Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

32
2
Low Cost
Siam-analytics icon

claude-code-lsps

by Siam-analytics

Sec9

Enhance coding experience by providing Language Server Protocol (LSP) plugins for various programming languages with features like code completion and error checking.

Setup Requirements

  • ⚠️Requires specific language runtimes and package managers (e.g., Go, Java 21+, Node.js/npm, Python/pip, Ruby/gem, .NET SDK) depending on the desired LSP.
  • ⚠️macOS users benefit from Homebrew for simplified installation of several LSPs.
Verified SafeView Analysis
The source code primarily consists of shell scripts (`.sh`) designed to check for and install various Language Servers (e.g., gopls, jdtls, pyright) using standard package managers (go install, brew, npm, pip, gem). There is no use of `eval`, obfuscation, hardcoded secrets, or direct network calls beyond what the package managers themselves perform. The scripts are straightforward and perform common development environment setup tasks. The 'risk' is inherent in any system that automatically installs software, but the commands used are standard and well-understood for their respective tools.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
AD-Archer icon
Sec8

This project acts as a Model Context Protocol (MCP) bridge, enabling OpenWebUI or other MCP-capable clients (like n8n) to communicate with an internal, in-house AI platform via HTTP webhooks, providing conversation memory and OpenAI-compatible endpoints.

Setup Requirements

  • ⚠️Requires `AI_WEBHOOK_URL` to be configured, pointing to an internal AI service.
  • ⚠️Network setup often requires ports 80/443 forwarding or tunneling solutions (e.g., Tailscale, Cloudflare Tunnels) for the AI service to communicate back to the bridge.
  • ⚠️Requires Python 3.10+ if running locally, or Docker for containerized deployment.
Verified SafeView Analysis
The server uses Pydantic for configuration validation, `sqlite3` with parameterized queries to prevent SQL injection, and provides a `BearerAuthMiddleware` for API authentication. It includes retry logic for AI webhook calls. A notable feature is the `trigger_webhook` tool which can invoke arbitrary URLs if not targeting a pre-configured alias, posing a potential Server-Side Request Forgery (SSRF) risk if the bridge is exposed without strong authentication or if an attacker gains control of the MCP client. However, this is described as an intended feature for flexibility. No 'eval' or obvious obfuscation/malicious patterns were found.
Updated: 2026-01-09GitHub→
32
2
Low Cost
epicmotionSD icon

openconductor

by epicmotionSD

Sec2

Managing and orchestrating MCP (Model Context Protocol) servers for AI agent development, offering discovery, installation, and lifecycle management.

Setup Requirements

  • ⚠️Requires Node.js 18+ and PostgreSQL (or Supabase account) for the backend API.
  • ⚠️Manual database migration (`pnpm run db:migrate`) and environment variable setup are necessary for local API development.
  • ⚠️The presence of hardcoded production database credentials in various scripts poses a critical security risk upon cloning or running any script from the repository, potentially granting access to sensitive data.
Review RequiredView Analysis
Multiple shell scripts (`scripts/run-stacks-migration.sh`, `scripts/add-server.sh`, `scripts/pull-supabase-data.sh`) contain hardcoded production PostgreSQL database credentials (username, password, host, port, database) and Supabase API keys directly within the repository. The `vercel.json` (as described in `docs/archive/DEPLOYMENT_FIX_SUMMARY.md`) also embeds a full PostgreSQL connection string. The `ssl: { rejectUnauthorized: false }` setting in `api/v1/servers.ts` can introduce MITM vulnerabilities if not used in a highly controlled environment. The public API has `Access-Control-Allow-Origin: *` which is common for public APIs but less secure than restricting origins. Environment variables are not consistently used across all deployment and setup scripts, leading to potential credential exposure.
Updated: 2026-01-19GitHub→
32
2
Low Cost
andreibesleaga icon

oscp-sdk

by andreibesleaga

Sec8

Enables AI assistants to interact with EV charging infrastructure using the Open Smart Charging Protocol (OSCP) via a Model Context Protocol (MCP) server.

Setup Requirements

  • ⚠️Requires 'OSCP_API_KEY' environment variable to be set.
  • ⚠️Requires Node.js 20 LTS or later.
  • ⚠️The 'Code Mode' feature depends on an external remote execution service (Stainless API) and requires trust in its sandbox isolation.
Verified SafeView Analysis
The server implements a 'Code Mode' tool that allows AI agents to write and execute TypeScript code against the SDK. This code execution is explicitly stated to occur in an 'isolated sandbox' on a remote Stainless API service (api.stainless.com/api/ai/code-tool), without local web or filesystem access. While delegating execution to a sandboxed remote service reduces local risk, it relies heavily on the security and isolation of that external service. No direct local 'eval' or similar dangerous patterns are used for agent code within the provided server code. API keys (OSCP_API_KEY) are obtained from environment variables or client options, not hardcoded. Authentication for HTTP transport is via Bearer token or x-oscp-api-key header.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
mo-mostafa-123 icon

fastestmcp

by mo-mostafa-123

Sec2

Framework and CLI tool for rapidly generating and developing modular MCP (Model Context Protocol) servers and clients, with capabilities for API integration, code generation, and component-based development.

