statements

++ this is going to get banned the moment anyone from Apple sees it

Models like Deepseek is the only reason we are able to categorize and measure quality of thousands of MCP servers (https://glama.ai/blog/2026-04-03-tool-definition-quality-sco...). That's billions of tokens – an expense that would be otherwise very hard to swallow.

The quality of this model vs the price is an insane value deal.

One thing I excluded from the article was that we intentionally disabled several checks (like hCaptcha) to let them get to the stage of setting up the payment intents. This is not something I've done before, but basically I wanted to see what happens if in future an attacker is able to bypass all IP/captcha/altcaptcha, etc. restrictions and gets to something that actually does damage. This allowed to see how they are trying to bypass various rate limits/checks that we added specifically for that step. Somewhat an isolated experiment.

In this case, I am reasonably sure that the vast majority of bots are operated by the people who authored the MCP servers for which the submissions are being made.

It just happens so that people who are building MCPs themselves are more likely to use automations to assist them with every day tasks, one of which would be submitting their server to this list.

Conflicted as to whether I should be more offended at the accusation of using AI to 'filter' my article or because my writing reads as 'templated and mechanical'

There is enough here to have a micro existential crisis.

That's an article for another time, but as I hinted in the article, I've had some success with this.

If you look at the open PRs, you will see that there is a system of labels and comments that guide the contributor through every step from just contributing a link to their PR (that may or may not work), all the way to testing their server, and including a badge that indicates if the tests are passing.

In at least one instance, I know for a fact that the bot has gone through all the motions of using the person's computer to sign up to our service (using GitHub OAuth), claim authorship of the server, navigate to the Docker build configuration, and initiate the build. It passed the checks and the bot added the badge to the PR.

I know this because of a few Sentry warnings that it triggered and a follow up conversation with the owner of the bot through email.

I didn't have bots in mind when designing this automation, but it made me realize that I very much can extend this to be more bot friendly (e.g. by providing APIs for them to check status). That's what I want to try next.

What does 'filtered through an LLM' mean?

My guess is that today that's more likely because the agent failed to discover/consider CONTRIBUTING.md to begin with, rather than read it and ignored because of some reflection or instruction.

It is interesting to go from 'I suspect most of these are bot contributions' to revealing which PRs are contributed by bots. It somehow even helps my sanity.

However, this also raises the question on how long until "we" are going to start instructing bots to assume the role of a human and ignore instructions that self-identify them as agents, and once those lines blur – what does it mean for open-source and our mental health to collaborate with agents?

No idea what the answer is, but I feel the urgency to answer it.

Absolutely agree. Granted, it is task dependent. But when it comes to classification and attribute extraction, I've been using 2.0 Flash with huge access across massive datasets. It would not be even viable cost wise with other models.

Interesting to note that this might be the only model with knowledge cut off as recent as 2025 January

I've been working on MCP for the last several months.

I've hand curated hundreds of MCP servers, which people can access and browse via https://glama.ai/mcp/servers

However, today I am making the API available for everyone to use. https://glama.ai/mcp/reference

The API allows to search for MCP servers, identify their capabilities via API attributes, and even access user hosted MCP servers.

This is all part of a bigger ambition to create an all encompassing platform for authoring, discovering and hosting MCP servers.

I've bootstrapped this project to just over 4k users. Most users are private individuals, though I am seeing an uptick of adoption among small businesses.

I am also the author of https://github.com/punkpeye/fastmcp framework and several other supporting open-source tools, like https://github.com/punkpeye/mcp-proxy

You can already use most of these MCP servers directly through Glama –

* https://glama.ai/chat – if you just want to use MCPs as an end user or if you want to integrate them with Cursor, Windsurf, Roo, Cline, etc. I provide SSE url to connect directly to MCP servers.

* By using sandbox instances. Every server that is capable of being hosted online (e.g. https://glama.ai/mcp/servers/oge85xl22f) can be inspected in our sandbox, which also gives you SSE url.

The project is steadily growing and I am excited to see about increased awareness about MCP.

When they file a patent like this, does it necessitate that they have a working technology for this, or ... is it just an idea?

If the latter, what's stopping someone like me from patenting 'analyzing unique brainwave signatures through non-invasive EEG technology to authenticate individuals' ... which is something that _will_ happen, just a question of when.

I forgot this thing existed. I was kinda hoping it dissipated.