MCP Morning — Thu, Oct 22, 2026
Good morning. Today's picks are practical lookups: Polish train and bus timetables, market data without an account, the AI names people are about to search for, an Android emulator your agent can drive, and the right icon for every service in a compose file. The story is OpenAI's proposal for handling the flood of bugs that AI is starting to find.
Trending & new MCPs
- rozklad-mcp — Polish public transport timetables for AI assistants: every train in Poland, PKS and regional buses that publish open data, FlixBus to and from Poland, and urban transit in about 25 cities.
Why it matters: it's a good example of a narrow, useful server built on open data.
plan_journeymixes train, bus and tram transfers with depart-after or arrive-by times and published fares, and other tools cover live departure boards, delays, official PKP PLK disruptions and IMGW weather warnings. There's no API key: add the publichttps://rozklad.compabase.com/mcpendpoint as a connector or runnpx -y rozklad-mcplocally. Created on Oct 20, 20 ⭐ on GitHub. - tradingview-mcp — Market data, technical indicators, screeners and backtesting for stocks, crypto, forex and futures, as 39 tools for any MCP client.
Why it matters: the README says it doesn't log into, scrape or automate a TradingView session and needs no TradingView account or API key; data comes from public endpoints. Self-hosting is free with
pip install tradingview-mcp-server, and a paid hosted version exists for people who'd rather paste a URL. The project is explicit that its signals and "trade setups" are not financial advice. MIT, 5,096 ⭐ on GitHub. - new-term-radar — A daily report of new AI model, product and repo names as they start to surge, caught on X, Hugging Face trending, GitHub breakouts and directory sitemaps before keyword tools list them.
Why it matters: it's aimed at people who build pages or posts around new terms, and it turns each name into a keyword priority table. It ships three Agent Skills and an MCP server you can start with
uvx. Some signals are free (Hugging Face, GitHub, sitemaps); others need paid API keys, with per-run costs listed in the README. Created on Oct 12, 1,654 ⭐ on GitHub. - docker-android — A long-running Docker image for Android development and testing, with emulators for Android 9 to 14, device skins, VNC to watch the screen and web-based logs.
Why it matters: it now ships an HTTP MCP server as a separate
budtmo/docker-android:mcpimage, so an agent can work with an emulator running in a container. Both the MCP server and its AI agent mode (local models through Ollama or vLLM) are marked beta. The host needs Ubuntu and virtualization support. 15,997 ⭐ on GitHub. - Dashboard Icons — More than 3,400 curated icons and logos for self-hosted services and tools in SVG, PNG and WEBP, in light and dark variants, on a free CDN.
Why it matters: the hosted MCP server at
https://dashboardicons.com/api/mcpis free and needs no key. One call can match every service in adocker-compose.ymlto an icon and return the CDN links, and it also searches the selfh.st, LobeHub and Simple Icons catalogs along with their licenses. 8,905 ⭐ on GitHub.
Agent story
Patch the Planet: global response coordination as agents uncover vulnerabilities (HN) — OpenAI describes leading a coalition with PHP's maintainers, Wiz, Cloudflare and others to fix critical PHP vulnerabilities, one of which Calif found with an OpenAI model and which Wiz also reported independently. The bigger part of the post is a proposed process for the AI era, in five stages: validate and fix upstream, including trying to get around the patch with frontier models; give affected distributors and providers time to prepare; bring in government agencies; prepare updates across products; then publish guidance and support deployment. OpenAI says it expects findings like this to "increase sharply in the coming months" and asks maintainers and researchers for feedback on disclosure windows and early notice. If you run PHP, the practical step is applying the fixes. 259 points on Hacker News.
Rising this week
Biggest week-over-week download growth in our rankings, skipping three servers we already covered on Oct 20:
- headroom — 1,056 downloads (+251%)
- pagespeed-insights-mcp — 1,727 (+245%)
- real-browser-mcp — 326 (+226%)
- godot-mcp — 1,390 (+186%)
- loki-mode — 13,919 (+171%)
npm's public download counts still end on Oct 18, so these npm numbers are the same as yesterday's. Downloads include CI and bot traffic, so treat these as signals, not endorsements. How we rank →
MCP Morning lists servers from public data (the official MCP Registry, GitHub, npm and PyPI). We don't run or test them, so review the code and permissions before you connect one to your agent.