MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

DiscoveryServer directory

Remote MCP servers

Find a server for your workflow, with connection evidence you can inspect.

Connect your agent

1497 servers

Ordered by checks passedClear filters
Dated server measurements. The status describes the last probe or a listed authentication requirement. Checks that have not been measured are not failures. Open a server to inspect the evidence.
Server / capabilityLast probeMedian latencyChecks passedLast checked
app.agendaforge/docs

Search and fetch AgendaForge public documentation and marketing content. No authentication needed.

Marketing & SalesFile & docs

Outdated check69 ms13 / 22
decoy.day honeypot

A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

Developer ToolsCode & DevOps

Outdated check71 ms13 / 22
HolicAudit website checks

Free SEO, AI visibility (AI crawlers, llms.txt, JSON-LD) and security-header checks for any URL.

Marketing & SalesBrowser & web scraping

Outdated check72 ms13 / 22
ADF: Tenders, Sanctions, Recalls, CVE, Law, Case Law, Tariffs, Rates, Bond Yields, Energy Prices

33 official datasets: tenders, sanctions, recalls, CVE, law, tariffs, rates, yields, energy prices

LegalKnowledge & memory

Outdated check73 ms13 / 22
LunaTerminal

Planning calculators and market data for financial advisors: Roth, RMD, Social Security, 13F.

Finance & CryptoData access / search

Outdated check74 ms13 / 22
Kevscope CVE Check

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

SecurityAI / LLM tooling

Outdated check76 ms13 / 22
io.github.Goatincrypto/aegis-x402-mcp

On-chain token security, honeypot simulation, KYA wallet trust, and x402 PreFlight audits on Base.

Finance & CryptoPayments & trading

Outdated check77 ms13 / 22
ClevSec EU compliance tools

Deterministic, sourced EU compliance checks: NIS2, DORA, GDPR, Cyber Resilience Act and AI Act.

LegalKnowledge & memory

Outdated check78 ms13 / 22
com.validoria/validoria-mcp

Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility.

Marketing & SalesData access / search

Outdated check87 ms13 / 22
AEO Inspector

AEO scan, 16-engine AI report and one-domain security + AEO report with fixes (x402 USDC).

Finance & CryptoPayments & trading

Outdated check88 ms13 / 22
Front Sentinel

Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls

Developer ToolsCode & DevOps

Outdated check91 ms13 / 22
Mail Security Tools

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

Finance & CryptoPayments & trading

Outdated check92 ms13 / 22
LaunchTrust

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

OtherOther

Outdated check94 ms13 / 22
adfraudit – Klickbetrug / Click Fraud

Wissen zu Klickbetrug, Anbieter-Vergleich und kostenloses Audit von adfraudit.com

Developer ToolsCode & DevOps

Outdated check99 ms13 / 22
io.github.Abracadabrastartup/deusproof-mcp

Identity for AI agents that arrive on their own: a certificate of birth, number and date. Free.

Developer ToolsCode & DevOps

Outdated check100 ms13 / 22
HODLXXI Read-Only

Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.

Developer ToolsCode & DevOps

Outdated check103 ms13 / 22
Dragons Eye Ransomware Claims

Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC).

Finance & CryptoPayments & trading

Outdated check103 ms13 / 22
ShipLatch

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

OtherOther

Outdated check105 ms13 / 22
TheAIMeters

Read-only AI impact metrics with search, methodology and cited sources. No authentication required.

Data & AnalyticsData access / search

Outdated check112 ms13 / 22
io.github.rezearcher/tech-risk

MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/LLM08), x402-payable

Developer ToolsCode & DevOps

Outdated check115 ms13 / 22
Quiet Failures

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.

OtherOther

Outdated check121 ms13 / 22
GlanceDesk

Checked calculators for money, tax, crypto, engineering and compliance, each with formula and source

Finance & CryptoPayments & trading

Outdated check121 ms13 / 22
pwned.coffee

Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks.

OtherOther

Outdated check122 ms13 / 22
the drain

Plain-text security bulletin board for AI agents: read, search, post, reply. No auth to read.

Developer ToolsData access / search

Outdated check130 ms13 / 22

Automated measurements. Not a rating. Unmeasured checks are not failures. How to read the evidence