Week of 2026-05-19

First 25 Source-Reviewed MCP Servers

MCP Rank's first serious source-review batch shows the real bottleneck in MCP trust: indexing is easy, but source provenance is uneven. EXA is the lead signal because it has active public source, strong adoption, a concrete provider endpoint, and a comparatively narrow web-retrieval risk surface.

Lead signal

EXA

Fast, intelligent web search and web crawling. New mcp tool: Exa-code is a context tool for coding

84B

Open full review

Top 3 reviewed servers

1. GitHub MCP ServerDeveloper tools · low risk · high confidence94 2. Context7Documentation · low risk · high confidence89 3. FilesystemLocal automation · medium risk · high confidence84

Why this matters

EXA had one of the strongest evidence chains in the batch: reachable GitHub source, MIT license signal, recent activity, thousands of stars, and a clear web-search/crawling use case.

The batch deliberately keeps these 25 entries at Source Reviewed rather than Deep Review, because source links and registry metadata do not prove install behavior, auth scopes, retention, or maintainer identity.

The strongest near-term acquisition signal for MCP Rank is not that it lists 18,000+ servers; it is that it can separate usable evidence from weak registry rows before the ecosystem notices the difference.

Watch list

Several official-registry rows had repository URLs that returned 404 during review, including ABMeter, AgentDM, Agentic News, Agentic Shelf, Contextlayer, and Cirra.

Endpoint-only services such as Baselight, ByteRay, and China Marketing AI Intelligence remain low-confidence until maintainers provide source, docs, or claim evidence.

High-impact categories like Salesforce admin, hosting/DNS, binary security analysis, cloud provisioning, trust scoring, and data sandboxes should never be promoted from source review alone.

Biggest risk note

The first 25 reviews found a credibility trap: a server can be in a public registry and still have missing source, broken repository links, unclear auth behavior, or high-impact mutation risk. MCP Rank should make that visible instead of smoothing it over.

Needs maintainer verification

ABMeter - listed repository returned 404 during review.

AgentDM - listed repository returned 404 during review.

Agentic News - listed repository returned 404 during review.

Agentic Shelf - listed repository returned 404 during review.

Contextlayer MCP - listed repository returned 404 during review.

Cirra AI Salesforce Admin MCP Server - high-impact Salesforce admin surface with broken repository provenance.

ByteRay AI - hosted security analysis endpoint needs source, retention, and auth evidence.

Baselight - finance/data catalog endpoint needs data provenance and licensing evidence.

Reviewed batch

EXA

MCP Registry Server

Docs MCP

Adeu

Anki MCP Server

Spotdb

AgentTrust

AnomalyArmor

BuyWhere MCP

BuyWhere Product Catalog

HAPI MCP Server

Contabo (VPS) MCP Server

Dreamlit

Auxen

BorealHost

Computeback

ABMeter

AgentDM

Agentic News

Agentic Shelf

Contextlayer MCP

Baselight

ByteRay AI

China Marketing AI Intelligence MCP

Cirra AI Salesforce Admin MCP Server

What changed

Converted the first curated batch of 25 indexed services into Source Reviewed records with explicit confidence caps and cautions.

Added live source-review findings from GitHub/API metadata where available, including stars, issue counts, license signal, recent activity, and broken repository links.

Kept the batch out of leaderboards because Source Reviewed is discovery evidence, not an install-tested or maintainer-verified recommendation.

Created a maintainer outreach shortlist based on broken links, endpoint-only listings, and high-impact operational surfaces.

Weekly MCP trust report

Reviewed servers, risk notes, new indexed tools, and maintainer verification asks.

Submit an MCP server View leaderboard