Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

36
7
Medium Cost
chainstack icon

dev-portal

by chainstack

Sec10

Provides AI models with access to search and navigate Chainstack documentation through a hosted Model Context Protocol (MCP) server.

Setup Requirements

  • ⚠️Requires Mintlify CLI (installed via npm)
  • ⚠️Requires Node.js and npm for development setup
  • ⚠️OpenAPI specifications must adhere to v3.0 `nullable` standard for interactive API explorer functionality (as mentioned in troubleshooting)
Verified SafeView Analysis
The provided source code primarily consists of Mintlify documentation configuration (`docs.json`) and OpenAPI specifications for various blockchain APIs. It does not contain any executable server-side code, scripts, or application logic that could pose direct security risks such as `eval` statements, obfuscation, or malicious patterns. The OpenAPI specifications include example API keys in server URLs, which are placeholders and not actual secrets meant to be used directly from this repository. The MCP server itself is described as hosted and external to this repository's codebase. Therefore, the inherent security risk from *this source code* is minimal.
Updated: 2026-01-19GitHub→
36
9
Medium Cost
Knuckles-Team icon

gitlab-api

by Knuckles-Team

Sec3

This project provides a Python wrapper for GitLab, serving as an MCP (Model Context Protocol) server to expose GitLab APIs as tools for LLMs, and an A2A (Agent-to-Agent) multi-agent system for delegated GitLab task management with a knowledge graph.

Setup Requirements

  • ⚠️Requires `GITLAB_INSTANCE` and `GITLAB_ACCESS_TOKEN` environment variables for the MCP server. The hardcoded default token in `compose.yml` MUST be overridden for security.
  • ⚠️The A2A agent requires an LLM provider (e.g., OpenAI, Ollama) and its associated `OPENAI_BASE_URL` and `OPENAI_API_KEY` (defaults to Ollama-compatible settings `http://localhost:1234/v1` and `llama`). Ensure a local LLM or API endpoint is accessible.
  • ⚠️Docker is highly recommended (via `docker-compose` or `docker run`) for easy setup, as Python dependency management (`.[all]` extra requirements) can be complex for the multi-agent system and its components (Graphiti, FastMCPToolset, pydantic-ai).
Review RequiredView Analysis
The `compose.yml` file contains a hardcoded default `GITLAB_ACCESS_TOKEN` (`glpat-asdfa;sldkfj`) which is a critical security vulnerability if not explicitly overridden by the user. Running with `GITLAB_VERIFY=False` (disabled SSL verification) is optional but poses a man-in-the-middle risk if used in production environments. While authentication mechanisms (JWT, OIDC) are supported, the default token significantly lowers the overall security posture for quick starts.
Updated: 2026-01-19GitHub→
36
1
High Cost
croakingtoad icon

mcp-jina-supabase-rag

by croakingtoad

Sec8

This server crawls documentation websites, extracts content, chunks it, generates OpenAI embeddings, and indexes them into Supabase for Retrieval-Augmented Generation.

Setup Requirements

  • ⚠️Requires Python 3.12+.
  • ⚠️Requires a Supabase account with a database set up using the provided schema.
  • ⚠️Requires an OpenAI API Key (paid service) for embeddings.
  • ⚠️Requires a Jina AI API Key (optional but highly recommended for performance, potentially paid beyond free tier).
  • ⚠️Requires `crawl4ai-setup` to install browser dependencies for Crawl4AI functionality.
Verified SafeView Analysis
API keys for OpenAI, Jina AI, and Supabase are loaded from environment variables, which is good practice. The Supabase service key grants elevated database permissions, requiring careful protection. External web requests (via httpx and Crawl4AI) are central to its function and controlled by user-provided URL patterns, which inherently carries some risk if malicious URLs are supplied. There are no obvious signs of 'eval' or other direct code injection vulnerabilities within the provided source.
Updated: 2025-11-25GitHub→
36
4
Medium Cost
effatico icon

kortx-mcp

by effatico

Sec9

Kortx is a Model Context Protocol (MCP) server providing AI-powered consultation, research, visual generation/editing, and debugging capabilities for coding copilots.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid)
  • ⚠️Requires Perplexity API Key (Paid)
  • ⚠️External context connectors (Serena, MCP Knowledge Graph, CCLSP) are stubs and return data only when those MCP servers are running and reachable.
Verified SafeView Analysis
The server demonstrates strong security practices including a hardened Docker build running as a non-root user (UID 1001), multi-stage Docker builds with 'npm audit', extensive input validation via Zod schemas, and proper handling of API keys via environment variables (with redaction in logs). The context gathering for external MCP servers (Serena, Memory, CCLSP) are noted as stubs, implying no actual external calls are made yet, which currently mitigates risks associated with third-party integrations, though future implementations would require review. No 'eval' or similar dangerous dynamic code execution patterns are observed.
Updated: 2025-11-28GitHub→
36
7
Medium Cost
madeindigio icon

remembrances-mcp

by madeindigio

Sec8

Provides long-term memory, knowledge base, and semantic code indexing capabilities for AI agents.

