Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

32
2
Medium Cost
jcucci icon
Sec9

Enables Language Learning Models (LLMs) to analyze and understand .NET code with precision through deep introspection of assemblies.

Setup Requirements

  • ⚠️Requires .NET 9.0 SDK to build and run from source.
  • ⚠️Requires an MCP client (e.g., Cursor, Claude Desktop) for interaction, as it communicates over stdio.
  • ⚠️Users must supply valid paths to compiled .NET assemblies for analysis.
Verified SafeView Analysis
The server primarily relies on reflection and explicitly states it prefers `MetadataLoadContext` to avoid executing user code during analysis, which is a significant security best practice. It communicates over stdio, limiting network exposure. The main risk involves pointing the tool to untrusted or malicious assemblies, which is an inherent risk of any code analysis tool but is mitigated by the `MetadataLoadContext` approach.
Updated: 2026-01-18GitHub→
32
2
Medium Cost
puran-water icon
Sec3

An MCP server enabling LLM-assisted generation, manipulation, validation, and visualization of engineering diagrams (BFD, PFD, P&ID) following DEXPI and SFILES standards.

Setup Requirements

  • ⚠️Requires Node.js and 'npm install elkjs' for ELK layout features.
  • ⚠️Requires `pydexpi` and `sfiles2` Python libraries.
  • ⚠️Git is required for project persistence features (e.g., `project_init`, `project_save`, `project_load`).
  • ⚠️If not using Docker, the `graphicbuilder-service.py` (Flask) and `proteus-viewer` (Node.js) services need to be run separately for full visualization capabilities.
Review RequiredView Analysis
The server uses `eval()` in `src/tools/pfd_expansion_engine.py` for template condition evaluation, which is a critical vulnerability if template definitions or runtime parameters can be influenced by untrusted input, allowing arbitrary code execution. Extensive use of `subprocess.run()` calls in various modules (e.g., `project_persistence.py`, `elk.py`, `graphicbuilder-service.py`) poses a risk of command injection if arguments are not rigorously sanitized. The server exposes an MCP API, and visualization components run separate Node.js and Flask services, widening the attack surface. `sys.path.append` is used, which can be a module hijacking risk in untrusted environments.
Updated: 2025-12-05GitHub→
32
2
Low Cost

mcp

by open-feature

Sec8

The OpenFeature MCP Server enables AI coding assistants to interact with OpenFeature, providing SDK installation guidance and feature flag evaluation capabilities.

Setup Requirements

  • ⚠️Node.js and npm are required for installation via npx or npm global install.
  • ⚠️An OFREP-compatible flag service must be configured (with base_url and optional authentication) to use the `ofrep_flag_eval` tool.
  • ⚠️Requires an AI assistant (e.g., Cursor, VS Code with Continue, Claude Code) to be configured to interact with the MCP server.
Verified SafeView Analysis
The server uses `npx` or `npm install` for setup, which involves executing code from npm; this is a standard but inherent risk for any Node.js package. It connects to user-configured external OFREP services, requiring API keys or bearer tokens, which should be handled securely. No 'eval' or obfuscation is apparent in the provided README.
Updated: 2025-11-17GitHub→
32
2
Medium Cost
seanivore icon

the-pensieve

by seanivore

Sec7

The Pensieve server acts as a RAG-based knowledge management system, allowing users to store, query, and analyze their knowledge using natural language and LLM-powered insights.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid Service)
  • ⚠️Requires Qdrant URL and API Key (Vector Database, can be self-hosted or managed service)
  • ⚠️Knowledge base must be structured as markdown files, ideally with frontmatter, as processed by `inventory-parser.ts`.
Verified SafeView Analysis
API keys are passed as command-line arguments and set as environment variables, which is better than hardcoding but less secure than dedicated secret management. The `generate_markdown` tool writes files to `rootPath` using a `filename` argument; if `filename` is not sanitized by the client, it could potentially lead to path traversal vulnerabilities. No direct `eval` or blatant obfuscation found. External network requests to OpenAI and Qdrant are expected for core functionality.
Updated: 2025-11-29GitHub→
32
2
High Cost
skaldlabs icon

skald-mcp

by skaldlabs

Sec9

Provides a Model Context Protocol (MCP) server to chat with, create, update, delete, search, and generate content from a Skald AI knowledge base.

Setup Requirements

  • ⚠️Requires an active Skald account and API key (Skald is a paid service).
  • ⚠️Requires Node.js version 18.0.0 or higher.
  • ⚠️Configuration for clients like Cursor or Claude Desktop involves specifying an absolute path to the 'build/index.js' file, which might require extra steps for users.
Verified SafeView Analysis
The server uses Zod for robust input validation on all tool parameters, significantly reducing the risk of injection attacks. It relies on a Skald API key, which must be provided via an environment variable or command-line argument, preventing hardcoding. All communication with the Skald knowledge base is handled by the official `@skald-labs/skald-node` SDK, which is assumed to be secure. No direct use of 'eval' or other highly dangerous patterns is observed in the provided code snippet. Security largely depends on the integrity of the Skald platform and SDK.
Updated: 2025-12-12GitHub→
32
2
Medium Cost
bit2me-devs icon

bit2me-mcp

by bit2me-devs

Sec9

Integrates AI assistants with the Bit2Me cryptocurrency exchange, enabling real-time market data access, wallet management, trading operations, and interactions with Earn and Loan products.

