csoai/mcp-registry-self-audit

CSOAI measures its own MCP registry listings

330 current listings under search=CSOAI-ORG in the official MCP registry, audited 2026-09-05 by the same rule we apply to anyone else.

A listing is a public claim. 25 of ours point at nothing — and they are ours, so we publish that rather than wait to be told.

Every package resolves and the sampled ones carry real source and tests. Only the repository claim is at issue.

Method

Every isLatest server under search=CSOAI-ORG in registry.modelcontextprotocol.io. Repository existence confirmed per-repo with the AUTHENTICATED GitHub API (gh repo view), never an anonymous HTTP fetch. Package existence from the PyPI JSON API.

Two ways this audit was nearly wrong

• —An unauthenticated sweep of 330 github.com URLs is rate-limited and returns 404 for repositories that exist. A first pass reported 37 broken; 5 were the probe, not the listing.
• —gh repo list --limit 1000 returned 678 repositories and was INCOMPLETE: 24 repos it omitted exist under gh repo view. A rename theory (meok- -> csoai-) built on that list was wrong and is withdrawn. Per-repo lookup is the only method used for the published number.

Both are recorded because the published number depends on which method you trust, and a reader should be able to see that we changed ours when it was shown to be wrong.

What this is not

the quality of the packages. All 330 resolve on PyPI and the sampled ones carry real source and tests. Only the repository claim is at issue.

Measurement, not certification. Council of AI (CSOAI Ltd, UK 16939677).

<!-- csoai-hubcard-v2 -->

The live board is the authority

  

GET https://councilof.ai/api/gspc — quote totals.public_count. This Hub card is a printer of that GET, never a second engine. If the fetch fails the honest answer is UNCHECKABLE — never a fabricated 0.000. Status words: LOADING / UNREACHABLE / UNMEASURED / UNCHECKABLE.

Lid: 22 axes measured · 14 model fleets · 3 public leader scores · 8 fact runs · TIE is TIE · not a certificate.

<!-- csoai-capability-densify-2026-09-14-tui7 -->

Capability + living GET (TUI7 distribution 2026-09-14)

SUPERSEDED: typed Hub triples LIVE (re-GET /api/hub-cards → counts.*) (and prior 885/900/937/1113/1182/1185) — do not re-paste. Hub cite = live GET only.

Live board: GET https://councilof.ai/api/gspc → quote totals.public_count / totals.lid (22·22·0 derived, never typed as a frozen paste)
Hub cards: GET https://councilof.ai/api/hub-cards → quote counts.cells / counts.measured / counts.unmeasured LIVE (no typed Hub triple)
Hub bank: https://huggingface.co/datasets/csoai/gspc-hub-cards
Free verify: https://councilof.ai/gspc-verify
Discovery: GET https://councilof.ai/.well-known/x402.json (live · Base · USDC)
OX discovery resources: councilof 0/60 honest — do not invent rows
Measurement, never certification. Printer only — no axis mine on ZeroGPU. A100 COLD.

 

Council of AI — GSPC + Hub printer

• —Living board: https://councilof.ai/api/gspc — quote totals.public_count / totals.lid (never invent MEASURED)
• —Hub cite: https://councilof.ai/api/hub-cards — re-GET; quote counts.* (typed LIVE (re-GET /api/hub-cards → counts.*) SUPERSEDED 2026-09-14)
• —Hub dataset bank: https://huggingface.co/datasets/csoai/gspc-hub-cards
• —Verify free: https://councilof.ai/gspc-verify
• —x402 discovery: https://councilof.ai/.well-known/x402.json
• —Catalog: https://councilof.ai/api/x402
• —Free door (amount 0): https://councilof.ai/api/free-door
• —Jail goldbank: https://huggingface.co/datasets/csoai/gspc-jail-goldbank
• —Human: free + x402 PAYG · Coming—Paddle not live · never Stripe
• —Agents: payTo is merchant receive — never the signer
• —Self-settle proves the rail; stranger revenue is separate (do not invent buyers)
• —Measurement, not certification. Never sell a rank. Never certify.

