Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(8554)

0
0
High Cost
HK47196 icon

GhidraMCP

by HK47196

Sec3

GhidraMCP is a Model Context Protocol server that allows LLMs to autonomously reverse engineer applications by exposing numerous core Ghidra functionalities to MCP clients.

Setup Requirements

  • ⚠️Requires a running Ghidra instance with the plugin installed.
  • ⚠️Default server port (8080) might be in use; configurable via Ghidra Tool Options.
  • ⚠️Plugin changes require a Ghidra restart or plugin reload to take effect.
  • ⚠️No built-in authentication/authorization for the HTTP server.
Review RequiredView Analysis
CRITICAL: The server starts an embedded HTTP server (default port 8080) without any visible authentication or authorization mechanisms. This exposes powerful Ghidra functionalities (modifying binaries, setting comments, manipulating structures, querying BSim databases, and arbitrary file imports) to any entity that can reach its IP:PORT. An attacker or compromised LLM client could load and analyze malicious binaries, modify loaded programs, or exfiltrate sensitive program data without user consent. The `importBinary` endpoint allows loading arbitrary files from the filesystem. The `bsim/select_database` endpoint allows connecting to arbitrary BSim databases. While no direct `eval` is present, the exposed APIs have significant side effects and should be heavily protected.
Updated: 2025-12-06GitHub→
0
0
Medium Cost
ufoalan icon
Sec8

Provides Claude with access to Red Hat AMQ 7.12+ via the Jolokia API, enabling message browsing, broker version retrieval, and Keycloak-based authentication/authorization.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Requires a running Red Hat AMQ 7.12.1+ instance accessible from the server
  • ⚠️Requires a running Keycloak server configured with the specified realm, client, and secret
Verified SafeView Analysis
The server retrieves all sensitive configurations (AMQ and Keycloak credentials/endpoints) from environment variables, which is good practice. It leverages Keycloak for robust authentication and UMA-based authorization. AMQ credentials are stored in-memory (not persistent, cleared on logout), but they are stored in plaintext in the `authenticated_sessions` dictionary after Keycloak authentication, which is a minor risk, though necessary for Basic Auth. The communication with Jolokia defaults to HTTP; for production, the README explicitly recommends upgrading to HTTPS via a reverse proxy. No 'eval' or malicious patterns were found.
Updated: 2025-12-01GitHub→
0
0
Low Cost
alkue-com icon

prompts-mcp

by alkue-com

Sec9

Serves a directory of Markdown files as prompts to any Model Context Protocol (MCP) client for chat sessions.

Setup Requirements

  • ⚠️Requires 'uv' (Ultrafast Python package installer and resolver) to be installed.
  • ⚠️The 'PROMPTS_DIR' environment variable MUST be set and point to an existing directory containing Markdown files, otherwise the server will exit.
  • ⚠️Requires an MCP-compatible client (e.g., Claude Desktop, MCP Inspector, Goose CLI, VS Code/Cursor) to connect and utilize the served prompts.
Verified SafeView Analysis
Uses `subprocess.run` with `shlex.split` and avoids `shell=True`, mitigating command injection risks. `PyYAML` is used with `safe_load`. No obvious hardcoded secrets. The primary external risk is if the `PROMPTS_DIR` environment variable is maliciously configured to point to an untrusted location, allowing arbitrary content to be served.
Updated: 2025-11-20GitHub→
0
0
Medium Cost
patpil-cloudflare-mcp icon

mcp-typescript-docs

by patpil-cloudflare-mcp

Sec9

Provides intelligent semantic search and AI-generated answers over Model Context Protocol (MCP) TypeScript SDK documentation using Cloudflare AutoRAG.

