Coverage attestation

What our ratings can and cannot see, stated by us, signed, and recomputable from the named inputs. Sealed 2026-10-30T13:50:16.565Z.

Enumeration

We enumerate 6,751 of 26,338 distinct remote-declaring hosts in the public MCP registry census — 25.6%. 19,587 hosts are NOT covered. A host we could not reach counts as not enumerated; unobserved is never attested safe.

Our headline, next to the control that tests it

Raw: 89% of 37,042 surface-change events carried no version signal. 62.6% of those are one publisher (pipeworx.io); excluding it the raw share is 75.1%.

The figure we publish is the >=1.0.0 subset: 8,621 events across 1,459 publishers, top publisher 1.5% — it survives the leave-one-out.

A share that collapses when one publisher is removed is a fact about that publisher, not about the ecosystem.

What the market asked for and we could not answer

25 distinct hosts, from 28 external requests (our own probes excluded).

faceted-napped-debtless.ngrok-free.dev — 2 askers
polygraph.so — 1 asker
mcp.justpublish.ai — 1 asker
api.quantdata.uk — 1 asker
feedback-synthesis-mcp-production.up.railway.app — 1 asker
answerpool.io — 1 asker
mev.advalorem.io — 1 asker
chartlibrary.io — 1 asker
realestatecapitale.ma — 1 asker
api.mach.gallery — 1 asker
crashstory-mcp-production.up.railway.app — 1 asker
noticiel-mcp.wadie.workers.dev — 1 asker
api.prowlo.com — 1 asker
mcp.ironscout.ai — 1 asker
findmetool.com — 1 asker
alion.io — 1 asker
lsoatzzwpltpydwyfqqv.supabase.co — 1 asker
mcp.qolapps.org — 1 asker
forage.cash — 1 asker
mcp.socs.fr — 1 asker
betterstack.usefulapi.io — 1 asker
aziel-runtime.vibelock.workers.dev — 1 asker
botfeeder.junkyard.guru — 1 asker
brain.inite.ai — 1 asker
aiskillstore.io — 1 asker

An unanswered request is NOT evidence the host is unsafe, absent, or defective. It means our enumeration did not reach it.

Verify it yourself

Digest f445592485e9879259c91c4ff7f248f30696fc40983624f242a7d2fe8ec2d876 · notary receipt ec992379b496539c54a1a17b050b48a98ac05e978fa87a2282782a915955b306

Re-read the inputs below, recompute, and SHA-256 the canonical form.
registry_census census-2026-10-30T13-10-02-840Z.json 53369b653257284c…
rating_board scoreboard-2026-10-30T07-40-08-520Z.json 02cb57eb0bc3152d…
surface_event_series surface-events.jsonl 539e20ab360a21a9…

Machine-readable →