Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse Directory Why Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:

SORT:

Vetted Servers(9120)

100

1160

Low Cost

Peekaboo

by steipete

Sec8

macOS automation server that integrates AI for screen capture analysis, UI interaction, and agentic workflows.

Setup Requirements

⚠️Requires macOS Sonoma (14.0) or later.
⚠️Requires Screen Recording and Accessibility permissions to function.
⚠️API keys required for OpenAI, Anthropic, xAI Grok (e.g., `export OPENAI_API_KEY=...`).
⚠️Ollama requires local server and models (`ollama pull llama3.3`, `ollama pull llava`).

Verified SafeView Analysis

The server performs macOS automation (screen capture, UI interaction, access to private APIs) which inherently requires high system privileges (Screen Recording, Accessibility). Its inter-process communication (IPC) mechanism uses Unix sockets and performs client identity validation (via `SecTaskCopyValueForEntitlement`) for security. Path traversal attempts are explicitly blocked in file operations. While powerful, the codebase demonstrates efforts toward secure implementation practices. No obvious hardcoded secrets or malicious patterns were found in the provided code snippets.

Updated: 2026-01-18GitHub→

100

5079

Medium Cost

unity-mcp

by CoplayDev

Sec7

Enables AI assistants (LLMs) to control and automate tasks within the Unity Game Engine Editor through the Model Context Protocol (MCP).

Setup Requirements

⚠️Requires Unity Editor (2021.3 LTS or newer) with the MCP Unity Plugin installed and running.
⚠️Requires Python 3.10 or newer.
⚠️Requires `uv` and `uvx` to run from PyPI or GitHub source.

Verified SafeView Analysis

The server listens on `0.0.0.0:8080` by default when using HTTP transport, making it publicly accessible if not behind a firewall. Telemetry data is sent to a third-party endpoint (`https://api-prod.coplay.dev/telemetry/events`) by default, though users can opt-out via environment variables. The use of `eval()` in `main.py` is an internal framework workaround for `typing` annotations, not directly for user input. Path sanitization is implemented for script operations to prevent traversal attacks. The server processes regular expressions from user input in tools like `script_apply_edits` and `find_in_file`; while Python-side compilation is used, complex or inefficient regex patterns could theoretically pose a ReDoS risk.

Updated: 2026-01-19GitHub→

100

1286

Medium Cost

mcp

by MicrosoftDocs

Sec9

Provides AI assistants with direct, secure access to the latest official Microsoft documentation to prevent hallucinations and verify code.

Setup Requirements

⚠️The server itself is a remote Microsoft-hosted endpoint and cannot be run locally from this repository.
⚠️Direct browser access to the MCP endpoint (e.g., https://learn.microsoft.com/api/mcp) will result in a '405 Method Not Allowed' error; it must be accessed via a compliant MCP client.
⚠️Custom clients are advised to dynamically discover tools and refresh schemas due to the protocol's dynamic nature, rather than hard-coding definitions.

Verified SafeView Analysis

The provided repository contains documentation and skill definitions for integrating with the Microsoft Learn MCP Server, which is a remote, Microsoft-hosted endpoint (https://learn.microsoft.com/api/mcp). The actual server source code is not provided in this repository. The security score reflects the safety of the repository's content (documentation, skill descriptions) and the strong security claims made in the README regarding the remote service's focus on official, trusted sources and lack of authentication. A full audit of the remote server's implementation is not possible with the provided information. The `SECURITY.md` file outlines a clear vulnerability reporting process.

Updated: 2026-01-12GitHub→

100

8342

Low Cost

inspector

by modelcontextprotocol

Sec2

A web-based client and proxy server for inspecting and interacting with Model Context Protocol (MCP) servers, allowing users to browse resources, prompts, and tools, perform requests, and debug OAuth authentication flows.

