GAIP Agent Observatory
State of public AI agents, October 2026
What GAIP observed across public MCP servers and A2A agents: how many answered, which protocol versions they report, how many ask for credentials and which discovery standards hosts publish. Aggregate facts only; no party is scored or ranked.
GAIP Agent Web Index — October 2026 (provisional: the month has not ended)
Declared versus observed: what public AI agents declared and what changed this month. Headline figures count every public agent or host GAIP read this month (28119 agents watched). Beside each: the frozen panel AGENTS-COHORT-2026-10, 4157 public MCP servers and A2A agents on 3677 hosts. Registry size: the Official MCP Registry listed 48941 server entries in GAIP's last complete walk this month (completed 2026-10-28), 31523 of them with a remote endpoint GAIP can read; GAIP watched 27026 of its servers and read 7109 of them in the last 7 days. Aggregates only: a count is shown only when it and its total are at least 5; no host, agent or caller is named; facts are as observed by GAIP at the stated time and assess no one. A month is final only after it ends; until then it is provisional.
| Figure | All watched agents | Out of | Panel AGENTS-COHORT-2026-10 | Out of |
|---|---|---|---|---|
| Agents whose declared tools changed | 3170 of 28119 (11%) | every public MCP server and A2A agent GAIP watched when this copy was built (all sources; hosts an outside caller asked about and GAIP's own agents left out); the agents counted are among them | 618 of 4157 (15%) | every member of the frozen panel AGENTS-COHORT-2026-10 |
| Hosts whose declared terms, limits or prices changed | 1113 of 12439 (9%) | every public host whose declared terms GAIP read this month (hosts an outside caller asked about and rows under a method version with a known defect left out) | 364 of 1804 (20%) | panel hosts whose declared terms GAIP read this month (agent_terms rows) |
| Agent cards carrying a signature | 100 of 920 (11%) | every public host whose A2A agent card GAIP read this month (latest read; hosts an outside caller asked about and rows under a method version with a known defect left out) | 43 of 488 (9%) | panel hosts whose A2A agent card GAIP read this month (latest read) |
| Most frequent failure types diagnosed for outside callers | too few diagnoses to show (under 5 per type) | front-door gaip_diagnose answers to outside callers this month | ||
| ai_preference_adoption | not available this month | not available this month | ||
| Agent prices (x402 Bazaar listings) | not collected yet (switched off until the founder confirms the source terms) | |||
| ERC-8004 agent registration files | not collected yet (switched off until the founder confirms the source terms) | |||
| Reachability and response times (the 30 days to 29 October 2026) | 97.1% of 135053 visits reachable; 94.2% of 23113 agents reachable on at least 95% of visits; response time p50 231 ms, p95 1151 ms | |||
| Reachability and response times, panel AGENTS-COHORT-2026-10 | 97.3% of 85596 visits reachable; 92.2% of 3782 agents reachable on at least 95% of visits; response time p50 227 ms, p95 1138 ms | |||
What agents ask for, depend on and who runs them (latest frozen week, all watched agents): Agents whose tools ask for personal, payment or secret data (by field category): 2734 of 11881 (23%); Agents asking for payment card fields: 7 of 11881 (0%); Agents asking for email fields: 1531 of 11881 (13%); Agents asking for phone fields: 634 of 11881 (5%); Agents asking for credentials fields: 715 of 11881 (6%); Agents asking for precise location fields: 518 of 11881 (4%); Agents whose declarations point to an outside domain: 11753 of 26459 (44%); Declared operators: 20048; agents run by the 10 largest: 1463 of 26327 (6%).
Cite as: GAIP Agent Web Index, October 2026, gaipagents.com/state-of-agents?month=2026-10, CC BY 4.0. Machine-readable: /v1/free/agent-web-index. How to reproduce each figure: /v1/free/agent-web-index/queries.
