MCP servers without declared required secrets
MCP servers for which the registry lists neither an environment variable nor a header marked secret and required. Measured from the raw manifest values.
36,958 servers 86% of 43,176 in the directory
This category in numbers
- 23,484 64 % Execution location: remote
- 25,933 70 % Repository URL listed: yes
- 23,277 63 % Delivery form (raw): remote
- 25,838 70 % Repository platform (raw): github
The most frequent value per property, counted across the entries of this category. The full distribution is further down.
Entries
Filter further
- Execution location: local
- Execution location: remote
- Repository URL listed: yes
- Repository URL listed: no
- recently updated first
Entries 9,001 to 9,050 of 36,958
| HTML tag count, markup discarded | io.github.sadri-dridi/html-tag-count |
|---|---|
| HTML to Figma — Design System | io.github.miapre/html-to-figma-design-system |
| HTML to Markdown API | io.github.Br0ski777/html-to-markdown |
| HTML to Markdown MCP Server | io.github.sunshad0w/html2md |
| HTML/CSS to Image API | io.github.htmlcsstoimage/html-css-to-image |
| HTMLvault | com.htmlvault/htmlvault |
| HTTP | io.github.Abhishekkumar2021/http |
| HTTP 100 continue | io.github.sadri-dridi/http-100 |
| HTTP 101 switching-protocols | io.github.sadri-dridi/http-101 |
| HTTP 102 processing | io.github.sadri-dridi/http-102 |
| HTTP 103 early-hints | io.github.sadri-dridi/http-103 |
| HTTP 200 ok | io.github.sadri-dridi/http-200 |
| HTTP 201 created | io.github.sadri-dridi/http-201 |
| HTTP 202 accepted | io.github.sadri-dridi/http-202 |
| HTTP 204 no-content | io.github.sadri-dridi/http-204 |
| HTTP 206 partial-content | io.github.sadri-dridi/http-206 |
| HTTP 300 multiple-choices | io.github.sadri-dridi/http-300 |
| HTTP 301 moved-permanently | io.github.sadri-dridi/http-301 |
| HTTP 302 found | io.github.sadri-dridi/http-302 |
| HTTP 303 see-other | io.github.sadri-dridi/http-303 |
| HTTP 304 not-modified | io.github.sadri-dridi/http-304 |
| HTTP 307 temporary-redirect | io.github.sadri-dridi/http-307 |
| HTTP 308 permanent-redirect | io.github.sadri-dridi/http-308 |
| HTTP 400 bad-request | io.github.sadri-dridi/http-400 |
| HTTP 401 unauthorized | io.github.sadri-dridi/http-401 |
| HTTP 402 AI Tollbooth | io.github.RobotFleet-HQ/http-402-ai-tollbooth |
| HTTP 403 forbidden | io.github.sadri-dridi/http-403 |
| HTTP 404 not-found | io.github.sadri-dridi/http-404 |
| HTTP 405 method-not-allowed | io.github.sadri-dridi/http-405 |
| HTTP 406 not-acceptable | io.github.sadri-dridi/http-406 |
| HTTP 408 request-timeout | io.github.sadri-dridi/http-408 |
| HTTP 409 conflict | io.github.sadri-dridi/http-409 |
| HTTP 410 gone | io.github.sadri-dridi/http-410 |
| HTTP 412 precondition-failed | io.github.sadri-dridi/http-412 |
| HTTP 413 payload-too-large | io.github.sadri-dridi/http-413 |
| HTTP 414 uri-too-long | io.github.sadri-dridi/http-414 |
| HTTP 415 unsupported-media | io.github.sadri-dridi/http-415 |
| HTTP 418 teapot | io.github.sadri-dridi/http-418 |
| HTTP 422 unprocessable | io.github.sadri-dridi/http-422 |
| HTTP 425 too-early | io.github.sadri-dridi/http-425 |
| HTTP 426 upgrade-required | io.github.sadri-dridi/http-426 |
| HTTP 428 precondition-required | io.github.sadri-dridi/http-428 |
| HTTP 429 too-many-requests | io.github.sadri-dridi/http-429 |
| HTTP 431 header-fields-too-large | io.github.sadri-dridi/http-431 |
| HTTP 451 unavailable-legal | io.github.sadri-dridi/http-451 |
| HTTP 500 internal-error | io.github.sadri-dridi/http-500 |
| HTTP 501 not-implemented | io.github.sadri-dridi/http-501 |
| HTTP 502 bad-gateway | io.github.sadri-dridi/http-502 |
| HTTP 503 unavailable | io.github.sadri-dridi/http-503 |
| HTTP 504 gateway-timeout | io.github.sadri-dridi/http-504 |
All 36,958 entries in the list, with filters and pagination
What this category selects
| Required secrets declared | no derived from: Required secret variables (raw) |
|---|
A derived value carries its original data beside it; the derivation rule is published, with a version, on the methodology page.
