{"slug": "850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say", "title": "850 MCP servers describe a tool that moves money. Here is what the tool lists say.", "summary": "A developer built ProtocolProbe, a tool that read the tool lists of 23,655 MCP servers (385,096 tools) from the official registry without invoking any tool, classifying what each description says it does. The scan found 850 servers with tools that move money, 481 that control a browser or desktop, 1,540 that run code or commands, and 2,696 that send messages, while 8,710 servers only answer questions. The developer argues that reading a server's tool list, not its registry listing, is the way to decide what an agent should be allowed to connect to.", "body_md": "Most people ask whether an MCP server is *popular*. Fewer ask what its tools are *allowed to do* once an agent connects.\n\nI read the tool list of every MCP server I could open in the official registry, and counted what the tool descriptions say each tool does. No tool was called, anywhere.\n\nRegistry list of 2026-10-27: 51,168 servers. I opened a live, read-only session with 25,335 of them and read the tool lists of **23,655 servers (385,096 tools)**.\n\nA server is counted under every kind it has a tool of, so the rows overlap and do not add up to 23,655.\n\n| What a tool's description says it does | Servers | \n|---|---|\n| reads or searches | 20,019 | \n| creates or changes data | 6,437 | \n| sends messages | 2,696 | \n| runs code or commands | 1,540 | \n| moves money (payment or financial) | 850 | \n| controls a browser or desktop | 481 | \n| manages infrastructure | 125 | \n\nLooking at what each server *mainly* works on instead: 8,710 only answer questions and touch nothing outside themselves, 4,072 work on accounts and data in outside web services, 1,978 on files and code on the machine they run on, and 756 on money, payments or trading.\n\nAn agent with a payments tool and a \"send message\" tool in one session is a different risk from one that only searches. The registry's required fields are a name, a description and a version, so a listing alone does not tell you which of these a server has. Reading the tool list does.\n\nA practical use: before you add a server to an agent, look up which kinds of tool it has, and give the agent only what the task needs.\n\nEach list opens the servers with that kind of tool, each with its source and the date it was read:\n\nMethod and corrections: [protocolprobe.com/methodology](https://protocolprobe.com/methodology) and [protocolprobe.com/corrections](https://protocolprobe.com/corrections). The same data is in a free API (no key) and a citable dataset: [protocolprobe.com/docs/cite](https://protocolprobe.com/docs/cite).\n\nI built ProtocolProbe. If a label looks wrong to you, tell me in the comments and I will check it.", "url": "https://wpnews.pro/news/850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say", "canonical_source": "https://dev.to/sultan57git/850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say-4faa", "published_at": "2026-10-28 18:02:29+00:00", "updated_at": "2026-10-28 18:11:25.580118+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-tools", "ai-safety"], "entities": ["ProtocolProbe", "Model Context Protocol", "MCP registry"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say", "markdown": "https://wpnews.pro/news/850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say.md", "text": "https://wpnews.pro/news/850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say.txt", "jsonld": "https://wpnews.pro/news/850-mcp-servers-describe-a-tool-that-moves-money-here-is-what-the-tool-lists-say.jsonld"}}