Reachability and response times: the 30 days to 29 October 2026 (provisional)
Aggregate facts observed by GAIP at the stated times: how often public agents answered and how fast. Not an assessment of any party; no agent or host is named. Cells under 5 agents are withheld.
| Cohort | Protocol | Figures |
|---|---|---|
| All public agents | MCP and A2A | 97.1% of 135053 visits reachable; 94.2% of 23113 agents reachable on at least 95% of visits; response time p50 231 ms, p95 1151 ms |
| All public agents | MCP | 97.0% of 122015 visits reachable; 94.2% of 22065 agents reachable on at least 95% of visits; response time p50 242 ms, p95 1188 ms |
| All public agents | A2A | 98.3% of 13038 visits reachable; 94.6% of 1048 agents reachable on at least 95% of visits; response time p50 177 ms, p95 778 ms |
| Panel AGENTS-COHORT-2026-10 | MCP and A2A | 97.3% of 85596 visits reachable; 92.2% of 3782 agents reachable on at least 95% of visits; response time p50 227 ms, p95 1138 ms |
| Panel AGENTS-COHORT-2026-10 | MCP | 97.1% of 73851 visits reachable; 91.5% of 3332 agents reachable on at least 95% of visits; response time p50 246 ms, p95 1192 ms |
| Panel AGENTS-COHORT-2026-10 | A2A | 98.8% of 11745 visits reachable; 97.1% of 450 agents reachable on at least 95% of visits; response time p50 175 ms, p95 776 ms |
Cite as: GAIP Agent Reliability Index, the 30 days to 29 October 2026, gaipagents.com/state-of-agents, CC BY 4.0. Downloads: CSV · JSON.
Collection record
When GAIP's Observatory was running, from its own daily ledger (since 2026-10-04; 25 days frozen and hash-chained, head e07c18d0a60c2af12b4c6d3287889d8758262f2bced82fadb41caaf428785cb0).
Last 30 days: 25 days, 2635 ticks, 22 days fully covered; a tick started in 98.3% of 15-minute windows. Gaps (no tick start for more than 30 minutes): 2.
- 2026-10-09T16:34:12Z to 2026-10-09T17:32:32Z (58 min)
- 2026-10-25T18:06:02Z to 2026-10-25T20:01:30Z (1 h 55 min)
Known gaps (register, append-only):
- 2026-10-02T23:16:00Z to 2026-10-03T07:52:15Z (times partly estimated): Observatory observations: every tick claimed and observed 0 targets (tick lines showed budget_exhausted or TimeoutError), so no status observations, manifest changes or capability records were written. Cause: Registry walks read up to 20 pages from one host while the outbound gate allows 10 requests a minute per host; the 11th page raised _BudgetExhausted out of the walk, the cursor was never saved and the cycle returned before observing, on every tick (the refresh livelock). Fixed by PR #824.
- 2026-10-01T21:09:04Z to 2026-10-03T10:02:34Z (times partly estimated): About 75% (estimate) of shop-host AI-permission facts (ai_permissions dataset, shop hosts) were evicted from an in-memory queue before they were written; the rest were written. Cause: The in-memory buffer evicted entries waiting for an extra read before they were written; the shop panel did not read tdmrep.json itself. Fixed by PR #826.
- 2026-10-03T16:55:00Z to 2026-10-03T17:14:00Z (times partly estimated): One Observatory tick observed nothing: the tick right after the data5 deploy ended with DatabaseError. Cause: Deploy overlap during the PR #843 deploy (as recorded in the handover); no code fix was needed, the next tick was clean.
- 2026-09-28T00:00:00Z to 2026-10-01T19:30:20Z (times partly estimated): No independent daily timestamp (Sigstore/Rekor anchor) of the history log's chain head was kept for 28, 29 and 30 Sep 2026 or the morning of 1 Oct. The history log itself kept every entry; the 1 Oct anchor's chain head covers every entry before it, so those entries are dated no later than 1 Oct by an outside witness, not day by day. Cause: The anchor workflow's runs on 28 Sep failed twice and were then cancelled; it ran on GitHub Actions only on a push or by hand until the COO schedule dispatcher began running it daily on 1 Oct 2026 (moat moves), and dated anchor files began the same day (record durability).