Caveats, distribution and query
What this category does not say
- Required secrets declared is not declared but computed: from Required secret variables (raw), Required secret headers (raw). The rule is published, with a version, on the methodology page.
What is measured is what a manifest declares, not what a piece of software does. This registry fetches no repository URL, no endpoint and no package index; nothing here is verified. Which value comes from which source, and by which rule it was formed, is set out in the Methodology.
Every sentence here follows from the condition above, not from an assessment.
How this category is distributed
Delivery form (raw)
36,934| remote | 23,277 63 % |
|---|---|
| package | 11,871 32 % |
| package and remote | 1,287 3.5 % |
| neither | 499 1.4 % |
not recorded for 24 entries
Execution location
36,958| remote | 23,484 64 % |
|---|---|
| local | 13,474 36 % |
Repository platform (raw)
36,934| github | 25,838 70 % |
|---|---|
| nothing declared | 11,018 30 % |
| gitlab | 78 0.2 % |
not recorded for 24 entries
Repository URL listed
36,958| yes | 25,933 70 % |
|---|---|
| no | 11,025 30 % |
Icon formats (raw)
36,934| nothing declared | 33,007 89 % |
|---|---|
| image/png | 2,359 6.4 % |
| image/png, image/svg+xml | 868 2.3 % |
| image/svg+xml | 620 1.7 % |
| image/webp | 40 0.1 % |
| image/jpeg | 31 0.1 % |
and 6 more values · not recorded for 24 entries
Schema version of the raw record (raw)
36,934| https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | 34,423 93 % |
|---|---|
| https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json | 1,293 3.5 % |
| https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json | 536 1.5 % |
| https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json | 528 1.4 % |
| https://static.modelcontextprotocol.io/schemas/2025-09-16/server.schema.json | 145 0.4 % |
| https://static.modelcontextprotocol.org/schemas/2025-12-11/server.schema.json | 3 0.0 % |
and 5 more values · not recorded for 24 entries
Per property, the measured values inside this category. The share refers to the 36,958 entries of the category, not to the registry. Shown are 6 of 7 properties: those whose values spread the most inside this category.
The same category through the interface
curl -s "https://api.tracevero.com/v1/eintraege?art=mcp_server&zugangsdaten_erforderlich=false&grenze=200"
The command carries exactly the condition of this page. 36,958 entries at 200 each are 185 requests; the total is in the X-Gesamt header.
Changes to these entries
https://tracevero.com/aenderungen.atom?thema=ohne-zugangsdaten
Both addresses narrow the change stream to exactly the entries in this category. The feed carries an identifier of its own, so a feed reader keeps it apart from the full stream.
Categories sharing entries with this one
Per neighbour its own size and the counted number of shared entries. A category without a single shared entry is not listed here.
tracevero · https://tracevero.com/themen/ohne-zugangsdaten?seite=181