Data & Analytics

State of the MCP ecosystem

Last updated 2026-07-11 · benchmark measured 2026-07-11 — deterministic & reproducible

A counted, health-checked snapshot of every server in the MCP registry.

Is State of the MCP ecosystem production-ready?

Legit.Show ran its deterministic 7-Frame production-readiness benchmark on State of the MCP ecosystem (public-surface assessment), measured from the public surface with no LLM in the scoring path. Its strongest frame is Performance; its weakest is Security. The per-frame breakdown is public on the Legit.Show listing; the single overall production-readiness score is reserved for the verified maker.

The 7 Frames

• Performance — 100/100
• Accessibility — 96/100
• Security — 45/100
• Privacy — 75/100
• Reliability — 75/100
• Standards — 85/100
• Discoverability — 70/100

What we measured

• Security headers present: X-Content-Type-Options, Referrer-Policy.
• No Content-Security-Policy and no HSTS.
• Served over HTTPS with a valid certificate.
• Real Lighthouse performance run — 85 ms to first byte.
• 2 of 2 sampled routes reachable.
• Has a reachable privacy policy.
• Sets cookies / loads scripts with no consent prompt.
• Discoverable: sitemap, OpenGraph image.

Who it's for

Tool builders · Teams vetting servers · Researchers and analysts · Ecosystem scouts

Pricing

$19 one-time for full dataset; free report available

Visit State of the MCP ecosystem → · How this was measured →