Setup Requirements

  • ⚠️Python 3.10+ required
  • ⚠️Requires `git` command-line tool to be installed and accessible in PATH for repository operations
  • ⚠️HTTP servers require `httpx`, `fastapi`, `uvicorn`
Review RequiredView Analysis
`eval()` is used in a demo script (src/fastestmcp/demo.py) with an explicit warning about its dangers. A critical vulnerability exists in the `clone_git_repository` tool (src/server/stdio/app/tools.py), which allows a client to specify an arbitrary `target_directory`. This enables cloning a repository into any writable location on the server's file system, potentially leading to arbitrary file writes, overwriting system files, or placing executable code, if the server is exposed to untrusted input. Hardcoded 'demo-token' for authentication is present in `src/server/stdio/app/auth.py` for demonstration purposes.
Updated: 2026-01-19GitHub→
32
3
Medium Cost
moorcheh-ai icon

moorcheh-mcp

by moorcheh-ai

Sec9

Provides a Model Context Protocol (MCP) interface for Moorcheh's AI services, including embedding, vector storage, semantic search, and AI-powered answer generation.

Setup Requirements

  • ⚠️Requires a Moorcheh API Key, which must be obtained from the Moorcheh Dashboard and set as MOORCHEH_API_KEY environment variable.
  • ⚠️Requires Node.js version 18.0.0 or higher.
  • ⚠️An MCP client (e.g., Claude Desktop, Cursor IDE) is necessary to effectively interact with the server's tools and resources.
Verified SafeView Analysis
The server uses Zod for robust input validation, preventing common injection vulnerabilities. API keys are loaded from environment variables and checked for validity, with no hardcoded secrets. Network requests are confined to Moorcheh's official API endpoints. The file upload tool includes validation for file size (max 10MB) and allowed extensions (.pdf, .docx, .xlsx, .json, .txt, .csv, .md), mitigating risks associated with arbitrary file uploads. Non-JSON-RPC stdout output is redirected to stderr, enhancing protocol stability and security. No 'eval' or obfuscation is present.
Updated: 2026-01-08GitHub→
32
2
High Cost
rb58853 icon

fastchat-mcp

by rb58853

Sec1

A Python client for integrating Language Models with Model Context Protocol (MCP) servers, allowing natural language interaction with external tools, resources, and prompts.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid)
  • ⚠️Requires 'fastchat.config.json' file for server and database configurations
  • ⚠️Requires 'CRIPTOGRAFY_KEY' environment variable for token data storage
  • ⚠️Requires 'MASTER_TOKEN' environment variable for admin access
Review RequiredView Analysis
CRITICAL: The server exposes WebSocket endpoints that accept an 'aditional_servers' header. This header's content is parsed as JSON and can add or override MCP server configurations. If an authenticated attacker provides a malicious 'stdio' protocol server configuration (e.g., specifying '/bin/sh -c "rm -rf /"' as the command), the `stdio_client` will execute arbitrary commands on the server. This constitutes a severe Remote Code Execution (RCE) vulnerability for authenticated users. The `fastchat.config.json` should be treated as a trusted configuration, and user-provided configuration overrides must be carefully sanitized or restricted.
Updated: 2025-12-08GitHub→
32
2
Low Cost
axone-protocol icon

axone-mcp

by axone-protocol

Sec7

Acts as a gateway for AI-powered tools (like Claude) to interact with the Axone blockchain's dataverse via the Model-Context Protocol (MCP), primarily to retrieve governance code for resources.

Setup Requirements

  • ⚠️Requires Golang to build from source.
  • ⚠️Requires access to an Axone node gRPC endpoint.
  • ⚠️Designed to be consumed by an MCP-compatible client (e.g., Claude Desktop, IDEs, or other AI tools).
Verified SafeView Analysis
The server's gRPC client connection to the Axone node offers flags (`--grpc-no-tls`, `--grpc-tls-skip-verify`) to disable or skip TLS certificate verification. While `--grpc-tls-skip-verify` enforces TLS 1.2 minimum, disabling TLS or skipping verification can expose the connection to security risks (e.g., man-in-the-middle attacks) if used with untrusted gRPC endpoints. There are no hardcoded secrets or obvious malicious patterns in the provided source code. The default `dataverseAddr` in `smithery.yaml` is a public contract address.
Updated: 2026-01-13GitHub→
32
2
Medium Cost
rdwj icon
Sec9

A production-ready template for building Model Context Protocol (MCP) servers with dynamic tool/resource loading, Python-based prompts, and seamless OpenShift deployment capabilities for AI agents.

