Observe the MCP ecosystem without turning measurement into endorsement.
Protocol Observatory is the inspection and longitudinal-evidence station inside the one SaSame MCP Factory. This Knowledge page owns the human experience; the existing live-vps runtime continues to own signed feeds, indexes, badges, certificates and lookup endpoints.
- Domains graded
- 39,085
- Observed-ready
- 2,866
- Feed updated
- 2026-08-02
- Business role
- Factory station
Observed means measured from outside. Claimed means an operator proved control. Neither state means safe, recommended, high quality or legally verified. Unknown remains unknown, and unavailable live data is never replaced with invented values.
19.5% of state-changing tools on the enumerable surface publish NO machine-readable safety annotation — a calling agent cannot automatically tell a read from a write, delete, or payment before invoking them.
- Endpoints observed
- 39,270
- Handshake response
- 3,128
- Declared tools
- 63,086
- Annotated
- 83.3%
Deterministic classifier, no LLM. This describes the published tool surface and annotation hygiene. It is not proof of runtime behavior, a vulnerability finding or a safety verdict.
A stratified sample across grades A–D from the current readiness index. It is deliberately not a showcase of only the strongest results.
ai.agentdm/agentdm
api.agentdm.ai
- Checks passed
- 3/10
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: C1 Protocol handshake conformance — initialize result keys: (none, status 401)
ai.agentrapay/agentra
api.agentrapay.ai
- Checks passed
- 10/10
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: none (passes all checks)
ac.tandem/docs-mcp
tandem.ac
- Checks passed
- 9/10
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: C10 Honest error behavior — no structured error
ai.aarna/atars-mcp
mcp.aarna.ai
- Checks passed
- 9/10
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: C5 Safety annotation presence — 0/18 tools carry a valid safety-hint annotation
ac.inference.sh/mcp
sh.inference.ac
- Checks passed
- 2/10
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: C1 Protocol handshake conformance — initialize result keys: (none, status 301)
agency.lona/trading
mcp.lona.agency
- Checks passed
- 2/10
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: C1 Protocol handshake conformance — initialize result keys: (none, status 401)
ai.alpic.test/test-mcp-server
test.alpic.ai
- Checks passed
- 0/0
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: No bounded gap was published.
ai.buyersense/buyersense
mcp.buyersense.ai
- Checks passed
- 0/0
- Reachable
- yes
- Owner claim
- unclaimed
- Measured
- 2026-06-18
Top observed gap: No bounded gap was published.
Observation and control status
- Certified records
- 0
- Third-party certified
- 0
- Monitored
- 1
- Meaning
- bounded evidence
1) Claim your endpoint for free (https://github.com/shigeki7777/sasame-mcp-observatory/issues/new?template=claim-passport.yml) by proving control via .well-known / DNS / repo. 2) SaSame re-audits hourly. 3) After >= 2 reproducible cycles still at the A/B bar, it is auto-promoted to Certified. No fee, no application, no sales call.
A claim proves control of a record or endpoint only. It is not KYC, identity verification, endorsement or a general certification of safety.
Stable machine evidence
The human interface can evolve without breaking externally referenced evidence URLs. Raw feeds remain on the dedicated runtime origin.