MCP registry audit: 13.3% of entries drift after publishing
A check of 38,977 MCP servers found that 5,192 entries (13.3%) have at least one problem: broken repository links, withdrawn package versions or archived repos. The registry validates a package only at publish time and on edits, with no scheduled re-checks.
- 4,298 of 28,743 GitHub repository links return 404 (15.0%)
- 663 of 14,431 npm/PyPI versions are deprecated or yanked (4.6%)
- 157 entries cannot be installed at all, all published after version checks existed
- Periodic re-validation is tracked in modelcontextprotocol/registry#1715
Read next
Software