Method: collection ledger and known gaps. Downloads: collection-ledger.csv · collection-ledger.json.
Week 2026-W43 (frozen)
| Public AI agents and MCP servers in the Observatory | 26826 |
|---|---|
| Observed this week | 18490 |
| Answered at least once | 13766 of 18490 (74%) |
| Median response time (ms) | 235 |
| MCP servers that asked for credentials | 4188 of 17524 (24%) |
| MCP servers listing tools without credentials | 8714 of 17524 (50%) |
| New this week | 2814 |
| Published a new manifest version | 3896 |
| Hosts probed for discovery standards | 0 |
| Protocol versions reported | 0.2.5: 5, 0.3: 22, 0.3.0: 379, 1.0: 101, 1.0.0: 19, 2024-11-05: 326, 2025-03-26: 274, 2025-06-18: 1381, 2025-11-25: 5839, 2026-07-28: 107, other_categories_under_5_each: 12 |
This week so far (2026-W44, provisional)
| Public AI agents and MCP servers in the Observatory | 28620 |
|---|---|
| Observed this week | 6285 |
| Answered at least once | 4786 of 6285 (76%) |
| Median response time (ms) | 244 |
| MCP servers that asked for credentials | 1561 of 5678 (27%) |
| MCP servers listing tools without credentials | 2651 of 5678 (47%) |
| New this week | 2039 |
| Published a new manifest version | 1925 |
| Hosts probed for discovery standards | 0 |
| Protocol versions reported | 0.3: 15, 0.3.0: 286, 1.0: 114, 1.0.0: 8, 2024-11-05: 49, 2025-03-26: 116, 2025-06-18: 508, 2025-11-25: 1717, 2026-07-28: 95, other_categories_under_5_each: 5 |
Delivery outcomes, 2026-10
What happened to calls outside callers made to GAIP's own public agents this month, and the verdicts of the Witness delivery checks they asked for. Counts about GAIP's own service only; no caller or third party is named. A share is shown only when both numbers are at least 5.
Outside calls: 2530
| Error | 101 of 2530 (4%) |
|---|---|
| Blocked | 860 of 2530 (34%) |
| Completed | 1012 of 2530 (40%) |
| Needed more input | 557 of 2530 (22%) |
| GAIP agent | Outside calls | Completed | Needed more input | Blocked | Error |
|---|---|---|---|---|---|
| witness | 122 | 43 | 0 | 73 | 6 |
| front-door | 5 | 0 | 0 | 0 | 0 |
| unattributed | 1890 | 850 | 557 | 390 | 93 |
| buyer-assurance | 1 | 0 | 0 | 0 | 0 |
| trust-assurance | 45 | 30 | 0 | 14 | 0 |
| listing-observer | 4 | 0 | 0 | 0 | 0 |
| integration-repair | 11 | 0 | 0 | 8 | 0 |
| procurement-verify | 285 | 0 | 0 | 284 | 0 |
| integration-protocol | 167 | 84 | 0 | 83 | 0 |
Witness delivery checks: 0
| Met the registered terms | 0 of None |
|---|---|
| Did not meet the registered terms | 0 of None |
| Could not be decided | 0 of None |
Outcome ledger, 2026-10
GAIP's own outcome ledger: one row per month of what happened in agent work GAIP saw, for outside callers only, frozen after the month ends and hash-chained to the month before (never changed or deleted; the chain head is signed in the daily Sigstore anchor). Counts only; categories under 5 are folded together; no caller or third party is named.
This month's row is frozen once the month has ended (from 1 November 2026).
Agentic-commerce shop panel, week 2026-W43
A fixed panel of 392 online shops (cohort shops-2026-10), read once a week: which agent-commerce discovery documents they publish and whether product prices and stock agree across a page, its structured data and the shop's UCP catalog. No shop is named; shares are shown only when both numbers are at least 5.
