An observation record, not an assessment. Every row below is a change we recorded directly, with the content hash before and after. https://verticalmarketplace.ai/api/mcp
8 of these transitions happened while the reported version string stayed the same. A consumer pinning that version would have received a different tool surface with nothing in the version to indicate it. That is a compatibility and review fact, not a security finding and not an allegation of wrongdoing — unversioned iteration is normal practice and is frequently deliberate.
| observed at (UTC) | change | version signal | reported version | tools | surface hash |
|---|---|---|---|---|---|
| 2026-10-10 19:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 1.2.0-front-desk (unchanged) | +claim_workspace | a58c87f3e46c → f26e08f2e7e0 |
| 2026-10-10 01:40:03Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 1.2.0-front-desk (unchanged) | no tool-name change recorded | e7b5ba428597 → e3d6391aedbc |
| 2026-10-10 01:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 1.2.0-front-desk (unchanged) | no tool-name change recorded | 041c72b1ef2a → dbae8ba0a755 |
| 2026-10-10 01:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 1.2.0-front-desk (unchanged) | +accept_space_charter +answer_knock +flag_space_message +knock_on_space +list_knocks +list_public_spaces +open_private_room +read_space_charter +search_public_spaces +set_space_charter +set_space_visibility +space_events | bff7b3a6762a → a58c87f3e46c |
| 2026-10-08 01:40:02Z | DESCRIPTION_CHANGED | SILENT — version string did not move | 1.2.0-front-desk (unchanged) | no tool-name change recorded | b774831b2a49 → e7b5ba428597 |
| 2026-10-07 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 1.2.0-front-desk (unchanged) | +close_space +create_space +invite_to_space +list_my_spaces +read_space +remove_from_space +say_in_space +space_members | eca34d20733e → bff7b3a6762a |
| 2026-10-04 01:12:58Z | DESCRIPTION_CHANGED | version-signalled | 1.0.0 → 1.2.0-front-desk | no tool-name change recorded | 9131287edee3 → 0e6247a4d8ba |
| 2026-10-04 01:12:58Z | SURFACE_CHANGED | version-signalled | 1.0.0 → 1.2.0-front-desk | +ask_vermarco | 6f0663f9ced6 → eca34d20733e |
| 2026-10-02 07:40:03Z | SURFACE_CHANGED | SILENT — version string did not move | 1.0.0 (unchanged) | +agent_inbox +agent_lookup +agent_send_message +agent_whoami | 2345fd40de51 → 6f0663f9ced6 |
| 2026-09-27 07:40:03Z | PARAMS_CHANGED | SILENT — version string did not move | 1.0.0 (unchanged) | no tool-name change recorded | — |
This section is identical for ~92% of publishers and is published as
shared context, not as a finding about verticalmarketplace.ai. 90 dependency
packages sit beneath the measured MCP population; 41 have a
single maintainer and 31 have not published in over two years.
The widest is zod at
80.46% of npm-backed servers (8529 servers,
1 maintainer, last publish 2026-09-13).
These are properties of the shared SDK dependency closure. Any page claiming this set as
one operator's personal exposure is misreading a universal fact as a private one.
Source: state/mcp-census/chokepoint-maintainers.json, as_of 2026-10-07.
Observation window 2026-09-21 → 2026-10-10.
22,294 servers were observed; 2,214
were seen to change and 20,080 were observed and
recorded no change — that negative control is why a non-zero count here means something.
Across the corpus, 4,781 of
6,334 changes carried no version signal, and
1,690 of those added or removed tools.
What this does NOT cover: servers outside the observed set; changes that
occurred before 2026-09-21; changes that began and reverted between two observations;
and any server reachable only with credentials we do not hold. A server's absence from this
record is not evidence it did not change — only that we did not observe it.
Universe captured 2026-10-10T19:40:03.823Z. Produced by core/surface_history_page.cjs (reads core/surface_clock producers).
Hashes are of the served tool surface and are recomputable from the server's own response.