Skip to main content

How we check

We connect to every remote MCP server in the official registry about once a day and record whether it answers.

What we send

What we send
Message
Why
initializeStarts a session and asks which protocol version the server speaks.
notifications/initializedConfirms the session, as every MCP client does.
tools/listReads the list of tools and their annotations.
pingChecks that the session still answers.

What we never do

  • Call a tool
  • Sign in or send credentials
  • Answer requests the server sends us
  • Contact private or internal network addresses
  • Check one host more often than once per minute

What the states mean

Responds means the server answered our handshake without sign-in. Sign-in required means it is reachable and asks for authorization, so we did not look inside. Responds with errors, Not reachable and Timed out describe what went wrong. A state says nothing about quality or security.

How to recognise us

Every request from the checker carries this user agent:

run.zero-MCP-Directory/0.1.0 (+https://run-zero.de/mcp-servers/about-checks)

Where a server is hosted

We look up the country of the address each remote host resolves to, offline in the DB-IP Lite database. EU hosting detected means every remote resolves to the EU or the EEA. It is a hint from the address, not a legal statement; operators can declare their hosting on the manage page.

IP geolocation by DB-IP, licensed under CC BY 4.0.

How often

Each address is checked about every 24 hours, and one host at most once per minute. Hosts that serve very many servers are checked less often, and we label them. When a server asks us to slow down, we wait as long as it asks.

Stop the checks

Operators who claim their listing can turn checks off on the manage page. The switch takes effect at once.

Run a host that we check but cannot claim the listing, for example because another publisher owns it? Write to info@itdone.de with your hostname, and we stop checking that host.

Report a problem

Write to info@itdone.de. Include the server name, the time and what you saw.