The state of agent tools
What our own probes see across 92,977 listings (x402 APIs, MCP servers and A2A agents): how many answer, which protocol versions they speak, how ready they are for an agent to call, and what they charge.
As of 2026-11-11 06:00 UTC Methodology JSON CSV Cite
Only 55.9% of indexed MCP servers complete a full handshake, and 30.0% of A2A agents answer JSON-RPC.
Each step keeps only the listings that passed the one before. Indexed is everything any source lists; the last step is our readiness grade A or B.
x402 APIs
-
Indexed24,410100.0% of indexed
-
Has an endpoint24,410100.0% of indexed · 100.0% of previous
-
Reachable10,03741.1% of indexed · 41.1% of previous
-
Valid 402 challenge seen7,65031.3% of indexed · 76.2% of previous
-
Readiness A or B5,16421.2% of indexed · 67.5% of previous
MCP servers
-
Indexed61,233100.0% of indexed
-
Has a remote endpoint60,61099.0% of indexed · 99.0% of previous
-
Reachable52,57085.9% of indexed · 86.7% of previous
-
Full handshake (initialize + tools/list)34,21555.9% of indexed · 65.1% of previous
-
Readiness A or B33,63054.9% of indexed · 98.3% of previous
A2A agents
-
Indexed7,334100.0% of indexed
-
Has an Agent Card URL7,23998.7% of indexed · 98.7% of previous
-
Card fetched6,28785.7% of indexed · 86.8% of previous
-
Answers JSON-RPC2,19930.0% of indexed · 35.0% of previous
-
Readiness A or B98913.5% of indexed · 45.0% of previous
42.2% of MCP servers are listed by more than one directory.
Which directories and registries list what we index, and how many of their listings answered our last probe. A listing found by several sources is counted once in the index.
x402 APIs
| Source | Listings | Reachable |
|---|---|---|
| x402scan | 15,217 | 24.9% |
| cdp-bazaar | 4,475 | 62.7% |
| own crawl of MCP listings | 3,803 | 87.2% |
| own x402 crawl | 2,186 | 87.6% |
| own crawl of A2A cards | 1,635 | 80.8% |
| paygent-discover | 1,467 | 55.3% |
| awesome-x402 | 842 | 65.9% |
| provider submissions | 774 | 68.0% |
MCP servers
| Source | Listings | Reachable |
|---|---|---|
| mcp-registry | 40,457 | 90.9% |
| agenstry | 19,502 | 79.4% |
| own /.well-known crawl | 17,649 | 93.6% |
| smithery | 13,412 | 83.3% |
| capkey | 9,484 | 96.7% |
| pulsemcp | 5,331 | 79.8% |
| chiark | 2,986 | 68.7% |
| apify | 790 | 90.0% |
A2A agents
| Source | Listings | Reachable |
|---|---|---|
| agenstry | 5,263 | 87.1% |
| own /.well-known crawl | 2,477 | 91.2% |
| a2a-registry | 1,035 | 91.9% |
| a2aregistry | 856 | 83.6% |
| provider submissions | 155 | 88.4% |
| chiark | 95 | 0.0% |
| awesome-a2a | 50 | 90.0% |
| manual | 11 | 72.7% |
29.1% of reachable A2A agents declare 1.x; 1.3% carry a signature that verifies.
The protocol revision each reachable listing reports: the MCP version returned by initialize, the A2A version declared in the Agent Card, and the x402 version seen in the 402 challenge.
MCP protocol version
| Revision | Share | Count | % |
|---|---|---|---|
| 2026-07-28 | 3,997 | 7.6% | |
| 2025-11-25 | 18,500 | 35.2% | |
| 2025-06-18 | 5,435 | 10.3% | |
| 2025-03-26 | 5,758 | 11.0% | |
| 2024-11-05 | 1,397 | 2.7% | |
| Non-standard | 20 | 0.0% | |
| Not reported | 17,463 | 33.2% |
A2A protocol version
| Declared | Share | Count | % |
|---|---|---|---|
| 1.x | 1,829 | 29.1% | |
| 0.3 | 2,259 | 35.9% | |
| 0.2 and older | 140 | 2.2% | |
| Other | 91 | 1.4% | |
| Not declared | 1,968 | 31.3% |
Agent Card signatures: 84 verify, 225 present but do not verify, 5,978 unsigned.
x402 version (resource probe)
| Version | Share | Count | % |
|---|---|---|---|
| v2 | 982 | 12.8% | |
| v1 | 217 | 2.8% | |
| Not recorded | 6,451 | 84.3% |
Reachable A2A agents lose the most readiness points on Live JSON-RPC and JWS signature.
