Fmulti-source-mcp returned HTTP 200 with the CorpusIQ title, while the @CorpusIQ/ handle form 404s on every variant, so the earlier 404 reading was a wrong URL shape and not a delisting