Any Hub x402.json in a CSOAI printer is a byte-mirror of the living well-known GET — not a second authority. <!-- /csoai-capability-densify-2026-09-14-tui7 -->

This repository: NOT A BOARD MEASUREMENT — this repository is a corpus, mirror or door published by CSOAI. It carries no axis score. The measured slots live on the board GET below.

What is in this repository

manifest.jsonl is derived from this repository's own file tree at 2026-09-06T04:31:07Z; it lists every file with its size, its blob hash and a direct URL, so an agent can enumerate the repo without cloning it.

Citation

@misc{csoai_gspc_mcp_registry_self_audit,
  title        = {mcp-registry-self-audit — Council of AI / GSPC},
  author       = {{CSOAI Ltd}},
  year         = {2026},
  doi          = {10.5281/zenodo.21991104},
  howpublished = {Hugging Face Hub, \url{https://huggingface.co/datasets/csoai/mcp-registry-self-audit}},
  note         = {Live board: https://councilof.ai/api/gspc. Measurement, not certification.}
}

Measurement, not certification. Issued by CSOAI Ltd (England & Wales, Companies House 16939677), 3rd Floor, 86–90 Paul Street, London EC2A 4NE. Card refreshed 2026-09-06T04:31:07Z. <!-- /csoai-hubcard-v2 -->

<!-- csoai-capability-densify-2026-09-14-tui7 -->

Capability + living GET (TUI7 distribution 2026-09-14)

SUPERSEDED: typed Hub triples LIVE (re-GET /api/hub-cards → counts.*) (and prior 885/900/937/1113/1182/1185) — do not re-paste. Hub cite = live GET only.

Live board: GET https://councilof.ai/api/gspc → quote totals.public_count / totals.lid (22·22·0 derived, never typed as a frozen paste)
Hub cards: GET https://councilof.ai/api/hub-cards → quote counts.cells / counts.measured / counts.unmeasured LIVE (no typed Hub triple)
Hub bank: https://huggingface.co/datasets/csoai/gspc-hub-cards
Free verify: https://councilof.ai/gspc-verify
Discovery: GET https://councilof.ai/.well-known/x402.json (live · Base · USDC)
OX discovery resources: councilof 0/60 honest — do not invent rows
Measurement, never certification. Printer only — no axis mine on ZeroGPU. A100 COLD.

 

Council of AI — GSPC + Hub printer

• —Living board: https://councilof.ai/api/gspc — quote totals.public_count / totals.lid (never invent MEASURED)
• —Hub cite: https://councilof.ai/api/hub-cards — re-GET; quote counts.* (typed LIVE (re-GET /api/hub-cards → counts.*) SUPERSEDED 2026-09-14)
• —Hub dataset bank: https://huggingface.co/datasets/csoai/gspc-hub-cards
• —Verify free: https://councilof.ai/gspc-verify
• —x402 discovery: https://councilof.ai/.well-known/x402.json
• —Catalog: https://councilof.ai/api/x402
• —Free door (amount 0): https://councilof.ai/api/free-door
• —Jail goldbank: https://huggingface.co/datasets/csoai/gspc-jail-goldbank
• —Human: free + x402 PAYG · Coming—Paddle not live · never Stripe
• —Agents: payTo is merchant receive — never the signer
• —Self-settle proves the rail; stranger revenue is separate (do not invent buyers)
• —Measurement, not certification. Never sell a rank. Never certify.