Readiness grades whether an agent could call the listing today: protocol checks, declarations, uptime and freshness. It is shown on each listing and does not change search order, which uses the quality score.
| Protocol | Grade mix | A | B | C | D | F |
|---|---|---|---|---|---|---|
| x402 APIs | 1,240 5.1% | 3,924 16.1% | 3,243 13.3% | 10,203 41.9% | 5,767 23.7% |
|
| MCP servers | 964 1.6% | 32,666 53.3% | 1,516 2.5% | 17,155 28.0% | 8,932 14.6% |
|
| A2A agents | 51 0.7% | 938 12.8% | 1,572 21.4% | 2,455 33.5% | 2,318 31.6% |
Where reachable A2A agents lose points (average per agent)
| Live JSON-RPC | −13.9 | |
| JWS signature | −9.8 | |
| Verified identity | −6.3 | |
| Protocol version | −5.2 | |
| Security declaration | −4.4 | |
| Skill declaration | −3.1 | |
| Freshness + modern flags | −2.1 | |
| Valid Agent Card | −0.6 | |
| Uptime (30 days) | 0 |
Median response is 371 ms for MCP and 222 ms for x402.
30-day uptime counts only listings with at least five probes; probes a host refused (HTTP 429, or a 403 we were not let through) are left out. Latency is the last successful probe from our server.
x402 APIs
- Median latency
- 222 ms
- p95 latency
- 1,071 ms
30-day uptime (23,796 tracked)
| Uptime | Share | Count | % |
|---|---|---|---|
| 100% | 8,700 | 36.6% | |
| 95–99% | 218 | 0.9% | |
| 80–94% | 587 | 2.5% | |
| 50–79% | 572 | 2.4% | |
| <50% | 13,719 | 57.7% |
MCP servers
- Median latency
- 371 ms
- p95 latency
- 1,186 ms
30-day uptime (58,798 tracked)
| Uptime | Share | Count | % |
|---|---|---|---|
| 100% | 46,745 | 79.5% | |
| 95–99% | 2,518 | 4.3% | |
| 80–94% | 1,433 | 2.4% | |
| 50–79% | 686 | 1.2% | |
| <50% | 7,416 | 12.6% |
A2A agents
- Median latency
- 373 ms
- p95 latency
- 1,125 ms
30-day uptime (0 tracked)
Probe history is still building; uptime appears once listings have five probes.
The median x402 API's cheapest call costs $0.01; 65.1% charge a cent or less.
Prices are the cheapest call each reachable API advertises in its payment terms, in USD. They are list prices, not revenue. Payment evidence says how we know a listing takes payment at all.
Cheapest call per API (6,771 priced)
- p10
- $0.002
- p25
- $0.008
- p50
- $0.01
- p75
- $0.03
- p90
- $0.15
| Price band | Share | Count | % |
|---|---|---|---|
| ≤ $0.001 | 597 | 8.8% | |
| ≤ $0.005 | 1,050 | 15.5% | |
| ≤ $0.01 | 2,758 | 40.7% | |
| ≤ $0.05 | 1,323 | 19.5% | |
| ≤ $0.10 | 329 | 4.9% | |
| ≤ $1 | 533 | 7.9% | |
| > $1 | 181 | 2.7% |
Settlement network
| Network | Share | Count | % |
|---|---|---|---|
| Base | 6,942 | 90.7% | |
| Solana | 279 | 3.6% | |
| Not recorded | 195 | 2.5% | |
| Polygon | 60 | 0.8% | |
| Testnets | 34 | 0.4% | |
| Arc | 15 | 0.2% | |
| Stripe | 9 | 0.1% | |
| Other | 116 | 1.5% |
Payment evidence
| Strongest evidence | Share | Count | % |
|---|---|---|---|
| Live 402 challenge | 7,650 | 76.2% | |
| x402 manifest | 2,072 | 20.6% | |
| Catalog listing only | 315 | 3.1% |
72.6% of reachable MCP servers do not say how to authenticate.
How a caller is expected to authenticate, as declared by the listing. MCP servers that accept x402 are counted as pay-per-call even when they also take a key.
MCP servers
| Declared access | Share | Count | % |
|---|---|---|---|
| Open (declared) | 174 | 0.3% | |
| API key or token | 14,062 | 26.7% | |
| OAuth | 124 | 0.2% | |
| x402 pay-per-call | 30 | 0.1% | |
| Not declared | 38,180 | 72.6% |
A2A agents (Agent Card security)
| Declared scheme | Share | Count | % |
|---|---|---|---|
| mTLS | 75 | 1.2% | |
| OAuth2 + PKCE | 120 | 1.9% | |
| Other declared scheme | 1,048 | 16.7% | |
| Declared public | 347 | 5.5% | |
| Not declared | 4,697 | 74.7% |
32 MCP servers are flagged by our static safety scan.
A static scan of MCP tool names and descriptions for prompt-injection and data-exfiltration patterns. Flagged servers stay listed with a warning; a clean result is not a security review.