Setup Requirements

  • ⚠️Requires Python 3.11+
  • ⚠️Requires 'cmcp' for local testing
  • ⚠️Requires 'oc' (OpenShift CLI) for OpenShift deployment
  • ⚠️Requires 'fips-agents' CLI tool for scaffolding new components
  • ⚠️Files created by Claude Code may have restrictive 600 permissions, requiring a 'chmod 644' fix before deployment (though handled by deploy script).
Verified SafeView Analysis
The server template includes JWT authentication with scope-based authorization, using environment variables for sensitive keys. It explicitly addresses potential file permission issues during deployment. Error handling uses `ToolError` to prevent internal traceback exposure. `fastmcp.settings.mask_error_details` can be configured to hide detailed error information from clients. No obvious `eval` or malicious code patterns were found.
Updated: 2025-12-14GitHub→
32
1
Low Cost
Pritahi icon

mcp-proxy-saas

by Pritahi

Sec9

An API gateway/proxy for Model Context Protocol (MCP) servers, providing authentication, security, and logging for multi-tenant applications.

Setup Requirements

  • ⚠️Requires a Supabase project and database for configuration, API keys, and audit logs.
  • ⚠️A PostgreSQL database must be configured with the specified `mcp_servers`, `api_keys`, `audit_logs`, and `user_usage` schemas.
  • ⚠️Requires Node.js version 20.0.0 or higher.
Verified SafeView Analysis
The server implements strong security practices: API key authentication with caching, configurable CORS, Helmet for common security headers, and an in-memory rate limiter. Critical credentials (Supabase service role key) are correctly loaded from environment variables. Tool whitelisting and content blacklisting are effective security layers. The 'trust proxy' setting is correctly enabled for cloud deployments. Input validation for `params` is not explicitly deep beyond blacklist checks, relying on downstream MCP servers, which could be an area for enhancement, but otherwise the server's security is robust.
Updated: 2025-12-09GitHub→
32
2
Medium Cost
notorious-ai icon

claude-plugins

by notorious-ai

Sec7

Enhances Claude's capabilities as a Go developer by providing skills for idiomatic commit message generation and as a knowledge manager for capturing and structuring online videos and articles into an Obsidian vault.

Setup Requirements

  • ⚠️Requires Go toolchain installed for `golang-dev`.
  • ⚠️Requires yt-dlp installed for video capture (`obsidian-notes`).
  • ⚠️Requires yq installed for tag extraction (`obsidian-notes`).
  • ⚠️Must be run from the root directory of an Obsidian vault for `obsidian-notes`.
  • ⚠️Required `Gems/Videos/` and `Gems/Articles/` directories must exist in Obsidian vault, as the plugin will not create them automatically.
Verified SafeView Analysis
The `obsidian-notes` plugin executes external command-line tools (`yt-dlp`, `yq`) and fetches arbitrary web content. While designed for text extraction into Markdown, this introduces potential risks if user-provided input is not sufficiently sanitized before being passed to shell commands, or if the web fetching/processing components have vulnerabilities. The `golang-dev` plugin primarily analyzes `git diff` output and generates text, posing fewer direct security risks from external execution. The overall design relies on a trusted local execution environment (user's machine/Obsidian vault).
Updated: 2026-01-18GitHub→
32
1
Medium Cost
danielwpz icon

polybrain-mcp

by danielwpz

Sec9

Connects AI agents to multiple LLM models, providing conversation history management and model switching capabilities.

Setup Requirements

  • ⚠️Requires API keys for external LLM services (e.g., OpenAI, OpenRouter), which incur usage costs.
  • ⚠️Requires Node.js version 18 or higher.
  • ⚠️Configuring multiple LLM models requires a YAML file (`~/.polybrain.yaml`), while environment variables support only a single model setup.
Verified SafeView Analysis
The server employs good security practices like input validation (Zod schemas for tools), environment variable injection for API keys (no hardcoded secrets), and careful handling of child processes. While `execSync` is used for killing processes by port, the port number is derived from trusted internal configuration, not user input, mitigating common injection risks. The HTTP server is intended for local agent communication, and exposing it publicly would require additional security considerations. No 'eval' or malicious obfuscation patterns were found.
Updated: 2025-11-25GitHub→
PreviousPage 181 of 760Next