Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

32
2
Medium Cost
tlockney icon

obsidian-mcp

by tlockney

Sec9

Enables AI models to interact with Obsidian vaults by exposing Obsidian Local REST API functionality as MCP tools.

Setup Requirements

  • ⚠️Requires Obsidian with the 'Local REST API' plugin installed, enabled, and configured with an API key (optional but recommended for security).
  • ⚠️For running from source or development, Deno 2.x must be installed.
  • ⚠️User must manually generate and provide an API key from Obsidian's Local REST API plugin settings if authentication is enabled.
Verified SafeView Analysis
The project uses Deno's built-in tooling and standard practices for handling API keys (via env vars/CLI). It makes HTTP requests to a user-configured Obsidian Local REST API endpoint. Error responses from the API are parsed safely with graceful fallback. The `install.sh` script removes macOS quarantine attributes, which is common for unsigned binaries but the user should be aware it overrides some OS security warnings for a downloaded executable.
Updated: 2025-12-14GitHub→
32
4
Medium Cost
coucya icon
Sec8

An MCP server that provides HTTP request capabilities, enabling LLMs to fetch and process web content, including saving to files.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires MCP Client with 'root' capability for file operations relative to workspace root ('--use-root' flag)
Verified SafeView Analysis
The server allows arbitrary HTTP requests to external URLs and supports writing fetched content to the local filesystem. File writing operations include robust checks against path traversal attacks and writing to common protected system directories (e.g., /etc, C:\Windows). The `--use-root` and `--allow-external-file-access` options, if enabled, increase the potential risk profile by allowing broader file access, but require explicit opt-in via command-line flags. No 'eval' or other critical, obvious vulnerabilities like hardcoded secrets or malicious patterns were found in the provided source.
Updated: 2025-11-21GitHub→
32
2
High Cost
ThreeFish-AI icon

data-extractor

by ThreeFish-AI

Sec8

A commercial-grade MCP Server designed for robust web page and PDF content extraction and conversion to Markdown, purpose-built for long-term enterprise deployment.

Setup Requirements

  • ⚠️Requires Python 3.12+ (recommend 3.13).
  • ⚠️Requires 'uv' package manager for setup and execution.
  • ⚠️Requires Playwright browsers (e.g., Chromium) installation if using 'selenium' or 'playwright' scraping methods.
  • ⚠️Environment variables (in a '.env' file or system-wide) must be configured for optimal operation.
Verified SafeView Analysis
The server's core functionality involves making network requests to arbitrary external URLs for web scraping and PDF downloads. This introduces inherent risks from interacting with potentially malicious or untrusted external content. However, the codebase does not exhibit signs of malicious intent, hardcoded secrets, or dangerous dynamic code execution patterns (like `eval` on untrusted input). It includes good practices such as sanitizing HTML (removing scripts and styles) and respecting `robots.txt` rules. The use of robust, well-maintained libraries like Scrapy, Selenium, Playwright, PyMuPDF, and PyPDF also contributes to overall security, provided these libraries themselves are kept updated and properly configured. Configuration for sensitive details like proxy URLs uses environment variables, which is a secure approach.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
bakietd icon
Sec6

Integrates AI, APIs, and automation for intelligent notifications and workflow optimization with GitHub and X.

Setup Requirements

  • ⚠️Requires Node.js installed on the system.
  • ⚠️Likely requires API keys for Google GenAI (potentially paid service), GitHub, and X (Twitter) for full functionality.
  • ⚠️Core functionality depends on a proprietary `@modelcontextprotocol/sdk` which is not open-source, leading to a 'black box' for key logic and potential hidden requirements.
Verified SafeView Analysis
The core server logic for AI-powered features, API integration, and automation is largely encapsulated within the proprietary `@modelcontextprotocol/sdk` which is not provided in the source. The explicit application code (index.ts files) is minimal ('Hello World'-style output), making a full security assessment impossible without the SDK's source. Dependencies include reputable packages like `@google/genai`, `express` (transitive), and `dotenv` for environment variables. `express-rate-limit` is used, which is a good security practice. No obvious malicious patterns like 'eval' or obfuscation were found in the provided files.
Updated: 2025-12-15GitHub→
32
1
High Cost
kfreiman icon

vibecheck

by kfreiman

Sec9

A server for intelligent analysis of CVs and job descriptions, facilitating recruitment by assessing document fit and generating interview questions.

