Sign-in required, tools not seen, not counted. The MCP endpoint listed for Netlify at netlify-mcp.netlify.app answered 401 with OAuth metadata on 4 November 2026. Its tools can be listed only after a person authorizes a client, and this directory never signs in.
92, grade A; Ora scanned the domain on 5 November 2026 and the cached score was read on 5 November 2026 from its score API (Ora's score page for netlify.com, a vendor-published score)
Company found through
the vendor's own documentation; the awesome-remote-mcp-servers list; Ora's public leaderboard
Last verified
4 November 2026
MCP server
Endpoint
https://netlify-mcp.netlify.app/mcp
How it was found
listed in the vendor's own documentation; the awesome-remote-mcp-servers list; Ora's public leaderboard
The endpoint answered the handshake with a sign-in challenge, so the tool list is not visible to this directory. It is not counted as an MCP server: a sign-in challenge is its own state, and the connector listed no tools.
Connector log
2 connections on 4 November 2026, read-only methods only
19:56:04Z https://netlify-mcp.netlify.app/mcp sent initialize result auth-required (HTTP 401) 1688 ms
20:01:41Z https://netlify-mcp.netlify.app/mcp sent initialize result auth-required (HTTP 401) 1695 ms
Request https://netlify-mcp.netlify.app/mcp without a token. It answers 401 and a WWW-Authenticate header.
Read the protected resource metadata at https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp to find the authorization server.
Register a client at the registration endpoint https://netlify-mcp.netlify.app/oauth-server/reg (dynamic client registration), so no human has to create an app first.
Send a person through the authorization page, then retry the endpoint with the bearer token. The connector stops after step 2 and never authorizes.