Skip to content

Early access Governed MCP calls open to beta partners in March 2027. The MCP tracker and scanner are free to use today.

Join the waitlist
Stackduke Radar

Look up any MCP server's tools.

See what a server lets an AI agent do, and every change to its tools, from daily checks.

MCP servers checked every day
16,000+
tool changes recorded in the last 30 days
14,000+
servers whose tools changed in the last 30 days
5,000+

Recently changed

Tools added, removed or rewritten in the 7 days to 4 Nov 2026.Every change on the official servers

  1. io.github.pipeworx-io/abs-auDescription rewritten on ask_pipeworx, ask_pipeworx_beta, ask_pipeworx_grounded, deep_research.4 Nov 2026
  2. com.jojapi/product-barcode-apiDescription rewritten on get_api_external_getProducts, get_api_external_search.4 Nov 2026
  3. io.tooloracle/ampelDescription rewritten on llm_clause_check.4 Nov 2026
  4. io.github.jdhart81/regulatory-radarDescription rewritten on assess_compliance. Inputs or outputs changed on assess_compliance.4 Nov 2026
  5. com.faceabot/capability-networkDescription rewritten on solve_need.4 Nov 2026
  6. dev.tanod/webDescription rewritten on company_jobs. Title changed on company_jobs. The server's own labels changed on company_jobs. Inputs or outputs changed on company_jobs, rdap_lookup, render_page.4 Nov 2026
  7. com.52choujiang/zhihu-insightsInputs or outputs changed on zhihu_get_comment_replies_by_url, zhihu_get_content_comments_by_url, zhihu_get_content_detail_by_url, zhihu_get_hot_list, zhihu_get_user_info_by_profile_url and 4 more.4 Nov 2026
  8. com.textforagents/scheduled-agent-outcome-verificationTitle changed on checkpoint, complete_run, last_verified_success, list_verdicts, register_job and 3 more. The server's own labels changed on checkpoint, complete_run, last_verified_success, list_verdicts, register_job and 3 more. Counted as able to do more: checkpoint (create or change things).4 Nov 2026
  9. app.apick/convert9 tools added: document_ai_write, document_create, document_delete, document_download, document_get and 4 more. Description rewritten on form_document, form_list. Inputs or outputs changed on form_bundle. Counted as able to do more: document_delete (make changes that cannot be undone), document_ai_write (create or change things), document_create (create or change things) and 2 more.4 Nov 2026
  10. com.predictionmarketspicks/quant1 tool added: stress_test_strategy.4 Nov 2026

How Radar works

What Radar checks, and how often
  • Once a day, Radar connects to every server in the official MCP registry that lists its tools without a sign-in (16,000+ at the latest check) the way any MCP client would, and records the tools it lists.
  • It never runs a tool. It only asks each server what tools it has.
  • A server that does not answer is retried at the next daily check; its page shows which checks passed.
Why only what a server shows without a sign-in
  • Radar uses no account. A server may offer other tools to someone who signs in, and those are not seen.
  • It checks the address the registry gives. A server can show different tools at another address or to another client.
What counts as a change
  • A change is a tool added, removed or rewritten between two checks that passed.
  • A change made and undone between two checks is not seen.
  • Radar keeps each server's latest 10 changes. Every check is in the scanner's public data.
How labels are made
  • Each tool gets a label such as "Deletes" or "Moves money": an automatic best guess from the tool's name, its description and the server's own hints. It is not a safety verdict.
  • Labels are machine guesses (accuracy not yet measured). Community servers have not been reviewed by Stackduke at all.
  • Where the signals disagree, the label takes whichever says the tool can do most, so it overcounts on purpose.
  • Radar does not say that any server is safe, and it does not list what a server cannot do.
Why tool descriptions are not shown
  • Tool names are shown as each server gives them. Descriptions are not, because they are written for models and may try to steer them.
What's left out
  • Vendors whose terms or policies rule out publishing this are left out, along with any server whose name, address or tool names mention them.
  • Community servers are not reviewed by Stackduke, and Stackduke is not affiliated with them.

Labels are our automatic best guess from each tool's name and description, not a safety verdict. Atom feed · Open-source scanner

Want a say before an agent uses tools like these?

Stackduke is building an approval gateway that will hold an agent's risky tool calls until a person approves them.

Join the waitlist