Setup Requirements

  • ⚠️Docker is required for easy setup and running.
  • ⚠️Requires a local Ollama/LLM instance for AI functionality (e.g., analysis, interview question generation), which often benefits from GPU support.
  • ⚠️HTML document processing relies on Playwright, which can have system-level dependencies or be resource-intensive.
Verified SafeView Analysis
The project demonstrates a strong awareness of common security risks, with explicit checks for path traversal ('..') and null bytes ('\x00') in file paths. Document processing for PDFs uses `go-pdfium` (WebAssembly), providing a sandboxed environment. HTML processing uses a headless Playwright browser and `go-readability` to extract content, which isolates rendering from the main application logic and attempts to remove boilerplate. No obvious hardcoded secrets or malicious patterns were found in the provided code. The reliance on distroless base images and structured error handling, as stated in the README, further enhances security posture. The system is described as a 'portfolio/demo project,' implying it may not be fully battle-hardened for all real-world attack vectors, but the explicit measures taken are robust.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
Cylera icon
Sec9

This MCP server connects an AI assistant to Cylera's IoT security platform to provide LLMs with read-only access to device inventory, threats, risks, and utilization data.

Setup Requirements

  • ⚠️Python 3.13 required (strict version)
  • ⚠️Requires 'uv' for package management
  • ⚠️Cylera Partner API credentials required (CYLERA_USERNAME, CYLERA_PASSWORD, CYLERA_BASE_URL)
  • ⚠️Requires Docker Desktop for 'easy button' installation and for running the official image
Verified SafeView Analysis
The server is explicitly designed to be read-only (GET operations only), significantly reducing risks of data vandalism or unauthorized manipulation if an agent is compromised. Credentials are managed via environment variables and not hardcoded. The development workflow incorporates security scanning tools like Bandit and pip-audit. No dangerous functions like 'eval' or obfuscation were found. The explicit acknowledgment of data exfiltration risk and focus on mitigation in the README is a strong positive.
Updated: 2026-01-16GitHub→
32
2
Medium Cost
john-walkoe icon

uspto_pfw_mcp

by john-walkoe

Sec9

Provides enhanced search, data retrieval, and secure document management for USPTO Patent File Wrapper data, enabling legal research, due diligence, and cross-MCP (FPD, PTAB, Citations, Pinecone) integration.

Setup Requirements

  • ⚠️Requires USPTO_API_KEY (paid API) for core functionality.
  • ⚠️MISTRAL_API_KEY (paid Mistral AI API) is optional but required for advanced OCR capabilities.
  • ⚠️Native secure storage for API keys relies on Windows DPAPI; falls back to environment variables on other OS.
  • ⚠️An internal FastAPI proxy server runs on localhost (default 8080), automatically started in the background.
Verified SafeView Analysis
The server demonstrates a high level of security consciousness. It employs IP whitelisting (localhost only), CORS restrictions, robust security headers, and request size limits for its internal proxy. API keys are managed via unified secure storage (Windows DPAPI or environment variables) and are never exposed in URLs. Inter-MCP communication uses HMAC-SHA256 tokens instead of raw keys. All logging is sanitized to prevent sensitive data exposure (API keys, tokens, IPs, emails). Rate limiting is implemented for external USPTO API calls. The `INTERNAL_AUTH_SECRET` can be auto-generated if not provided, which is acceptable for development but should be explicitly configured in production environments as per `SECURITY_GUIDELINES.md`.
Updated: 2026-01-19GitHub→
32
1
Low Cost
nakada-memo icon
Sec8

Converts Excel design documents and spreadsheets into high-fidelity images, preserving visual elements and print layouts, optimized for large documents and external consumption.

Setup Requirements

  • ⚠️Requires Windows Operating System
  • ⚠️Requires Microsoft Excel (2016 or later recommended) to be installed
  • ⚠️Requires manual post-installation step for `pywin32`: `python Scripts/pywin32_postinstall.py -install`
Verified SafeView Analysis
The server interacts with Microsoft Excel via `win32com`, which requires Excel to be installed and running on a Windows OS. This design means the server directly interfaces with a desktop application, which inherently carries risks if processing untrusted Excel files (e.g., macro execution). However, the code itself does not introduce obvious vulnerabilities like `eval`, network risks, or hardcoded secrets. File paths are handled for temporary file creation and specified output directories. The `excel_app.DisplayAlerts = False` setting reduces user interaction but could hide potential Excel warnings. The primary security consideration is ensuring trusted Excel files are processed by the agent.
Updated: 2025-11-25GitHub→
32
2
Medium Cost
Asmah-Acheampong icon

TradingViewMCPServer

by Asmah-Acheampong

Sec9

Serves as a multi-asset trading assistant for Claude Desktop, providing real-time market data, technical analysis, and Pine Script v6 development tools for Forex, Stocks, and Crypto.

