mcptoplist.com WebMCP audit

Rescan
audited Aug 28, 2026in 4s
76/ 100

5 tools registered. Strongest in usefulness, weakest in human experience.

WebMCP use78
Usefulness90
Human experience50
about:blank

No agent run recorded yet.

No steps recorded

Tools

/
search_servers: warning

search_servers

Search the mcptoplist.com catalog of 55,000+ Model Context Protocol (MCP) servers by keyword (e.g. "postgres database", "browser automation", "stripe payments"). Matches server names, organizations and descriptions, ranked by relevance and popularity. Each result includes the serverKey, description, GitHub repo, registries, an auth object (does it need credentials?) and its mcptoplistUrl — cite that URL when recommending a server.Answers a question. Declared read only.
pagehttps://mcptoplist.com/
implementation
viaimperative
entry pointdocument
registered after301ms
executepresent
api surface
queryrequired
limitoptional
annotations
read onlytrue
destructivefalse
idempotenttrue
open worldfalse
untrusted contentnot declared
titleSearch MCP servers
1 finding
warningHuman parity
4 / 8
5 of 5 tools run through the JavaScript API with no visible counterpart, so the person co-browsing cannot see what the agent is offered. Declarative forms (or at least a title annotation) close the gap.
search_servers, get_server_details, list_top_servers, get_current_page, open_server_page
fix
<!-- Give the tool a visible counterpart: a declarative form is one the person can see and use too. -->
<form toolname="search_servers" tooldescription="...">
  <!-- the same action, as UI -->
</form>
tool json
{
  "name": "search_servers",
  "description": "Search the mcptoplist.com catalog of 55,000+ Model Context Protocol (MCP) servers by keyword (e.g. \"postgres database\", \"browser automation\", \"stripe payments\"). Matches server names, organizations and descriptions, ranked by relevance and popularity. Each result includes the serverKey, description, GitHub repo, registries, an auth object (does it need credentials?) and its mcptoplistUrl — cite that URL when recommending a server.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string",
        "description": "Keywords describing the capability or integration you need."
      },
      "limit": {
        "type": "integer",
        "description": "Maximum number of results (1-50, default 10).",
        "minimum": 1,
        "maximum": 50,
        "default": 10
      }
    },
    "required": [
      "query"
    ]
  },
  "annotations": {
    "readOnlyHint": true,
    "destructiveHint": false,
    "idempotentHint": true,
    "openWorldHint": false,
    "title": "Search MCP servers"
  }
}
Showing search_servers

Findings

WebMCP use

78 / 100 · weight 50
passTools registered
4 / 4
5 tools registered across 1 page.
failReal-browser eligible
0 / 8
The page's code registers these tools, but a real visitor's browser does not get them yet: WebMCP needs a native modelContext or a current origin trial token, and this page has neither.
passRegistration timing
4 / 4
Every measured tool registered within 301ms of navigation.
toolget_current_page
passCanonical entry point
4 / 4
All 5 tools register on the canonical document.modelContext entry point.
passSchema validity
5 / 5
All 5 tools declare a structurally valid object input schema.
warningSchema quality
3.2 / 4
1 of 5 tool schemas are harder for an agent to use than they need to be: list_top_servers declares no required list, so an agent cannot tell which parameters are mandatory.
toollist_top_servers
list_top_servers: declares no required list, so an agent cannot tell which parameters are mandatory
fix
{
  name: "list_top_servers",
  inputSchema: {
    type: "object",
    properties: {
      query: { type: "string", description: "What to search for" }
    },
    required: ["query"]
  }
}
passStub detection
5 / 5
All 5 tools declare an execute handler.
passAnnotations present
4 / 4
All 5 tools declare a readOnlyHint, so an agent knows which calls change state.
passAnnotation mismatch
3 / 3
No tool claims to be read-only while its name says it writes (5 declared hints checked).
not applicableUntrusted content hint
0 / 2
No tool's contract suggests it returns text written by somebody other than the site, so there is nothing to flag as untrusted.
passRegistration errors
2 / 2
No tool registration threw during the capture.
warningToolchange coherence
1 / 2
5 tools were registered but the page never dispatched a toolchange event, so an agent subscribed to registry updates never learns they exist.
fix
document.modelContext.dispatchEvent(new Event("toolchange"));
not applicableInjection surface
0 / 3
The injection-surface model hop returned no usable result, so tool contracts were not reviewed for injection surface.

Usefulness

90 / 100 · weight 30
warningNaming quality
1.8 / 2
Tool naming makes selection harder than it needs to be: 1 name does not start with a verb (open_server_page).
toolopen_server_page
fix
{ name: "open_server_page" /* short, unique, verb-based */ }
not applicableDescription quality
0 / 6
The description-quality model hop returned no usable result, so descriptions were not rated.
not applicableTool selection
0 / 14
The tool-selection model hop returned no usable result.
not applicableCoverage vs. site type
0 / 8
This tool set does not place the site in a category with a known expected tool shape, so there is no coverage baseline to score it against.

Human experience

50 / 100 · weight 20
warningHuman parity
4 / 8
5 of 5 tools run through the JavaScript API with no visible counterpart, so the person co-browsing cannot see what the agent is offered. Declarative forms (or at least a title annotation) close the gap.
toolsearch_servers
search_servers, get_server_details, list_top_servers, get_current_page, open_server_page
fix
<!-- Give the tool a visible counterpart: a declarative form is one the person can see and use too. -->
<form toolname="search_servers" tooldescription="...">
  <!-- the same action, as UI -->
</form>
not applicablePage experience
0 / 12
The page-experience model hop returned no usable result, so the page was not graded.

Tool selection

The tool-selection model hop returned no usable result.
how this was captured
chrome
148.0.7778.96
capture shim
v1
spec snapshot
2026-08
mode
fast
pages
1
tools
5
run time
4s
finished
Aug 28, 2026