Setup Requirements

  • ⚠️Requires a Cloudflare Workers environment for deployment and execution.
  • ⚠️Requires a WorkOS account for OAuth 2.1 authentication configuration (WORKOS_CLIENT_ID, WORKOS_API_KEY).
  • ⚠️Relies heavily on Cloudflare services: Workers AI (AutoRAG), D1 Database (TOKEN_DB), and KV Namespaces (OAUTH_KV, USER_SESSIONS). These must be configured correctly in Cloudflare Dashboard and `wrangler.jsonc`.
Verified SafeView Analysis
The server demonstrates robust security practices. OAuth 2.1 with PKCE is correctly implemented, preventing authorization code interception. API keys are hashed (SHA-256) before storage and validated against hashes. Database queries use prepared statements to prevent SQL injection. Generated HTML content is escaped to mitigate XSS vulnerabilities. Explicit checks for `is_deleted` status in the database prevent access for revoked accounts. Sensitive API keys (e.g., WORKOS_API_KEY) are loaded from environment variables. AI requests are routed through a Cloudflare AI Gateway, adding a layer for access control and rate limiting. There is no direct evidence of `eval` or similar dynamic code execution being used insecurely.
Updated: 2025-12-28GitHub→
0
0
High Cost
Calq-dev icon

calq-mcp

by Calq-dev

Sec9

Provides a Model Context Protocol server for time tracking, project management, AI-powered memory, and team collaboration for developers, integrating with LLM agents.

Setup Requirements

  • ⚠️Requires paid API keys for Voyage AI (for embeddings) and Anthropic (if using the Discord bot), which will incur token costs based on usage.
  • ⚠️Requires manual setup and configuration of a GitHub OAuth App to obtain Client ID and Client Secret.
  • ⚠️Requires running instances of both PostgreSQL (for structured data) and ChromaDB (for vector embeddings), though Docker Compose streamlines their deployment.
Verified SafeView Analysis
The server uses Drizzle ORM, which mitigates common SQL injection risks through its type-safe API. Authentication is handled via robust OAuth 2.1 with PKCE, leveraging GitHub as the identity provider. Sensitive configurations like API keys and secrets are correctly managed via environment variables. While `POSTGRES_PASSWORD` has a weak default in the `docker-compose.yml`, users are explicitly advised to configure their own. The generated Claude Desktop hook scripts execute Node.js, and perform local file I/O (e.g., reading transcripts); however, the paths are provided by the trusted Claude Desktop environment, minimizing direct arbitrary file access risks from external user input. Overall, the codebase demonstrates good security practices for a modern Node.js application.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
CodingWithCalvin icon

VSC-MCPServer

by CodingWithCalvin

Sec9

Exposes VS Code's language intelligence via a Model Context Protocol (MCP) server for AI coding assistants.

Setup Requirements

  • ⚠️Requires Visual Studio Code (v1.85.0 or later)
  • ⚠️Default port 4000 may conflict with other services; configure `codingwithcalvin.mcp.port` if needed.
  • ⚠️Server binds only to `127.0.0.1` (localhost); remote access is not supported for security reasons.
Verified SafeView Analysis
The server is designed to bind only to localhost (`127.0.0.1`) and includes DNS rebinding protection and CORS restrictions to only allow requests from localhost origins. This significantly limits external attack surfaces. No `eval` or obvious hardcoded secrets were found. The core functionality wraps trusted VS Code API commands, meaning the security model relies on the inherent trust in VS Code's capabilities.
Updated: 2026-01-16GitHub→
0
0
Low Cost
MacroSense-AI icon

macrosense-ai-mcp-server

by MacroSense-AI

Sec4

Provides a template for building Model Context Protocol (MCP) servers with custom tool-calling capabilities for AI models.

Setup Requirements

  • ⚠️Python 3.11 or higher required.
  • ⚠️Docker deployment with `docker-compose.yml` maps server to host port 8080 by default, differing from the local/direct Docker `8000:8000` instructions.
Verified SafeView Analysis
Hardcoded authentication token (`test-token`) in `src/middlewares/auth.py` presents a significant security vulnerability for production deployment. CORS `allow_origins=["*"]` is overly permissive for production. Both should be configured via environment variables or stricter policies.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
farhanrhine icon
Sec9

Analyze Paytm UPI transaction history locally using natural language queries via Claude AI.