Setup Requirements

  • ⚠️Requires an Alpha Vantage API Key (free tier available, but registration is needed).
  • ⚠️Requires Python 3.10 or higher due to MCP SDK dependencies.
  • ⚠️While not strictly mandatory, Docker is recommended for production deployment, which adds an initial setup step for users unfamiliar with Docker.
Verified SafeView Analysis
The server demonstrates good security practices: - API keys (ALPHA_VANTAGE_API_KEY) are loaded from environment variables and not hardcoded. - The Pine Script sandbox explicitly states it performs static analysis and simulation, not actual code execution on the local Python interpreter, mitigating 'eval' related risks. - Network requests are handled with timeouts, retry logic (exponential backoff), and rate limiting, reducing the risk of network-related failures or abuse. - No obvious malicious patterns or obfuscation were found. - Input validation is implemented for various parameters.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
triepod-ai icon
Sec7

Provides a comprehensive automated assessment platform for Model Context Protocol (MCP) servers, analyzing their security, functionality, protocol compliance, documentation, and various extended metrics. It acts as an inspector and auditing tool for MCP server developers and maintainers.

Setup Requirements

  • ⚠️Requires a separate Model Context Protocol (MCP) server to be available and configured as the target for assessment.
  • ⚠️The MCP Proxy server (part of this Inspector) generates a unique session token on startup, which is required for authenticating client-side connections (unless `DANGEROUSLY_OMIT_AUTH` is explicitly set).
  • ⚠️Optional Claude Code integration (for semantic analysis of tools and documentation) requires an external `mcp-auditor` service to be running, which can incur LLM token costs and may require additional API key configuration.
  • ⚠️Remote MCP servers being assessed may require OAuth 2.0 configuration (client ID, secret, scope).
Review RequiredView Analysis
The server component (proxy) is designed to execute arbitrary commands (`spawn-rx`) and make network requests to target MCP servers as part of its core security assessment functionality. This implies a high level of privilege is required to run this tool. Authentication for the proxy uses a session token with `timingSafeEqual` for robustness. Filename sanitization is applied to assessment output files to prevent simple path traversal. The client-side code defines numerous advanced attack patterns, but these are for testing *other* MCP servers, not vulnerabilities within this project itself. The tool performs checks for hardcoded secrets and insecure configurations in *assessed* MCP servers. Running this tool requires trusting its capabilities to interact with your system and network.
Updated: 2026-01-19GitHub→
32
1
Medium Cost
rogermt icon

forgesyte

by rogermt

Sec8

ForgeSyte is a modular AI-vision Model Context Protocol (MCP) server for image analysis, processing, and orchestration of pluggable vision modules, designed for integration with clients like Gemini-CLI.

Setup Requirements

  • ⚠️Requires Python 3.10+ and the `uv` dependency manager.
  • ⚠️API keys (`FORGESYTE_ADMIN_KEY`, `FORGESYTE_USER_KEY`) need to be configured for authenticated access. Anonymous access is only permitted if no keys are configured.
  • ⚠️Node.js 18+ and `npm` are required for developing and running the optional React Web UI.
Verified SafeView Analysis
The server implements API key-based authentication with SHA256 hashing and role-based access control (RBAC). Pydantic models are extensively used for input/output validation, reducing common web vulnerabilities. Structured logging and comprehensive error handling are present. The dynamic plugin loading system relies on Python entry-points, meaning plugins must be `pip install`able packages. While this allows extensibility, the security of the overall system depends on the trustworthiness and security of loaded plugins. The `ImageAcquisitionService` fetches external URLs, which is a potential SSRF vector, but it uses `httpx` with timeouts and status checks to mitigate risks. No direct `eval` or intentional obfuscation was observed.
Updated: 2026-01-19GitHub→
32
2
Low Cost
Sec7

A Python server designed to manage and serve memory for AI agents, facilitating their interaction with external Large Language Models or data sources.

Setup Requirements

  • ⚠️Python 3.x environment required.
  • ⚠️Requires installation of Python dependencies via `pip install -r requirements.txt`.
  • ⚠️May require configuration in `mcp_config.json` for server parameters or external services.
Verified SafeView Analysis
As a server, it likely opens network ports. No obvious 'eval' or obfuscation from file names. Actual security depends on specific code implementation, especially regarding data handling and API interactions.
Updated: 2025-11-18GitHub→
PreviousPage 182 of 760Next