Setup Requirements

  • ⚠️Requires NVIDIA GPU with CUDA support and NVIDIA Container Toolkit for GPU acceleration.
  • ⚠️Requires Go 1.20+ and C/C++ build tools (e.g., GCC/Clang, Make, CMake) if building from source.
  • ⚠️Requires downloading a GGUF embedding model (~260MB+).
  • ⚠️If not using embedded SurrealDB, a separate SurrealDB server is required.
Verified SafeView Analysis
The Go-llama.cpp bindings used in this project explicitly disable text generation functions (eval, predict, speculative_sampling), limiting the attack surface from arbitrary LLM output. Default SurrealDB credentials ('root'/'root') are insecure if exposed externally, but the README clearly shows how to override them via environment variables or flags. Network services (HTTP API, MCP Streamable HTTP) can be exposed, requiring proper firewalling. No obvious obfuscation or malicious patterns were found in the truncated source.
Updated: 2026-01-13GitHub→
36
8
Low Cost
kontent-ai icon

mcp-server

by kontent-ai

Sec9

This server integrates Kontent.ai content management with AI tools, allowing natural language operations to create, manage, and explore structured content.

Setup Requirements

  • ⚠️Requires a Kontent.ai account, project, Management API key with appropriate permissions, and an Environment ID.
  • ⚠️For multi-tenant HTTP mode, the Environment ID must be passed as a URL path parameter and the API Key as a Bearer token in the Authorization header, requiring specific client configuration.
  • ⚠️Only active Kontent.ai languages can be modified via the API; activation/deactivation must be done through the Kontent.ai web UI.
Verified SafeView Analysis
The source code demonstrates strong security practices, including requiring API keys via environment variables or secure Bearer tokens (no hardcoded secrets). Telemetry is actively sanitized to remove sensitive information. There is no usage of 'eval' or other readily exploitable dangerous patterns. Error handling provides useful debugging context without exposing sensitive internal data. The main security concerns would lie in the Kontent.ai Management API itself and the permissions granted to the provided API key.
Updated: 2026-01-16GitHub→
36
7
Low Cost

devvit-mcp

by reddit

Sec8

Provides a Model Context Protocol (MCP) server for developing applications on Reddit's Devvit platform.

Setup Requirements

  • ⚠️Requires `nvm` for development environment setup and specific Node.js version management.
  • ⚠️Local development configuration in `mcp.json` necessitates absolute file paths for Node.js runtime and the compiled server entry point (`dist/index.js`).
  • ⚠️Debugging requires awareness of shimmed `console.log` behavior (use `logger` instead) and potentially adding specific capabilities to the `MCPServer` instance to avoid errors with MCP clients.
Verified SafeView Analysis
The server's execution model relies on user-configured commands (via `mcp.json` and `npx`), which inherently allows for arbitrary command execution. Assuming the `@devvit/mcp` package is trusted and the server's source (from Reddit) is verified, it is safe. Telemetry is opt-out via an environment variable.
Updated: 2025-11-17GitHub→
36
4
Low Cost
taias-mcp icon

taias

by taias-mcp

Sec9

A lightweight TypeScript framework designed to enable Multi-Modal Agent (MMA) or Multi-Modal Chat Protocol (MCP) server developers to define interactive flows and map them to LLM guidance and dynamic UI affordances, shaping user experiences within AI-driven interfaces.

