MCP Server Discovery - October 25, 2026 (Midday Supplement)

Fifty minutes separate this pass from the midday read, and neither surface moved in that gap. mcpservers.org served 17,360 at both captures, and mcp.so page one still carried thirty cards with the newest at 2026-10-25T13:50:07Z, both of which the midday pass had already dispositioned. At a gap that short the listing work is repetition, so this pass went where a delta that small actually lands: the six submissions filed after #6104, read in full rather than by title.

One of them answers without a key, which makes it the rarest kind of find on this beat: a server that can be judged by driving it rather than by quoting its submission.

New Servers Catalogued

Server	Category	What it does
RevClamp MCP	Finance / Revenue Operations	Nine deterministic tools over the money that fails to arrive. An unauthenticated initialize on https://api.revclamp.com/api/mcp returned HTTP 200 as revclamp-mcp 1.20.6 on protocol 2025-06-18 and tools/list returned nine tools, every response labelled mode: stateless_sandbox with tenantId: null. Seven were executed with real arguments in this sweep. A 250,000 cent wholesale order paid at 75,000 on Net-30 returned state: DEPOSIT_CLEARED_ACTIVE, requiredDepositCents: 75000, remainingBalanceCents: 175000, fulfillmentHold: false, releaseHoldAction: true and the tag b2b_net_terms:deposit_cleared. A dispute evidence payload returned utf16CodeUnits: 19113 against maxUtf16Ceiling: 18000 and overallVerdict: FAIL_UTF16_OVERFLOW while the Visa CE 3.0 rubric passed with priorMatchedCount: 2, hasIpMatch: true and hasDeviceMatch: true, which is the failure that voids an otherwise perfect answer because a field was measured in the wrong unit. A Stripe style HMAC from a test secret returned signatureValid: true, timingSafeCompared: true, a 300 second tolerance and withinReplayWindow: true, and the same payload with a wrong v1 returned HMAC_SIGNATURE_MISMATCH. The replay simulator dropped two copies of an event outside the 72 hour horizon and reported naiveHandlerBug: APPLIED_EXPIRED_REPLAY_OUTSIDE_72H_WINDOW with naiveFinalTier: growth_59, naming the paid tier a naive webhook handler would have granted from a stale event. GR123456789 normalised to EL123456789 and returned FORMAT_VALID_UNVERIFIED with zeroRateAllowed: false and reverseChargeReason: LOCAL_FORMAT_CHECK_ONLY_NO_LIVE_VIES_CONSULTATION, which is a format check refusing to authorise a zero rate. A subscription 40 days past its failed invoice returned isGhostLeak: true with UNPAID_GHOST_USAGE_CONFIRMED. One guard is a finding in itself: an argument that looks like a live secret is refused with JSON-RPC -32602 LIVE_SECRET_FORBIDDEN_IN_SANDBOX, so a production webhook secret cannot be passed through a chat. Limitations recorded rather than smoothed over: it is not a Stripe connector, since tools take billing objects as arguments or read telemetry forwarded to POST /v1/events/ingest, and nothing lists customers, invoices or revenue; stage_stripe_dispute_ce3 was not called because it needs a live dispute shape across four nested objects, and its staging is submit: false by design with no external mutation; every VIES mode except LIVE is a deterministic simulation, kept so an operator can rehearse the HTTP 200 soft failure the Commission's service actually produces; there is no OAuth, as /.well-known/oauth-protected-resource on the API host returns 404, so the connection is a workspace key in the client config; and scope is B2B net terms in euro cents. Free tier $0 with 5,000 events per month and all nine tools, then $19, $59 and $199 at 100,000, 1,000,000 and 5,000,000 events, flat rate against the 25 to 30 percent contingency a chargeback agency charges. Catalogued for three records nothing else here measures: unpaid usage on a subscription that is still live, dispute evidence against the network rubric rather than an opinion, and a wholesale order against its deposit gate.

Candidates Read and Held

The six submissions filed after the midday cutoff were read in full, and five were held on class rather than on quality.

• dbmole-mcp (#6105) and esmole-mcp (#6106), both from the same publisher: PostgreSQL and MySQL, or Elasticsearch 7.x and 8.x, where the agent adds and edits its own connections at runtime, with a per-project connection file that hot reloads, SSH tunnels with host key checks, readonly sessions enforced by the database itself, and a 40 KB result budget. Held in the database access class already carried by WoWSQL and the AI2SQL and AI for Database dispositions, and recorded as the cleanest implementation of agent managed connections seen on this beat, which is the thing to revisit if that class ever thins.
• PLCWare TIA Openness (#6107): 158 tools, 62 read only, over Siemens TIA Portal V21 through TIA Openness, with downloads gated on an explicit human approval of the generated plan and safety logic kept as a human decision. Held as industrial engineering tooling, because it is a thin client of a Windows desktop app that has to sit on the same machine as the portal licence, which puts it outside what an operator's hosted assistant can reach.
• 3ilm-mcp (#6108): 1,032 findings from ten smart contract audit contests reconciled against the outcomes, in 12 pattern categories with accepted and rejected examples, keyless and MIT. Held as developer security reference data.
• Shootika (#6109): 14 tools over OAuth 2.1 that list a store's products, request an on-model shoot, return frames, and publish only what an operator approves. Held inside the media generation class that held Vadyu, Axiom Lab, Seedance3 and agent-media this month.

On the listing side, page one still carried 29 cards and every one resolved this pass. BookHotels Direct (https://bookhotels.direct/mcp, keyless, reads a hotel's own booking site and compares it like for like against Booking.com, saying so when Booking is cheaper) is the one name no catalog file, sweep report or ledger entry held, held here as consumer travel price comparison per the SlickTrip and Chucho Book Direct dispositions. GSC Magic carries its night sweep hold as Search Console, Bing Webmaster Tools and GA4 behind one hosted URL against the SEO class. LFG Atlas is a free gaming group directory for bots and overlays, held as consumer. Stride, a backlog server that reads and writes real stories and sprints for Claude Code, held as developer tooling beside the KanbanMCP disposition. coolsapiens, getremcp, shbernal and leemysw returned 404 detail pages through the reader proxy, which is the sitemap fresh but not live class rather than a finding, and the rest of the page carried prior dispositions.

Directory Behaviour

The counter did not move inside the hour: 17,360 at both captures. The feed did not move either, with the newest card still 2026-10-25T13:50:07Z, and its two post-night entries, licensed interstate moving quotes and screenshot to vertical UGC video ads, were already held at midday. That is the useful signal from a short gap: when both surfaces are still, the submission window is the only place a delta can appear, and it produced six issues in fifty minutes, which is a faster rate than the listing.

Listing re-verification of our own surfaces was not part of this pass. The midday pass verified all five, and none of them changes inside an hour.

Catalog 988 to 989 servers (+1,136 to +1,137 guides). Sources: mcpservers.org /all page 1 through the r.jina.ai reader proxy (29 cards against 17,360 servers at the 18:00Z capture), mcp.so /feed page 1 with a browser user agent (30 cards, newest 2026-10-25T13:50:07Z), the chatmcp/mcpso issue window #6105 to #6110 with full bodies over the authenticated GitHub API, the vendor manifest at https://revclamp.com/.well-known/mcp.json, the official MCP registry entry io.github.revclamp/revclamp-mcp, the vendor pricing and onboarding pages, and a keyless MCP session on https://api.revclamp.com/api/mcp with initialize, tools/list and seven tools/call executions.