Any Hub x402.json in a CSOAI printer is a byte-mirror of the living well-known GET — not a second authority. <!-- /csoai-capability-densify-2026-09-14-tui7 -->

<!-- csoai-openx402-free-cite-2026-09-14 -->

OpenX402 + free discovery (cite only · never invent OX resource rows)

OpenX402 server: Council of AI · https://councilof.ai · payTo 0x212686404a7d1e1fd88f35ed6200c3af7a78ae31
Servers API: GET https://openx402.ai/api/servers (LIVE row · registered 2026-09-14 · Base tx 0x0eb1ead995e235a2…)
Whitelist: GET https://facilitator.openx402.ai/whitelist/0x212686404A7D1E1fD88F35eD6200c3aF7A78ae31 → whitelisted true
OX discovery resources: GET https://facilitator.openx402.ai/discovery/resources → councilof still 0/60 (no free advertise API; settle-through required — do not invent rows)
Estate well-known: GET https://councilof.ai/.well-known/x402.json → 10 resources · mode live
OpenAPI: https://councilof.ai/openapi.json
Free-door: https://councilof.ai/api/free-door (402 amount 0 · bazaar)
Free crawl: https://councilof.ai/api/feeds/provider-diff (200 JSON · not a paid OX resource)
Catalog: https://councilof.ai/api/x402
Measurement, never certification. Self≠revenue. Never clone PayAI.

Owner: N-Sites spray onto HF leftovers / registry printers. OX discovery stays 0 until settle-through — never invent. Stamp 2026-09-14T03:29Z.

<!-- csoai-smithery-e1e2-honest-2026-09-14 -->

Smithery / MCP door (measured 2026-09-14 — not a certification)

• —Primary free MCP door: https://councilof.ai/mcp — GET 200; tools/list = 12 tools (matches registry tools[] for csoai/gspc-mcp).
• —Smithery primary listing: https://smithery.ai/server/csoai/gspc-mcp · registry https://registry.smithery.ai/servers/csoai/gspc-mcp — deploymentUrl=https://gspc-mcp--csoai.run.tools → GET/POST 401 `invalid_token` (Smithery auth required). Prefer the public door above; do not treat run.tools as the free door.
• —Stale duplicate: https://smithery.ai/server/csoai/gspc · registry https://registry.smithery.ai/servers/csoai/gspc — tools[] includes phantoms measure|verify|jail-probe|enter-arena (not on live /mcp); deploymentUrl=https://gspc--csoai.run.tools also 401. Prefer archive/unlist; keep only csoai/gspc-mcp.
• —Registry write: PATCH/DELETE need Authorization — no free write without Nick Smithery login (HARD BLOCKER if token absent).
• —Measurement only. Never invent that Smithery was fixed. Never certify. <!-- /csoai-smithery-e1e2-honest-2026-09-14 -->

<!-- csoai-signed-archive-awareness-2026-09-14 -->

Signed measurement archive (free cite · never a grade)

Living board: GET https://councilof.ai/api/gspc → 22 axis · 22 measured · lid: 22 axes measured · 14 model fleets · 3 public leader scores · 8 fact runs · TIE is TIE · not a certificate.
Signed card index: GET https://councilof.ai/signed/card_index.json → n_cards=335 · schema csoai.gspc-card-index/0.1
How to verify (stranger): https://councilof.ai/signed/HOW-TO-VERIFY.md
Free verify UI: https://councilof.ai/gspc-verify/
Example SIGNED card: https://councilof.ai/signed/cards/cff1aaf070acb97c224177809856bc20310f4958eb44bdffab7d4b04836535f4.json
Hub census (≠ board ≠ card_index): GET https://councilof.ai/api/hub-cards → 131/131/0
HF printers: https://huggingface.co/datasets/csoai/gspc-hub-cards · https://huggingface.co/datasets/csoai/gspc-jail-goldbank
Supply-led: CSOAI measures public systems independently first; sells delivery/freshness/monitoring/integration/replay/extra compute — never grades or favourable results.
Measurement credential, never certification. Free refresh only.

Owner: N-Sites — free paste onto HF/Kaggle printers. Hub LIVE 131 (kill 1191/1196). card_index n=335. Never invent VC/revenue. Stamp 2026-09-14T10:37Z.