An observation record, not an assessment. Every row below is a change we recorded directly, with the content hash before and after. https://plyto.ai/api/mcp
21 of these transitions happened while the reported version string stayed the same. A consumer pinning that version would have received a different tool surface with nothing in the version to indicate it. That is a compatibility and review fact, not a security finding and not an allegation of wrongdoing — unversioned iteration is normal practice and is frequently deliberate.
| observed at (UTC) | change | version signal | reported version | tools | surface hash |
|---|---|---|---|---|---|
| 2026-10-09 19:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | 94784f5b1e73 → 0b85a87a2c2f |
| 2026-10-09 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +brand__colors__set | 1b6f9b4dfe1d → 8f7af59e472c |
| 2026-10-09 07:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | 863169a09f52 → 4ce5aa386d5c |
| 2026-10-09 07:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | ce66a569c185 → 94784f5b1e73 |
| 2026-10-09 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +ads__creative__detach_image +ads__pictures__hold +ads__pictures__release | 83f7cd404356 → 1b6f9b4dfe1d |
| 2026-10-09 01:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | 5528033d522d → 863169a09f52 |
| 2026-10-08 01:40:02Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | 1c8cf00c2cba → 5528033d522d |
| 2026-10-08 01:40:02Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | 6d78bc3bf218 → ce66a569c185 |
| 2026-10-08 01:40:02Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +ads__listing__read | 921eddf62380 → 83f7cd404356 |
| 2026-10-04 07:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | 970bf6774717 → 6d78bc3bf218 |
| 2026-10-03 07:40:04Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +automations__retry_enrollment | 87d1283690a9 → 921eddf62380 |
| 2026-10-01 01:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +ads__meta__pixel__setup | 212f89bd9091 → 87d1283690a9 |
| 2026-09-30 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +ads__creative__edit_photo | 7dd6cf46d773 → 212f89bd9091 |
| 2026-09-30 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +documents__list +documents__read | 27e6c2448634 → 7dd6cf46d773 |
| 2026-09-30 01:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | — |
| 2026-09-29 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +ads__creative__flyer | d3b67cce9079 → 27e6c2448634 |
| 2026-09-29 07:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | — |
| 2026-09-29 01:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +brand__scan__wait | 969c7139f03c → d3b67cce9079 |
| 2026-09-28 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | −ads__budget__get | 8976e6611e77 → 969c7139f03c |
| 2026-09-27 01:40:02Z | SURFACE_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | +ads__budget__get | 969c7139f03c → 8976e6611e77 |
| 2026-09-25 19:40:04Z | PARAMS_CHANGED | SILENT — version string did not move | 0.2.0 (unchanged) | no tool-name change recorded | — |
This section is identical for ~92% of publishers and is published as
shared context, not as a finding about plyto.ai. 90 dependency
packages sit beneath the measured MCP population; 41 have a
single maintainer and 31 have not published in over two years.
The widest is zod at
80.46% of npm-backed servers (8529 servers,
1 maintainer, last publish 2026-09-13).
These are properties of the shared SDK dependency closure. Any page claiming this set as
one operator's personal exposure is misreading a universal fact as a private one.
Source: state/mcp-census/chokepoint-maintainers.json, as_of 2026-10-07.
Observation window 2026-09-21 → 2026-10-10.
22,294 servers were observed; 2,214
were seen to change and 20,080 were observed and
recorded no change — that negative control is why a non-zero count here means something.
Across the corpus, 4,781 of
6,334 changes carried no version signal, and
1,690 of those added or removed tools.
What this does NOT cover: servers outside the observed set; changes that
occurred before 2026-09-21; changes that began and reverted between two observations;
and any server reachable only with credentials we do not hold. A server's absence from this
record is not evidence it did not change — only that we did not observe it.
Universe captured 2026-10-10T19:40:03.823Z. Produced by core/surface_history_page.cjs (reads core/surface_clock producers).
Hashes are of the served tool surface and are recomputable from the server's own response.