Setup Requirements

  • ⚠️Requires Node.js 18+ to run or develop with.
Verified SafeView Analysis
The framework itself does not appear to contain direct security vulnerabilities like 'eval', unauthorized file system access, or network requests initiated by the library's core logic. It processes predefined flows and configuration objects. Potential risks would primarily arise from how developers integrate and implement this library within their larger MCP server, specifically regarding the handling of inputs to the library (e.g., 'toolName') and the content of user-defined flow handlers. The 'devMode' feature adds valuable validation, reducing common configuration errors.
Updated: 2026-01-09GitHub→
36
1
High Cost
chrstnwhlrt icon

ro-mongodb-mcp-rs

by chrstnwhlrt

Sec9

A Model Context Protocol (MCP) server for executing read-only MongoDB queries, enabling LLMs to safely interact with MongoDB databases.

Setup Requirements

  • ⚠️Requires Rust 1.85+ to build and run.
  • ⚠️For Kubernetes connections, a valid kubeconfig file is necessary, and MongoDB pods must follow specific labeling (`app=<deployment_name>`) and credential discovery conventions (environment variables `MONGO_INITDB_ROOT_USERNAME_FILE` and `MONGO_INITDB_ROOT_PASSWORD_FILE` pointing to files within the pod).
  • ⚠️The configuration file `~/.config/ro-mongodb-mcp-rs/config.yaml` must be created and correctly populated with connection details. An example configuration is generated on first run if the file is missing.
Verified SafeView Analysis
The server is explicitly designed for read-only operations, preventing accidental or malicious write/delete actions. Query injection risks are mitigated by JSON-escaping collection names and validating user-provided queries as JSON before execution. For Kubernetes connections, it uses `mongosh --eval` but with carefully constructed and escaped commands. Credentials for K8s are discovered securely from mounted files within the MongoDB pods (paths defined by environment variables). Direct connections use a native Rust MongoDB driver. A 30-second query timeout is in place to prevent resource exhaustion. Users are advised to secure the `config.yaml` file if it contains direct MongoDB connection strings with credentials.
Updated: 2025-11-27GitHub→
36
1
Low Cost
epicmotionSD icon

awesome-mcp

by epicmotionSD

Sec10

A curated, comprehensive list of Model Context Protocol (MCP) servers, tools, and resources for AI assistants like Claude Desktop.

Verified SafeView Analysis
This repository is an 'Awesome List' consisting primarily of markdown documentation files (README, CONTRIBUTING, CODE_OF_CONDUCT, LAUNCH_CHECKLIST). It does not contain executable code that would typically present security risks such as 'eval' calls, obfuscation, network vulnerabilities, or hardcoded secrets. The security score reflects the safety of this repository's own source code, not the external projects it links to.
Updated: 2025-11-26GitHub→
36
1
High Cost
GGBoi360 icon

mobile-dev-mcp

by GGBoi360

Sec9

Provides a read-only MCP server for observing and debugging mobile applications (Android and iOS) by giving a large language model like Claude direct access to device screenshots, logs, and UI hierarchy.

Setup Requirements

  • ⚠️Requires Node.js >= 18.0.0.
  • ⚠️For Android debugging: ADB (Android Debug Bridge) must be installed as part of the Android SDK Platform Tools.
  • ⚠️For iOS debugging (macOS only, Advanced tier): Xcode with Command Line Tools must be installed.
  • ⚠️Metro bundler must be running for Metro-related tools to function.
Verified SafeView Analysis
The server's core functionality relies on executing external commands (ADB, xcrun). However, robust input validation is implemented for all user-provided parameters (device IDs, package names, UDIDs, log filters, ports) before they are used in `execAsync` calls, significantly mitigating shell injection risks. The system strictly adheres to a 'read-only' design, meaning it does not perform actions that modify device state (e.g., taps, installs, inputs), which is verified in tests and documentation. The license cache uses HMAC signing with a machine-specific secret to prevent tampering. While inherent risks exist with running external binaries and relying on an external license validation API, these are well-mitigated and standard for this type of tool.
Updated: 2026-01-18GitHub→
36
1
Medium Cost
AlexLin1234 icon
Sec9

Provides AI assistants like Claude with access to the Art Institute of Chicago's public API for searching and retrieving art-related information.

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Requires an MCP-compatible client (e.g., Claude Desktop) for interaction.
  • ⚠️Requires internet access to reach the Art Institute of Chicago API.
Verified SafeView Analysis
The server makes HTTP requests to a public, unauthenticated API. It uses `httpx` for network requests and includes basic error handling for API failures. There are no hardcoded secrets, 'eval' calls, or obfuscation. Input limits are applied to prevent excessive data retrieval. Overall, the codebase appears secure for its stated purpose.
Updated: 2025-11-26GitHub→
PreviousPage 131 of 760Next