Shops observed: 112
| UCP profile (/.well-known/ucp) | under 5 of 112 (not shown) |
|---|---|
| /.well-known/x402 | 0 of 112 |
| llms.txt | 11 of 112 (10%) |
| A2A agent card | 0 of 112 |
| x402 payment request on the declared UCP endpoint | 0 of None |
| Products read | 22 |
| Price agreement across sources | SAME: 6, NOT OBSERVED: 16 |
| Stock agreement across sources | SAME: 5, NOT OBSERVED: 17 |
Cohort shops-2026-Q4
15759 shops drawn by region and platform with a published seed; shops observed this week: 13240
| UCP profile (/.well-known/ucp) | 184 of 13240 (1%) |
|---|---|
| /.well-known/x402 | under 5 of 13240 (not shown) |
| llms.txt | 1638 of 13240 (12%) |
| A2A agent card | 13 of 13240 (0%) |
What agents changed this week (2026-W43, frozen)
Changes to what public MCP servers and A2A agents declare, by kind. A change of the protocol version an agent answered with is not counted as the agent changing what it offers; it is shown on its own line. A substantive change is silent when no declared version (registry or card version, server version) moved that week. Observed at the stated time; no agent is named. Kinds with fewer than 5 agents show as under 5.
| Agents | All watched | Panel AGENTS-COHORT-2026-10 |
|---|---|---|
| Agents watched | 26826 | 4145 |
| Agents that changed what they declare (protocol-version-only changes left out) | 1796 of 26826 (7%) | 398 of 4145 (10%) |
| Agents whose only change was the protocol version they answered with | 4 of 26826 | 1 of 4145 |
| Agents with a substantive change (tools, descriptions, formats, labels, sign-in, terms, endpoint) | 1226 of 26826 (5%) | 282 of 4145 (7%) |
| Of those, changed without any declared version change (silent) | 685 of 1226 (56%) | 161 of 282 (57%) |
| Tools added | 525 | 130 |
| Tools removed | 95 | 20 |
| Tool descriptions re-worded | 874 | 185 |
| Input or output format changed | 656 | 118 |
| Behaviour labels changed (read-only, destructive and similar hints) | 164 | 13 |
| Sign-in requirements changed | 26 | 9 |
| Terms or prices changed | 9 | under 5 |
| Endpoint moved to another host | under 5 | under 5 |
| Declared version changed | 1042 | 217 |
| Protocol version changed | 51 | 11 |
| Tools per MCP server | 0: 7, 1: 735, 2-5: 4853, 6-10: 3334, 11-20: 1842, 21-50: 1129, 51-100: 244, 101 or more: 54 |
|---|---|
| Tools marked read-only (readOnlyHint) | 80819 of 123281 (66%) |
| Tools marked destructive (destructiveHint) | 66069 of 123281 (54%) |
| MCP servers declaring an output format on a tool | 3564 of 12191 (29%) |
| MCP sign-in asked for in the registry entry | other header: 244, none declared: 16377, authorization header: 2516, api key or token header: 688 |
| A2A sign-in scheme types | http: 66, x402: 19, apiKey: 112, oauth2: 17, httpAuth: 46, none declared: 65, other categories under 5 each: 9 |
| A2A cards mentioning x402 | 310 of 923 (34%) |
| Registry entries this week (new, changed, removed) | 2814, 2053, 51 |
Long-run records, week 2026-W43
Four dated, hash-chained records GAIP keeps for the long run: the public keys agent hosts publish, what sites tell AI systems they may do with their content, how AI clients behave at GAIP (by client family only) and what agent services promise and charge; and the public npm and PyPI facts of MCP server packages with the security advisories OSV publishes for them (maintainers counted, never named). No host, package or client is named; shares are shown only when both numbers are at least 5.