Setup Requirements

⚠️Arbitrary Command Execution Risk: The proxy server can execute arbitrary commands via URL query parameters. It is CRITICAL that the proxy is ONLY run in a trusted, isolated environment (e.g., local machine behind a firewall) and NEVER exposed to untrusted networks or users.
⚠️CORS Configuration for Direct Connections: When connecting directly to an MCP server (bypassing the Inspector proxy), the target MCP server must be configured to allow Cross-Origin Resource Sharing (CORS) requests from the Inspector's origin.
⚠️OAuth Client Configuration: Setting up OAuth 2.0 requires obtaining a 'client_id' (and optionally 'client_secret') from an authorization server, and configuring a 'redirect_uri' (e.g., http://localhost:6274/oauth/callback).

Review RequiredView Analysis

The proxy server (`server/src/index.ts`) is designed to execute arbitrary commands and arguments (e.g., `command`, `args`, `env`) received via URL query parameters if the `stdio` transport is used. This is a critical remote code execution vulnerability if the proxy is exposed to untrusted networks or users. While potentially intended for local/trusted development environments, this design choice poses a severe risk. Additionally, the server can be configured with the `DANGEROUSLY_OMIT_AUTH` environment variable, bypassing its session token authentication and increasing exposure risk. The client-side OAuth implementation adheres to standard practices, but the proxy's inherent capability for arbitrary command execution significantly lowers the overall security score.

Updated: 2026-01-19GitHub→

100

21552

Medium Cost

chrome-devtools-mcp

by ChromeDevTools

Sec8

Control and inspect a live Chrome browser programmatically via an MCP server, enabling AI coding agents to perform reliable automation, in-depth debugging, and performance analysis.

Setup Requirements

⚠️Requires Node.js v20.19 or a newer LTS version, and a current stable version of Chrome.
⚠️May fail to start Chrome if running in a sandboxed environment (e.g., macOS Seatbelt, Linux containers), requiring explicit `--browser-url` configuration or disabling sandboxing.
⚠️Connecting to a running Chrome instance (instead of launching a new one) via `--autoConnect` requires Chrome 144+ and remote debugging enabled via `chrome://inspect/#remote-debugging`. Manual connection via `--browser-url` requires starting Chrome with `--remote-debugging-port` and `--user-data-dir`.
⚠️Specific client configurations (e.g., Windows 11 with Codex) might require additional environment variables (`env`) and startup timeout (`startup_timeout_ms`) parameters.

Verified SafeView Analysis

The `evaluateScript` tool directly executes JavaScript code provided by the agent within the browser context, which is a core feature for enabling advanced control and inspection. The `README` explicitly states: "`chrome-devtools-mcp` exposes content of the browser instance to the MCP clients allowing them to inspect, debug, and modify any data in the browser or DevTools. Avoid sharing sensitive or personal information that you don't want to share with MCP clients." This clearly communicates the inherent risk of granting an AI agent full control over a browser instance, emphasizing that the client (user) is responsible for the data exposed. The `--acceptInsecureCerts` option allows bypassing SSL certificate errors, which could expose the user to MITM attacks if used carelessly, but it's an explicit opt-in with a caution. No direct `eval` calls or similar code execution patterns are observed on the Node.js server itself. The main security consideration is the extensive control granted to the connected AI agent over the browser, which is by design for its purpose.

Updated: 2026-01-19GitHub→

100

12501

Low Cost

genai-toolbox

by googleapis

Sec6

Provides an open-source MCP server to simplify the development and deployment of Gen AI tools that interact with various databases, handling complexities like connection pooling and authentication.

Setup Requirements

⚠️Requires Go (for compiling from source or running directly from source)
⚠️Requires Node.js (for `npx` local run of the server and some client SDKs)
⚠️Requires specific database instances (e.g., PostgreSQL, BigQuery, MongoDB) with connection details and appropriate IAM permissions, which can be complex to configure.
⚠️The use of `templateParameters` in tools introduces SQL injection risks; developers must manually apply `allowedValues` or `escape` for string inputs to mitigate this, or avoid them entirely.

