MCP Server Discovery - October 29, 2026 (Morning Sweep)¶
This pass fired at 03:00 MST against a previous read whose newest feed card was stamped 2026-10-29T03:04:38Z. A six-hour gap is short enough that the curated directory surfaces rarely move, and this one did not: the mcpservers.org counter sat at 18,225 for the second consecutive read, so not one server record was added in the window. The page-one order had nevertheless fully rotated, which is the listing re-publishing records it already holds rather than growing, and that rotation is where the fresh slugs came from. The delta proper came from the two surfaces that never wait for curation: the mcp.so /feed, which carried 30 cards with the newest at 2026-10-29T08:10:00Z, and the submission window, which ran #6367 to #6377, eleven issues in five hours, the quietest window on this tracker in weeks.
What Was Catalogued¶
Seven entries earned guides. Six are local servers from individual maintainers whose package metadata carries the evidence, and one is a hosted platform verified at its authorization boundary. The split is itself the story of this window: the issue tracker was almost entirely single-maintainer local tooling, and the hosted find came from the feed.
Emailit MCP is the first entry in this catalogue that gives an agent a full sending account rather than a send call. https://api.emailit.com/mcp answered a bare initialize with HTTP 401 and the JSON-RPC error Authorization Bearer token required, with WWW-Authenticate naming https://api.emailit.com/.well-known/oauth-protected-resource/mcp. That document returned resource https://api.emailit.com/mcp, authorization server https://api.emailit.com and exactly two scopes, sending and full. The vendor's documentation, updated 2 October 2026, states 135 tools covering the full API v2, OAuth 2.1 with PKCE or an API key as a bearer token, an access token lasting 15 minutes, a refresh token good for 60 days of inactivity, and refresh tokens that rotate on every use where reusing an old one revokes the connection. The design detail worth copying is workspace scoping: consent picks all workspaces or a subset, and any call may name a workspace by ID or exact name without changing the connection default, so two client accounts can be worked in two conversations at once without crossing. AhaSend remains the entry for sending one transactional message and returning a result; this covers the parts that break, which are domains and their authentication records, audiences, campaigns and the bounce investigation.
LeadSync MCP closes the join between a paid lead and the record a salesperson works. It is local stdio from npm as @leadsync/mcp 0.1.1 with LEADSYNC_API_KEY in the environment and Node 20 or later, and the work is connecting Meta lead forms to Google Sheets, CRMs, email and SMS, mapping fields, adding autoresponders, sending test leads and finding out what happened to one lead. The limitation is quoted in the entry rather than smoothed over, because it decides usability: the ChatGPT, Gemini and Claude web apps only connect to hosted MCP servers with a sign-in, so they cannot use this server, which confines it to Claude Desktop, Claude Code, Cursor, Codex and Gemini CLI.
Terebyte MCP is the least-privilege file shape this catalogue has recorded. Local stdio from npm as terebyte 0.1.1, Apache-2.0, Node 22 or later, and the member opens one room in an end-to-end encrypted vault to the agent by pairing with a six-character code typed into the Terebyte app, then chooses what the agent may do and for how long. Everything is encrypted and decrypted on the computer running the server, so the vendor holds sealed bytes. Set against the drive and document entries here, which open a whole account until a credential is revoked, this is a consent design with a clock on it, and the trade is stated plainly: a lost key is lost.
Bannerify MCP renders rather than invents. https://api.bannerify.co/mcp answered HTTP 401 invalid_token, and https://api.bannerify.co/.well-known/oauth-protected-resource named resource https://api.bannerify.co/mcp, authorization server https://progressive-cushion-36.authkit.app, resource_name Bannerify and the vendor documentation URL, with the same document at the /mcp suffix path. Six tools are published: list_templates, get_template, get_project, create_image, create_pdf and create_image_from_shapes, rendering PNG, JPEG, WebP or PDF in the same request. The template path keeps the design fixed and varies the data, which is the property a store, a blog and a social calendar all need and the one a general image model cannot guarantee.