Setup Requirements

  • ⚠️Requires Python 3.11+.
  • ⚠️Manual export of Paytm UPI statement as an Excel (.xlsx) file is required.
  • ⚠️Manual conversion of the Excel file to JSON is required before the server can ingest data.
  • ⚠️Requires Claude Desktop to be installed for interaction.
Verified SafeView Analysis
The server demonstrates strong security practices for a local application. It uses parameterized SQL queries to prevent SQL injection, constructs file paths safely to avoid path traversal, and does not execute arbitrary shell commands. All data processing is strictly local with no external network calls for financial data. No hardcoded secrets were found.
Updated: 2025-11-29GitHub→
0
0
Low Cost
benhalverson icon

fusion-mcp

by benhalverson

Sec8

An MCP server for Autodesk Fusion 360, enabling data management, export, design automation, and webhooks interactions via a standardized protocol, deployed on Cloudflare Workers.

Setup Requirements

  • ⚠️Requires an Autodesk Forge/APS account with API credentials (usage beyond free tiers may incur costs).
  • ⚠️Requires a Cloudflare Workers account for deployment and Node.js 18+ for local development.
  • ⚠️Design Automation activities and webhook configurations require prior setup in the Autodesk Forge portal.
Verified SafeView Analysis
Secrets (Autodesk Forge Client ID/Secret) are correctly handled via Cloudflare Workers secrets, as indicated in `wrangler.toml` and setup instructions, preventing hardcoding. The server code does not use dangerous dynamic execution patterns like 'eval'. The `/webhook` endpoint explicitly notes that signature verification and event processing are left to the implementer; while the server itself doesn't perform immediate malicious actions with unverified webhooks, relying on unverified webhooks in a broader system can introduce security risks.
Updated: 2026-01-13GitHub→
0
0
Medium Cost
ST0MP-EE5 icon

ai-hub

by ST0MP-EE5

Sec8

The AI Hub MCP server acts as a central gateway for AI assistants to access and manage various tools, skills, and configurations, including DigitalOcean infrastructure.

Setup Requirements

  • ⚠️A DigitalOcean account and `DO_API_TOKEN` are required for the DigitalOcean MCP to function, implying paid services.
  • ⚠️Node.js (version 18.0.0 or higher) and npm must be installed on the host system.
  • ⚠️The main AI Hub server and each local MCP (e.g., `mcps/digitalocean`) require a separate build step (`npm run build`) before running.
Verified SafeView Analysis
The server employs good security practices including API key hashing, granular permissions, and standard web security middleware (helmet, cors, rate-limiting). Local MCPs are executed in isolated child processes, and external MCP routing is currently a placeholder, which mitigates immediate risks related to third-party integrations. The CLI utilizes `execSync` for administrative tasks, which is acceptable for a privileged user but highlights the need for secure CLI access. All secrets are managed via environment variables and API keys are stored as hashes. Potential future risks may arise with the full implementation of external MCP routing if not carefully secured against SSRF and malicious tool responses.
Updated: 2026-01-19GitHub→
0
0
Low Cost
hidao80 icon

memory_mcp

by hidao80

Sec8

A local memory management server for desktop extensions to store and manage user preferences, interests, and current status.

Setup Requirements

  • ⚠️Requires Python 3.8 or higher.
  • ⚠️Requires Node.js for generating the .dxt extension file via 'npm run package'.
  • ⚠️Requires a user to select a 'Memory file (.json)' location when enabled in the Claude Desktop extension settings.
Verified SafeView Analysis
The server performs local file I/O for memory data and logs. The memory file path is user-configurable via the desktop extension, which should handle path sanitization. The server listens on a local port (default 58902) as expected for an MCP, but this is a potential vector if other local processes are untrusted. No 'eval' or other highly dangerous functions were found. No hardcoded secrets.
Updated: 2026-01-17GitHub→
0
0
Low Cost

mediamath-mcp-mock

by Hypermindz-AI

Sec7

Provides a mock server for the MediaMath campaign management API, designed for development and testing of agent frameworks and integrations.

Setup Requirements

  • ⚠️Requires manual configuration of `JWT_SECRET` in `.env.local`.
  • ⚠️Not suitable for production use; designed solely for development and testing environments.
  • ⚠️Authentication requires specific mock credentials (e.g., admin@acme.com / password123) for initial testing.
Verified SafeView Analysis
Designed as a development/testing mock server; explicitly states it's not production-ready due to simplified authentication (no password hashing, in-memory tokens) and client validation. It is safe to run for its intended purpose, but not for sensitive data in a production environment.
Updated: 2025-11-19GitHub→
PreviousPage 699 of 713Next