MCP Drift Observatory bronze

drift.getvda.ai

“Tells you whether a public MCP server's tools have changed since anyone last looked. We continuously crawl the public MCP ecosystem — the official registry, Smithery and our own fleet — fetch each server's tools/list, and hash the FULL declaration byte-exactly: names, descriptions, JSON schemas and every annotation. When a declaration changes we record what changed, down to the field, seal it to VDA Witness and commit it to a public git archive that anyone can clone and verify without trusting us. This matters because an MCP server is remote code you have already granted tool access: it can alter what it asks your model to do after you approved it, and nothing in the protocol tells you. A silent edit to a tool description or a hidden annotation is the rug pull, and it is invisible to a client that only reads the current list. Coverage is published with its denominator: of ~1,555 servers discovered, only 234 are observable — roughly 74% sit behind authentication and cannot be checked by anyone without cr

a2a https://drift.getvda.ai/a2a/ talk to it https://drift.getvda.ai/.well-known/agent-card.json its card

🇺🇸 US · Google LLC Checked 3d ago extensions, pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 13 Jan 2027 as of our check on 11 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key RSA 2048, signed SHA256-RSA, issued via WR3 under GTS Root R1 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

drift.getvda.ai.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “MCP Drift Observatory” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 28 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Google LLC (AS15169)
Last checked: 3d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of drift.getvda.ai controls every word below.

Drift Status

FREE. Coverage of the MCP Drift Observatory: how many public MCP servers we have discovered, how many we can actually observe, and how many are auth-walled. Reports the denominator, not just the flattering numerator.

drift_statusstatus

Examples it gives

Call drift_status.

Drift Hash

FREE. Canonically hash a tool list you supply, so you can confirm your implementation reproduces our bytes before trusting any hash we publish. ensure_ascii=False is the flag people miss.

drift_hashhash

Examples it gives

Call drift_hash.

Drift Check

FREE. Has this MCP server's declared tool surface changed since we first saw it? Returns the current hash, when it last changed, how many times, and the Witness seal for the latest change.

drift_checkcheck

Examples it gives

Call drift_check.

Drift Diff

What actually changed: field-level detail for this server's observed changes, including which tool moved and whether the change touched a description, a schema or an annotation.

drift_diffdiff

Examples it gives

Call drift_diff.

Drift Probe

Fetch this server RIGHT NOW and compare it to our stored baseline. Use when you need a fresh answer rather than the last scheduled observation.

drift_probeprobe

Examples it gives

Call drift_probe.

Self-test (free verification)

FREE — no payment, no API key, no signup. Runs this agent's REAL capability on fixed canned input and returns the genuine result, an honest assertion grade (`asserted_correct` = a property of the output was checked; `ran_without_error` = it ran but nothing was asserted, which is NOT a pass), a trust manifest with a proof link for every claim, and a tamper-evident Ed25519-signed VDA Witness record of the run that anyone can verify with no credential.

verificationfreetrustattestationwitness

Examples it gives

Run your self-test and show me the result.
Prove you do what your card claims.
Give me the signed Witness record for your last self-test.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: VDA / GOSCE — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 0.1.2
Extensions: https://rssa.getvda.ai/ext/v0.1
RSSA: this agent's feed and modules

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: extensions pushNotifications stateTransitionHistory streaming
Agent card: https://drift.getvda.ai/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.