Verdicts (60,610 scanned)
- clean
- 60,578
- suspicious
- 32
- malicious
- 0
Rules that fired
- tool poisoning coercion
- 18
- data exfil coercion
- 6
- prompt injection
- 5
- bare ip url
- 2
- install lure
- 1
'payment' is 8.6% of reachable A2A agents but 1.7% of MCP servers.
Share of reachable listings whose name or description mentions each topic word. Darker cells mean a larger share; compare across a row to see where one protocol has supply and another has little.
| Topic | x402 APIs | MCP servers | A2A agents |
|---|---|---|---|
| ai | 22.3% | 24.4% | 33.3% |
| search | 4.9% | 11.6% | 7.5% |
| data | 12.4% | 9.6% | 13.5% |
| github | 3.3% | 4.4% | 1.1% |
| code | 3.6% | 3.2% | 3.3% |
| payment | 8.5% | 1.7% | 8.6% |
| web | 5.0% | 2.4% | 5.3% |
| 2.5% | 2.6% | 2.7% | |
| video | 0.9% | 2.6% | 1.3% |
| llm | 2.9% | 1.5% | 4.7% |
| crypto | 4.8% | 1.1% | 3.9% |
| wallet | 5.1% | 0.9% | 5.0% |
| image | 1.7% | 1.9% | 1.1% |
| 1.2% | 1.6% | 1.3% | |
| analytics | 0.9% | 1.6% | 1.1% |
| document | 1.2% | 1.4% | 2.0% |
| security | 2.3% | 1.1% | 2.6% |
| social | 1.2% | 1.4% | 1.6% |
| news | 1.4% | 1.1% | 1.3% |
| knowledge | 0.4% | 1.1% | 2.2% |
Largest gaps
- payment: 8.6% of A2A agents, 1.7% of MCP servers
- wallet: 5.1% of x402 APIs, 0.9% of MCP servers
4,673 listings were first seen in the last 7 days.
Listings by the day any source first showed them to us, over the last 90 days. Our crawlers started at different dates, so early spikes partly reflect when a source was added.
x402 APIs
- New in 7 days
- 872
- Went down in 7 days
- 661
MCP servers
- New in 7 days
- 3,476
- Went down in 7 days
- 453
A2A agents
- New in 7 days
- 325
- Went down in 7 days
- 85
Methodology
Every number is a count over the agent-tools.cloud index at the time shown above, recomputed once a day after our probes run. It is not a census of the whole ecosystem: listings no public source has shown us are missing, and private deployments are invisible to us.
Funnel. Reachable means the last probe got a valid answer. Verified means a valid 402 challenge for x402, a full MCP initialize plus tools/list, or an A2A JSON-RPC reply on the declared interface.
Sources. Duplicates across sources are merged by endpoint; each source a listing came from is kept.
Protocols. Versions are what the listing reports or declares; we do not infer them from behaviour. A2A signatures are verified against the key the card points to on its own site.
Readiness. Criteria and weights are on the About page. Points earned from live probes decay after 30 days without a fresh one.
Reliability. One probe per listing per day from one server; latency includes our network path and is not a provider SLA.
x402. Price per API is the lowest amount its payment terms ask for one call, in USD (USDC read at par). The x402 version is counted only where our resource probe recorded it. Settlement network falls back to the chains a listing declares when the challenge does not name one.
Access. Declared by the listing or its card; not tested with credentials.
Safety. Pattern rules over tool metadata only; no code is executed.
Topics. Whole-word match of a fixed word list on name and description. Listings whose text names more than five topics (gateway catalogues) are left out: 1,201 x402 APIs, 169 MCP servers, 55 A2A agents.
Growth. Earliest first-seen date across a listing's sources.
Cite and download
Free to reuse under CC BY 4.0 with a link to this page. The full snapshot is at /stats.json; headline numbers for every day are at /stats/daily.csv.
agent-tools.cloud. "The state of agent tools." 2026-11-11. https://agent-tools.cloud/stats
@misc{agenttools_stats_20261111,
author = {agent-tools.cloud},
title = {The state of agent tools},
year = {2026},
note = {Snapshot 2026-11-11 06:00 UTC},
url = {https://agent-tools.cloud/stats}
}