| Agent hosts with a key history this week | 3956 |
|---|---|
| Agent cards carrying a signature | 51 of 667 (8%) |
| Agent hosts publishing /.well-known/jwks.json | 136 of 2976 (5%) |
| Panel shops blocking at least one AI crawler from the home page | 633 of 10554 (6%) |
| Panel shops with a Content-Signal ai-train=no | 166 of 10554 (2%) |
| Panel shops publishing a TDMRep reservation file | 2 of 10993 |
| Agent hosts declaring terms, limits or prices | 7552 |
| Client families seen at GAIP (5+ requests) | 10 |
| MCP server packages (npm, PyPI) recorded this week | 4535 |
| Packages whose latest version declares install scripts | 218 of 4493 (5%) |
| Packages whose latest version has provenance | 1200 of 4487 (27%) |
| Packages with a published advisory affecting the latest version | 4 of 4535 |
AI-preference signals, 2026-10
How many hosts carried each machine-readable AI-preference signal when GAIP last read them this month: agent hosts (the Observatory's MCP servers and agents) and the fixed shop panel. Observed at the stated time; no host is named and nothing here assesses a site. A count is shown only when it and its total are at least 5. Parser: aipref-signals (MIT), following draft-ietf-aipref-vocab-08 (14 Sep 2026).
| Signal | Agent hosts | Panel shops |
|---|---|---|
| IETF AI preferences (Content-Usage) | 35 of 25191 (0%) | under 5 |
| IETF AI preferences: training refused | 9 of 25191 (0%) | under 5 |
| RSL licence link | 40 of 25191 (0%) | under 5 |
| W3C TDMRep file (tdmrep.json) | under 5 | under 5 |
| W3C TDMRep header | 33 of 25191 (0%) | 6 of 13802 (0%) |
| Content Signals | 2496 of 25191 (10%) | 367 of 13802 (3%) |
| Content Signals: ai-train=no | 912 of 25191 (4%) | 321 of 13802 (2%) |
| Any of these | 2540 of 25191 (10%) | 375 of 13802 (3%) |
What agents ask for, depend on and who runs them, week 2026-W43
Derived from what public MCP servers and A2A agents declared: the categories of data their tools' input fields ask for (counted by field category, never field names or text), the outside domains their declarations point to (well-known services named, others only counted) and how concentrated their declared operators are (no operator named). Not an assessment of any agent or operator.
- Agents whose tools ask for personal, payment or secret data (by field category): 2734 of 11881 (23%)
- Agents asking for payment card fields: 7 of 11881 (0%)
- Agents asking for email fields: 1531 of 11881 (13%)
- Agents asking for phone fields: 634 of 11881 (5%)
- Agents asking for credentials fields: 715 of 11881 (6%)
- Agents asking for precise location fields: 518 of 11881 (4%)
- Agents whose declarations point to an outside domain: 11753 of 26459 (44%)
- Most shared outside services: github.com (11391 of 26459 (43%)), gitlab.com (65 of 26459 (0%)), supabase.co (10 of 26459 (0%))
- Declared operators: 20048; agents run by the 10 largest: 1463 of 26327 (6%)
Cite this
GAIP Agent Observatory, State of public AI agents, October 2026. https://www.gaipagents.com/state-of-agents?month=2026-10 (weekly snapshots 2026-W41, 2026-W42, 2026-W43; latest SHA-256 6a1e6522e32f1552df6c13c5a668047ea7b1793d9946b491f26cc9c9c016c8a8) Capability change-log head SHA-256 8cadd9347b85ed20756dac07fe6ebad569c47f1cb1f45d941937aaca2d7adb17 (52938 entries).
Machine-readable: /v1/free/state-of-agents. Weekly snapshots, hash-chained: /v1/free/ecosystem/snapshots. Method: /methodology. Aggregate figures are licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/): reuse them freely with credit to the GAIP Agent Observatory and the citation shown. Founder decision #13, 1 Oct 2026.