MCP Tool Surface Index
mcp_indexSearchable, dated archive of what every public MCP server actually exposes — tool definitions, daily change feed, and rug-pull detection.
The official MCP registry publishes a server’s name and address but not its tool surface; the only way to learn what a server exposes is to connect and call tools/list. This endpoint does that daily across every public remote server and keeps the result. Three things become answerable that the source cannot answer: tool-level search (the registry has none), uptime, and — the one that matters for security — what a tool’s description said yesterday. In MCP a tool description is part of the context handed to the model, so it is prompt text; if it changes after the user approved the server, the server has silently injected new instructions. Each indexed tool also carries a review score with the matched evidence, so the claim can be checked rather than trusted. Measurement boundary: only initialize and tools/list are ever called — never tools/call.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | Search term (only `search`), e.g. `invoice`, `calendar`, `sql`. | |
| days | No | Window in days (`changes` and `server`). | |
| tool | No | Tool name (only `tool` view). | |
| type | No | Event type filter (only `changes`), e.g. `tool_description_changed`. | |
| view | No | `search`: search tool name/description · `changes`: change feed (the actual product) · `server`: per-day measurement history for one server · `tool`: definition history for one tool · `stats`: index-level totals. | search |
| limit | No | ||
| server | No | Registry server name, e.g. `com.temsor/api`. Required for `server`/`tool` views. | |
| minRisk | No | Only tools whose review score is at or above this (only `search`). | |
| severity | No | Only `changes`. |