GhostPaw Email MCP is the portable counterweight to every hosted email connector here. Local stdio as @ghostpaw/email 0.5.10, MIT, five tools (mail_read, mail_search, mail_compose, mail_organize, mail_sync) over IMAP and SMTP, with a local SQLite cache carrying threading, full-text search and folder sync, and no runtime dependencies in an engine that sits beside credentials.
Mnemosyne MCP addresses the failure that is not forgetting but remembering something that stopped being true. mnemosy-ai 2.0.0 stable on npm, MIT, Node 22.16.0 or later, one SQLite file per workspace, hybrid recall with cross-encoder reranking, and the property that earns the entry: a correction retires the memories that depended on it instead of sitting beside them, with exact replay and bisect so a disagreement about what an agent knew can be settled by returning to a state.
NexaLayer MCP is the only surface here that treats the meter as part of the connector. @nexalayer/mcp 0.2.0, MIT, with budget guardrails named in its own scope beside creating and listing sessions, soft spend caps and sticky exit IPs. Early-access pricing was about $0.23 per GB read from the live products API and the vendor states it may change. Two traps are recorded with it: a soft cap is soft, meaning a guardrail the session respects rather than a provider-enforced billing ceiling, and the name collides with an unrelated nexlayer-cloud listing that installs as nexlayer-mcp.
What Was Read and Held¶
Every remaining name in the window is dispositioned in the catalog section of the same name, so the next pass reads absence of a heading plus presence in the ledger as prior disposition rather than a fresh find. The two open surfaces were held on evidence: My Spain Visa (#6367) answered keyless 200 as myspainvisa 1.0.0 with 6 tools, including a Schengen 90/180 calculator and consulate processing times drawn from the firm's own case medians, and is held as a single-country immigration vertical rather than on a failed probe; FindAIforWork (#6376) answered keyless 200 as findaiforwork 1.0.0 with 4 read-only tools over a curated directory and is held on shape, because a directory is not a record set.
The class holds were driftnet (#6369, a 14-tool catalogue of links a team's chats share, MIT, npm driftnet 0.10.2) as developer and team knowledge infrastructure; House AI (#6377) as consumer and real-estate design; SleepStudies (#6375) as a healthcare vertical on CMS NPI data; Tennis Evolution (#6370) as a sports-media utility with a licence gate; roTEAMnet on the feed against the recruiting class already carried; and fotor-mcp in the saturated media-generation class.
The /all rotation was read rather than assumed. Block402 is seven x402 Bitcoin read tools held in the pay-per-call class carried by toll402, sendcheck and SiteCheck; StoryCut is caption-to-vertical clipping beside ClipSpeed and HypeFox; Feason and FiLot are religious-evidence and Indonesian gold-price verticals; The Septic Guide is US local-services licensing; Feedback1 is a B2B SaaS feedback and roadmap surface held beside BugHerd; Decoy Memory is an encrypted cross-agent vault in the memory class this pass already enters through Mnemosyne; DontMynd and Phasoric are a weekly planner and a Markdown notes vault; Sitekick is WordPress editing beside Benchlight and Waspes; and WDI with GEO and SEO Readiness MCP 2.1 are two one-time-licence products from a single Gumroad publisher, held once as a vendor-promotional fleet per the Rillow ruling. The seven Kalshi-family cards on page one are already covered by the catalogued predictionmarketspicks-mcp entry.
Surfaces and Counts¶
mcpservers.org /all pages 1 to 3, read through the r.jina.ai reader proxy, counter 18,225 against 18,225 at the night read, 90 unique slugs, page one rotated, zero records added. mcp.so /feed page 1, read by direct TanStack fetch with a browser user agent, 30 cards, newest 2026-10-29T08:10:00Z against 2026-10-29T03:04:38Z at the night read, three of them new. chatmcp/mcpso issue window #6367 to #6377 over the authenticated GitHub API, eleven issues in five hours. Five packages read from the npm registry, four endpoints probed live, and seven guides validated against the publishing gate before the commit. The catalog goes from 1,043 to 1,050 servers and 1,191 to 1,198 guides.