For server operators

What UND Assay reads from MCP servers, and how to ask us to stop or correct something.

What we read from servers themselves

For servers that publish a remote address, we connect the way any AI client does, once every few days, and record two public things:

• the sign-in information the server publishes (its OAuth discovery documents);
• the list of tools it offers (the MCP tools/list answer).

We send no credentials and never call a tool. Our requests identify themselves as UND-Assay-Evidence and come from Cloudflare's network. A server that asks for sign-in is recorded as "requires sign-in". The tool descriptions a server returns are its own words and are shown as unverified text.

Ask us to stop, or correct an entry

To ask us to stop reading your server, or to object to or correct what we show about you or your tool, write to [email protected]. Publishers can also open a dispute on any statement.

What a listing does and does not mean

• Being listed is not a check. An entry is Listed until our checks run on it, and it says so.
• Each tool page shows where that tool was found and links every statement to the public record it came from.

Licence notices

Parts of the catalog are derived from the Docker MCP Registry, MIT License, Copyright (c) 2025 Docker (full licence text).