Verified SafeView Analysis

The server incorporates robust security features such as OIDC-based authentication, CORS, and DNS rebinding attack prevention. However, a critical security consideration lies in the 'template parameters' available for SQL-based tools. While standard parameterized queries inherently prevent SQL injection, 'template parameters' are designed to allow direct modification of SQL statements, including identifiers, column names, and table names. The documentation explicitly notes this makes them 'more vulnerable to SQL injections'. Developers are advised to prefer standard parameters or, if using template parameters, to diligently implement `allowedValues`, `escape`, or `minValue`/`maxValue` for validation. Hardcoded secrets are discouraged by the use of environment variables for configuration, which should be managed securely (e.g., via Secret Manager in cloud deployments).

Updated: 2026-01-19GitHub→

100

79215

Low Cost

awesome-mcp-servers

by punkpeye

Sec9

This repository serves as a curated list of Model Context Protocol (MCP) servers, frameworks, and utilities, providing a comprehensive directory for developers and AI practitioners.

Verified SafeView Analysis

The provided source code consists of README files and a CONTRIBUTING.md. As a static documentation repository, it does not contain executable server code that could pose direct runtime security risks (e.g., 'eval', obfuscation, hardcoded secrets) within its own files. The primary security consideration would be the trustworthiness of the numerous external links to other repositories and websites listed within the documentation, which are outside the scope of this direct source code analysis.

Updated: 2026-01-19GitHub→

100

3590

Medium Cost

core

by opensumi

Sec5

An extensible IDE framework for building web-based, desktop (Electron), and AI-native development environments, providing core UI components like message notifications and modal dialogues.

Setup Requirements

⚠️Requires Node.js >= 18.12.0.
⚠️Requires Yarn for dependency management (`yarn install`, `yarn run init`).
⚠️Native modules (e.g., `node-pty`, `keytar`, `nsfw`, `@parcel/watcher`) require compilation, which might involve `build-essential`, `libsecret-1-dev`, `node-gyp`, and specific Python/Electron development headers depending on the environment. The `yarn rebuild-native` command assists with this.
⚠️The `GITHUB_TOKEN` environment variable is required for changelog generation scripts (development/maintenance task).

Verified SafeView Analysis

The framework extensively uses `new Function()` for loading and activating extensions (e.g., in `ext.host.ts`, `worker.host.ts`, `webview-manager.ts`). While this is a common pattern for extensible IDEs like VSCode, it means the runtime executes code from extensions, requiring a high degree of trust in installed extensions. Webviews are sandboxed, but the `allow-same-origin` permission could be a concern if coupled with other vulnerabilities. Development/CLI server configurations (e.g., `tools/dev-tool/src/server.ts`, `tools/cli-engine/src/node/server.ts`) exhibit broad network access policies (`staticAllowOrigin: '*'`, open CORS), which are acceptable for local development but would be risky in a broadly exposed production environment. Sensitive `GITHUB_TOKEN` is used for changelog generation (development task) but is handled via environment variables. `keytar` is used for secure credential storage (good practice).

Updated: 2026-01-15GitHub→

100

3076

Medium Cost

boost

by laravel

Sec3

Accelerates AI-assisted development by providing essential context and structure for generating high-quality, Laravel-specific code via an MCP server.

Setup Requirements

⚠️Requires a Laravel application environment.
⚠️Requires specific setup and configuration within your chosen AI agent or IDE (e.g., PhpStorm, VS Code, Cursor).
⚠️The 'Search Docs' tool makes external API calls to boost.laravel.com, requiring internet connectivity.

