F
Favz
A daily census of which MCP servers and skills agents actually run
Emerged finds new products worth a look, daily — what’s new today
B
Before you let an MCP server near your agent, this tells you whether it reaches for a host its README never names, and which of its tools go undocumented.
A report on 67 npm packages that act as MCP servers. Each was installed and started on a machine with no outbound network, then asked for its tool list. Every hostname it tried to resolve was recorded and checked against the README inside the package; nothing connected and no tool was called. Seven reached for hosts their README does not name, 24 advertised tools their README does not name, two did both, and 38 showed nothing. The run is dated 31 October to 2 November 2026, and the page marks its own results as not calibration-backed. The harness and per-package evidence sit on GitHub.
More like this
MCP Transparency Log
A signed, append-only daily log of what public MCP servers say their tools do
leanrea
A tiny agent skill that points it at the right reverse-engineering command
TrackLLM
A public record of when hosted language models quietly change behaviour
Bouncer
A local gate on where your agent is allowed to send things
Geiger
Inventory every AI agent on your machine and what it can reach