The State of MCP Servers: what 3,646 tools across 300 servers actually tell us
I pulled every tool from every server we track and counted. The ecosystem is younger, more local, and less differentiated than the launch posts imply.
Everyone has an opinion about where the Model Context Protocol is going. Almost nobody has counted what's actually shipped. So I did.
This is based on the full dataset behind this directory: 300 servers, 3,646 individual tools — the real name and description of every capability each server exposes, not marketing copy. Here's what the numbers say, and what I think they mean.
MCP is still overwhelmingly local
90% of servers run locally over stdio. Only 8% are HTTP and a rounding-error 2% are SSE. If you read the conference talks, you'd think remote, hosted MCP was the present. It isn't — it's the future the ecosystem keeps talking itself into.
That matters because local-first is a feature, not a limitation. A stdio server runs on your machine, sees your filesystem, uses your already-authenticated CLIs, and sends nothing to a third party. The push to "remote everything" trades that away for convenience. Some of that trade is worth it (sharing, scaling). A lot of it isn't, and the data suggests builders quietly agree.
The "ecosystem" is really a CRUD layer
Count the verbs in those 3,646 tool names and the long tail collapses fast: get (525), list (250), create (149), search (117), delete (70), update (40). The overwhelming majority of MCP tools are thin CRUD wrappers over an existing API.
This is not a criticism — it's the correct first move. But it means the differentiation between two servers for the same product is usually not "what can it do." It's the boring stuff: which transport, what auth, whether writes are guarded, and whether it's still maintained. That's exactly the metadata most directories don't surface, and it's why "best X mcp server" is a harder question than it looks.
Tools-per-server is small — until you stack them
The median server exposes 10 tools; the average is 12.2. But the spread is wide: the most tool-heavy single server ships 94, and 12 servers expose more than 40 tools on their own.
That sounds comfortable until you remember nobody runs one server. Install five average servers and you're at ~61 active tools — well past the point where Cursor's selection starts to degrade, and a single 94-tool server blows the budget by itself. The tool budget is a portfolio problem, not a per-server one, and almost no tooling treats it that way. (We built a Config Doctor precisely because of this number.)
"Official" is winning, but not the way you'd guess
Under half the servers we track (40%) are genuinely first-party — built by the vendor whose product they wrap (Stripe, GitHub, Atlassian, Linear, Cloudflare and the like). We count "official" strictly: the repo has to belong to the vendor itself, not merely carry their product's name. By that bar, the majority of MCP servers are community or third-party builds wrapping someone else's service — which makes "is this the official one?" a question worth asking, not assuming.
The naive read is "always use the official one." The real read is more interesting: official servers win on auth and maintenance, not on capability. A community server is often just as capable and sometimes more focused. Where the vendor server pulls ahead is the unglamorous half — OAuth done right, kept current, security reviewed. When you pick official, that's what you're actually buying.
What I'd watch next
- Auth is the real battleground. 47% of servers need nothing, 43% want an API key, and only 10% use OAuth. As MCP moves toward agents acting on your behalf, that split — 90% of everything sitting on no-auth or a static key — is going to feel increasingly uncomfortable. OAuth-with-scopes is where this has to go.
- Remote will grow, slowly. Not because local is bad, but because sharing a working setup across a team is painful, and hosted servers solve that. Watch HTTP's share, not the keynotes.
- The shakeout hasn't happened. Multiple competing community servers for Postgres, GitHub, browsers — with no clear winner — is a sign of an early market, not a mature one.
If you take one thing from the numbers: MCP in mid-2026 is a young, local-first, CRUD-shaped ecosystem where the interesting decisions are about trust and maintenance, not features. Pick accordingly.
Figures are computed from the servers indexed in this directory and refresh as the data does. Want the raw breakdown? See the live data report.