An observation record, not an assessment. Every row below is a change we recorded directly, with the content hash before and after. https://idevice.com/api/mcp
4 of these transitions happened while the reported version string stayed the same. A consumer pinning that version would have received a different tool surface with nothing in the version to indicate it. That is a compatibility and review fact, not a security finding and not an allegation of wrongdoing — unversioned iteration is normal practice and is frequently deliberate.
| observed at (UTC) | change | version signal | reported version | tools | surface hash |
|---|---|---|---|---|---|
| 2026-10-10 19:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.11.0 (unchanged) | no tool-name change recorded | 47c97ffce891 → e769cb236f97 |
| 2026-10-10 01:40:03Z | SURFACE_CHANGED | version-signalled | 2.7.0 → 2.11.0 | +check_deal +find_best_device +pick_between +whats_coming | 592e47cace15 → ae7434f80a8e |
| 2026-10-09 01:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.7.0 (unchanged) | no tool-name change recorded | 53d0ceecc8bb → f25baaaa327a |
| 2026-10-08 01:40:02Z | DESCRIPTION_CHANGED | version-signalled | 2.6.0 → 2.7.0 | no tool-name change recorded | 672f108c260a → 53d0ceecc8bb |
| 2026-10-08 01:40:02Z | PARAMS_CHANGED | version-signalled | 2.6.0 → 2.7.0 | no tool-name change recorded | f9f57c9ae9e7 → a55db41746ec |
| 2026-10-08 01:40:02Z | SURFACE_CHANGED | version-signalled | 2.6.0 → 2.7.0 | +get_best_for +get_company_profile +get_guide_extras +get_ownership_facts +get_variants_and_offers | 56d602f1012b → 592e47cace15 |
| 2026-10-07 19:40:03Z | DESCRIPTION_CHANGED | version-signalled | 2.5.0 → 2.6.0 | no tool-name change recorded | d764497b77e6 → 672f108c260a |
| 2026-10-07 19:40:03Z | SURFACE_CHANGED | version-signalled | 2.5.0 → 2.6.0 | +get_product_news +should_i_buy | 66ea83a76630 → 56d602f1012b |
| 2026-10-05 01:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.5.0 (unchanged) | no tool-name change recorded | 0b74579ef070 → d764497b77e6 |
| 2026-10-04 19:40:04Z | SURFACE_CHANGED | version-signalled | 2.4.0 → 2.5.0 | +find_products +get_guide_summary +get_report_card | e7c192adcf3e → 66ea83a76630 |
| 2026-10-04 13:40:03Z | DESCRIPTION_CHANGED | version-signalled | 2.2.0 → 2.4.0 | no tool-name change recorded | 879b6b302c68 → 9b8951c4c92b |
| 2026-10-04 13:40:03Z | SURFACE_CHANGED | version-signalled | 2.2.0 → 2.4.0 | +get_detailed_facts +get_in_the_box +get_price_history +get_release_calendar +get_release_history +get_reports +get_reviews +search_reports −get_claims −search_claims | c6ca61658093 → e7c192adcf3e |
| 2026-10-04 01:12:58Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 2.2.0 (unchanged) | no tool-name change recorded | 8f9b0e4b884f → 879b6b302c68 |
| 2026-10-01 19:40:04Z | SURFACE_CHANGED | version-signalled | 2.1.0 → 2.2.0 | +get_compatibility | c6618e924c9e → c6ca61658093 |
This section is identical for ~92% of publishers and is published as
shared context, not as a finding about idevice.com. 90 dependency
packages sit beneath the measured MCP population; 41 have a
single maintainer and 31 have not published in over two years.
The widest is zod at
80.46% of npm-backed servers (8529 servers,
1 maintainer, last publish 2026-09-13).
These are properties of the shared SDK dependency closure. Any page claiming this set as
one operator's personal exposure is misreading a universal fact as a private one.
Source: state/mcp-census/chokepoint-maintainers.json, as_of 2026-10-07.
Observation window 2026-09-21 → 2026-10-10.
22,294 servers were observed; 2,214
were seen to change and 20,080 were observed and
recorded no change — that negative control is why a non-zero count here means something.
Across the corpus, 4,781 of
6,334 changes carried no version signal, and
1,690 of those added or removed tools.
What this does NOT cover: servers outside the observed set; changes that
occurred before 2026-09-21; changes that began and reverted between two observations;
and any server reachable only with credentials we do not hold. A server's absence from this
record is not evidence it did not change — only that we did not observe it.
Universe captured 2026-10-10T19:40:03.823Z. Produced by core/surface_history_page.cjs (reads core/surface_clock producers).
Hashes are of the served tool surface and are recomputable from the server's own response.