The MCP Census

com.mcpcensus由 mcpcensus.com 发布官方发布者v1.4.0更新于 Oct 28, 2026

Vet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.

已验证Streamable HTTP可网页运行网页搜索与抓取开发者工具安全与监控

概览

AI 生成的概览

远程 MCP 服务器，让助手在依赖某个 MCP 服务器之前，先在实时普查中查询、搜索、评估并监控它。

可以做什么
  • 按精确注册名查询单个服务器，获取星标数、最近推送时间、归档/弃用标记和健康结论；按关键词搜索服务器并返回带健康与信任度的排序结果
  • 读取生态总体统计、最新收录服务器、覆盖透明度报告以及不可变的 Preflight 策略对象
  • 对单个服务器执行 preflight 或 stamp 检查（PASS、REVIEW 或 BLOCK，附证据、新鲜度和摘要），并可一次性审计整份客户端配置文件
  • 检查某个服务器名称的争议身份与仿冒名称
  • 订阅、列出和取消按服务器的监控，在观测到变化时触发，并读取分页的变更流
  • 查询某个 API key 剩余的 Census 额度
适用场景
适合在挑选 MCP 服务器、把服务器加入客户端配置，或希望在依赖的服务器下线、工具变更或健康状态变化时收到提醒的场景。
运行要求
远程 streamable HTTP 端点，无需安装包或本地运行时。部分工具需要 x-api-key（监控、额度钱包、refresh=if_stale），其余可匿名使用。监控可选通过 https webhook 回调或电子邮件通知。
安装前请注意
监控类工具需要 x-api-key，且监控会向你提供的 webhook 地址发送 POST 回调。preflight 与 stamp 被说明为第一道门槛，并非安全审计或恶意软件扫描。部分调用会消耗 Census 额度，订阅或取消订阅会改变监控状态。

安装

在 SourceWeft 中

  1. 打开 控制台中的 The MCP Census，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.mcpcensus%2Fcensus/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "the-census": {
      "type": "http",
      "url": "https://api.mcpcensus.com/mcp"
    }
  }
}

工具

15

census_lookup

Get the live health verdict for one MCP server by its exact registry name (e.g. 'io.github.owner/name'). Returns stars, last-push recency, gone/archived/deprecated flags, name-collision count, and a fact-based health verdict (healthy | issues | unknown).

输入参数name必填

census_stats

Ecosystem headline numbers from the live census (same payload as GET /v1/stats). Unmetered. Returns total servers, healthy/issues counts, popular (gh_stars>=1000), remote-capable count, github-linked count, and captured_at. No invented metrics.

无需输入参数。

census_recent

Newest MCP servers by real first_seen_at (same payload as GET /v1/recent). Unmetered. Only rows with a known first-seen date — never invents or guesses discovery times. Optional limit 1–50 (default 20).

输入参数limit

census_coverage

Public transparency report (same payload as GET /v1/coverage). Unmetered. Live D1 census/identity/remote/protocol/adoption/pipeline counts plus method notes — never invents completeness percentages or a brand_audit punch list.

无需输入参数。

census_watch_subscribe

Subscribe this agent (or a human email) to alerts for ONE specific MCP server. Fires only on real observed changes: remote_down, remote_up, health_change, verified_change, security. Requires x-api-key. Prefer webhook_url (https) so your agent can receive POST callbacks; email optional. Returns a watch id + HMAC secret (X-Census-Signature: sha256=…). Free tier: 5 watches; pro: 50.

输入参数emaillabeleventsserver_name必填webhook_url

census_watch_list

List active per-server watches for this API key. Requires x-api-key.

无需输入参数。

census_watch_unsubscribe

Deactivate a watch by id. Requires x-api-key that owns the watch.

输入参数id必填

census_preflight

Run MCP server preflight

Evaluate one exact MCP server under a documented built-in install policy. Returns PASS, REVIEW, or BLOCK with evidence reasons, freshness, digests, and explicit limits. This is a first gate, not a security audit. refresh=if_stale requires x-api-key.

输入参数refreshpolicy_idserver_name必填

census_policy_list

List MCP Census policies

List the exact immutable Preflight v1 built-in policy objects, canonical ruleset, and policy digests. Unmetered.

无需输入参数。

census_credits

Show remaining Census credits for this API key (wallet after the UTC-month grant). Unmetered. Without a key, returns anonymous unique-per-day remaining — not a wallet.

无需输入参数。

census_stamp

Census stamp for one exact MCP server under a built-in policy. Same input as census_preflight. Returns the preflight body plus compact CENSUS-STAMP/1 text and stamp_json. Cost matches preflight. Never connect without a stamp. PASS is not a malware scan or permission review.

输入参数refreshpolicy_idserver_name必填

census_lookalikes

Contested identity for one exact server_name: official_for, name_collision_count, and up to 10 other census server_name values sharing the same namespace brand or tail. Never invents lookalikes. Cost 1.

输入参数server_name必填

census_audit_config

Audit an MCP client config

Audit a whole MCP client config in one call (.mcp.json, claude_desktop_config.json, .cursor/mcp.json, .vscode/mcp.json, Codex config.toml text). Resolves every entry without guessing (url → remote_url, npx → npm package, uvx → PyPI package) and returns one PASS / REVIEW / BLOCK / UNKNOWN verdict per entry under a built-in policy, plus CENSUS-AUDIT/1 text, valid_until_epoch and exit_code (1 on any BLOCK). UNKNOWN is never upgraded to PASS. Cost 1 credit per config per UTC day; keyless callers get one config of ≤25 entries per IP per day. Not a malware scan; PASS is not a sandbox. Strip env/headers before sending.

输入参数config必填formatstrictpolicy_idprevious_tools_digests

census_changes

Census change feed

The Census change feed (CENSUS-CHANGES/1): observed transitions across every server — server_new, remote_down, remote_up, tools_changed, health_change, verified_change, security, endpoint_moved, registry_status, spec_era_change. Cursor-paginated: pass next_cursor back as since. Filter by events, server_names or namespace_domain. Only real transitions, never 'still fine'. Unmetered in v1; poll hourly. Not a malware scan.

输入参数limitsinceeventsserver_namesnamespace_domain

版本历史

1
  1. v1.4.0最新Sep 16, 2026

评分

已满足适用检查项的 72%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分

    请在注册中心条目中发布图标。

  • 文档15 分

    请声明包含 README 的 GitHub 仓库，或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证不适用

    托管服务按其提供方的条款使用，因此这里不要求许可证。此检查项不计入百分比。