Review RequiredView Analysis

The server exposes powerful tools with significant security implications. The 'Tinker' tool uses `eval()` allowing arbitrary PHP code execution, and 'Database Query' executes raw SQL queries (`DB::select`) after a basic keyword whitelist, posing a risk of SQL injection if the whitelist is bypassed. The 'CommandDetectionStrategy' and `installShellMcp` also dynamically execute shell commands for detection and installation, which could be exploited if inputs are not fully trusted. Additionally, the browser logger injects JavaScript into HTML responses to capture client-side logs and errors, which could inadvertently expose sensitive user data if not managed carefully. Disabling SSL verification for local/testing environments, though common, also adds a slight risk if misconfigured. These features, while intended, necessitate running the server in highly trusted and isolated development environments.

Updated: 2026-01-19GitHub→

100

9787

Medium Cost

XHS-Downloader

by JoeanAmier

Sec7

A tool for extracting links and downloading watermark-free images and videos from Xiaohongshu (RedNote), supporting multiple operational modes including a server-based MCP interface.

Setup Requirements

⚠️Requires Python 3.12 or newer.
⚠️Administrator privileges may be required on Windows for browser cookie extraction.
⚠️Linux users may need to install `xclip` or `xsel` for clipboard functionality.
⚠️`gettext` package and proper environment variable setup are required for translations.

Verified SafeView Analysis

The tool uses `rookiepy` to extract browser cookies, which may require administrator privileges on some operating systems and could expose sensitive user data if not used carefully. When a proxy is configured for HTTP requests, `httpx` is configured with `verify=False`, which disables SSL certificate verification and can make connections vulnerable to Man-in-the-Middle (MITM) attacks if the proxy is untrusted. The project's JavaScript userscript is obfuscated, which, while not part of the Python server, raises a general concern about transparency in the overall project ecosystem.

Updated: 2026-01-14GitHub→

100

1655

Low Cost

mcpb

by modelcontextprotocol

Sec8

This repository provides a CLI tool and library for building, validating, packing, signing, and verifying MCP (Model Context Protocol) Bundles, which are zip archives containing local MCP servers and their metadata for distribution.

Setup Requirements

⚠️Requires Node.js runtime to execute the CLI tool itself.
⚠️Certificate signing and verification functionalities (`mcpb sign`, `mcpb verify`) rely on system tools such as `openssl` (Linux/macOS), `security` (macOS), or `powershell.exe` (Windows) being available.

Verified SafeView Analysis

The CLI tool itself appears generally safe to run, with standard file system operations and proper zip slip prevention during unpacking. Cryptographic operations for signing use `node-forge` and rely on external OS tools (`openssl`, `security`, `powershell.exe`) for certificate chain validation. While `execSync` is used for generating self-signed certificates, it's for an optional developer utility with controlled inputs. The primary security consideration for the ecosystem is that the `mcp_config` field in the manifest allows extension developers to specify arbitrary commands and arguments, including variable substitutions. A malicious extension could craft dangerous commands, which the host application (e.g., Claude Desktop) would execute. This highlights the importance of robust sandboxing and validation by the host application that consumes MCPB files from untrusted sources, rather than a direct vulnerability within the `mcpb` tool itself.

Updated: 2026-01-12GitHub→

100

1586

Low Cost

mcp-router

by mcp-router

Sec8

A desktop application that simplifies the management and aggregation of Model Context Protocol (MCP) servers.

Setup Requirements

⚠️Requires Node.js >=20.0.0 and pnpm >=8.0.0 for development.
⚠️Core functionality relies on managing Model Context Protocol (MCP) servers, which need to be separately configured or imported (e.g., via DXT files).
⚠️Optional cloud synchronization features depend on an external subscription service (mcp-router.net).

Verified SafeView Analysis

The application stores all user data locally and implements end-to-end encryption for optional cloud synchronization. Authentication uses PKCE. The workflow system uses `vm.Script` for executing user-defined hooks, which provides a sandboxed environment, but always carries an inherent risk if not perfectly contained. Analytics API keys are present but are not sensitive user data.

Updated: 2026-01-19GitHub→

PreviousPage 1 of 760Next