An observation record, not an assessment. Every row below is a change we recorded directly, with the content hash before and after. https://api.signalbureau.ai/api/mcp
23 of these transitions happened while the reported version string stayed the same. A consumer pinning that version would have received a different tool surface with nothing in the version to indicate it. That is a compatibility and review fact, not a security finding and not an allegation of wrongdoing — unversioned iteration is normal practice and is frequently deliberate.
| observed at (UTC) | change | version signal | reported version | tools | surface hash |
|---|---|---|---|---|---|
| 2026-10-10 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 8f9f2599865a → fa36491c3875 |
| 2026-10-10 13:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 1844097f5333 → 8f9f2599865a |
| 2026-10-09 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 8081af16c77f → 1844097f5333 |
| 2026-10-09 13:40:04Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 81093f83d864 → 8081af16c77f |
| 2026-10-08 19:40:05Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 7f70f9d01936 → 81093f83d864 |
| 2026-10-08 13:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 737d86cebb1e → 7f70f9d01936 |
| 2026-10-08 07:40:02Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 44d92826f985 → 737d86cebb1e |
| 2026-10-08 07:40:02Z | PARAMS_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 89b70ceaef2c → e04ded3db277 |
| 2026-10-08 01:40:02Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | b5fa86f65f80 → 44d92826f985 |
| 2026-10-07 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | f30d7b7e07c1 → b5fa86f65f80 |
| 2026-10-07 13:40:04Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 9f7c61404095 → f30d7b7e07c1 |
| 2026-10-07 07:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 532394c790b9 → 9f7c61404095 |
| 2026-10-06 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | ea459651d9ff → 532394c790b9 |
| 2026-10-06 19:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 7a92af84d9cb → 89b70ceaef2c |
| 2026-10-06 13:40:04Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 8ca31106ed16 → ea459651d9ff |
| 2026-10-06 07:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 0d5d1926fb83 → 8ca31106ed16 |
| 2026-10-05 19:40:04Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 9c4b51409aec → 0d5d1926fb83 |
| 2026-10-05 13:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 5fb501c2bf06 → 9c4b51409aec |
| 2026-10-05 07:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 1b5f3214c8d8 → 5fb501c2bf06 |
| 2026-10-05 01:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | b8d2a394407a → 1b5f3214c8d8 |
| 2026-10-05 01:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | +list_saved_watches +list_standard_watches +recall_watch +retire_watch +save_watch +traverse +unfurl_watch | 01da2817a323 → 3ad5ee9d41af |
| 2026-10-04 19:40:04Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | no tool-name change recorded | 0cc6c0dc7a32 → b8d2a394407a |
| 2026-10-03 01:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.6.0 (unchanged) | +get_topic_record −get_truth_record | b380b36792e6 → 01da2817a323 |
This section is identical for ~92% of publishers and is published as
shared context, not as a finding about api.signalbureau.ai. 90 dependency
packages sit beneath the measured MCP population; 41 have a
single maintainer and 31 have not published in over two years.
The widest is zod at
80.46% of npm-backed servers (8529 servers,
1 maintainer, last publish 2026-09-13).
These are properties of the shared SDK dependency closure. Any page claiming this set as
one operator's personal exposure is misreading a universal fact as a private one.
Source: state/mcp-census/chokepoint-maintainers.json, as_of 2026-10-07.
Observation window 2026-09-21 → 2026-10-10.
22,294 servers were observed; 2,214
were seen to change and 20,080 were observed and
recorded no change — that negative control is why a non-zero count here means something.
Across the corpus, 4,781 of
6,334 changes carried no version signal, and
1,690 of those added or removed tools.
What this does NOT cover: servers outside the observed set; changes that
occurred before 2026-09-21; changes that began and reverted between two observations;
and any server reachable only with credentials we do not hold. A server's absence from this
record is not evidence it did not change — only that we did not observe it.
Universe captured 2026-10-10T19:40:03.823Z. Produced by core/surface_history_page.cjs (reads core/surface_clock producers).
Hashes are of the served tool surface and are recomputable from the server's own response.