Setup Requirements

  • ⚠️Requires a verified Bit2Me account to generate API keys.
  • ⚠️Mandatory `BIT2ME_API_KEY` and `BIT2ME_API_SECRET` environment variables for authentication (API keys are recommended over JWTs for most use cases).
  • ⚠️Node.js v18 or higher is required.
  • ⚠️For security best practices, 'Withdrawal' permissions should not be enabled on your Bit2Me API Key.
Verified SafeView Analysis
The server implements robust security measures including HMAC-SHA512 for API key signing, comprehensive input validation to prevent common attack vectors, and explicit sanitization of sensitive data (API keys, JWTs) in logs. It also utilizes a circuit breaker and rate limiting to enhance resilience and protect the upstream Bit2Me API. CodeQL, ESLint security plugins, and gitleaks are used in the development pipeline.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
chayan-1906 icon

Google-Workspace-MCP

by chayan-1906

Sec3

Seamlessly integrates Google Drive, Sheets, and Docs with Claude AI and other AI agents through the Model Context Protocol (MCP) for automation.

Setup Requirements

  • ⚠️Requires Google Cloud OAuth 2.0 Client ID and Client Secret (must be obtained and configured).
  • ⚠️Requires a MongoDB instance for storing user tokens and sessions (MONGODB_URI must be configured).
  • ⚠️Requires a strong `TOKEN_SECRET` for secure encryption of user authentication tokens.
Review RequiredView Analysis
The `credentials.json` file in the repository contains a hardcoded Google service account private key. This is a critical security vulnerability, as private keys should never be publicly exposed. While the application's primary OAuth flow relies on user-configured `CLIENT_ID` and `CLIENT_SECRET` (which are correctly externalized as empty placeholders in `config.ts`), the presence of this service account key in the source code constitutes a severe credential leak. Additionally, the application requires `TOKEN_SECRET` for encrypting/decrypting user tokens, which must also be securely configured.
Updated: 2025-11-27GitHub→
32
20
Medium Cost
koki7o icon

mcp-framework

by koki7o

Sec5

A Rust framework for building AI agents with built-in Model Context Protocol (MCP) support, multi-LLM integration, and a web-based inspector for debugging.

Setup Requirements

  • ⚠️Requires Rust 1.70+ to compile and run.
  • ⚠️Requires an `ANTHROPIC_API_KEY` environment variable for Claude LLM integration (paid service).
  • ⚠️Requires an `OPENAI_API_KEY` environment variable for OpenAI LLM integration (paid service).
  • ⚠️Browser automation examples require Playwright to be installed via `npm install -g @playwright/mcp` and browser binaries via `npx playwright install firefox`.
Review RequiredView Analysis
The server's design allows AI agents to dynamically call registered tools, which inherently introduces risks if tools are not carefully implemented and sandboxed. The `StdioConnector` enables spawning arbitrary external commands via a 'stdio://command args' URL scheme; if an attacker can control this URL or the tool arguments, it could lead to arbitrary code execution (e.g., command injection). The Web Inspector UI (`inspector.rs`) exposes internal server state and allows direct execution of tools without authentication, making it a critical vulnerability if exposed publicly. While API keys are loaded from environment variables, the powerful dynamic execution capabilities require rigorous input sanitization and strict access controls, especially in production environments.
Updated: 2025-12-28GitHub→
32
2
Medium Cost
CaullenOmdahl icon

youtube-music-mcp-server

by CaullenOmdahl

Sec4

Full-featured MCP server for YouTube Music to search, manage playlists, and create smart recommendations through AI assistants.

Setup Requirements

  • ⚠️Requires `GOOGLE_OAUTH_CLIENT_ID` and `GOOGLE_OAUTH_CLIENT_SECRET` (Google OAuth credentials).
  • ⚠️Requires `ENCRYPTION_KEY` environment variable (a strong, 32-byte Base64 key) for secure token storage. Failing to provide this makes stored tokens easily compromised.
  • ⚠️Requires a PostgreSQL database (`DATABASE_URL` environment variable) for adaptive playlist functionality. Migration is needed on first run (`node dist/database/migrate.js`).
  • ⚠️Requires `SPOTIFY_CLIENT_ID` and `SPOTIFY_CLIENT_SECRET` for full adaptive playlist recommendation features.
Review RequiredView Analysis
The server uses AES-256-GCM for encrypting OAuth tokens for persistence, which is generally robust. However, if the `ENCRYPTION_KEY` environment variable is not explicitly provided, it falls back to a hardcoded, insecure default key. This makes stored tokens easily recoverable and poses a critical vulnerability. Input validation for tool parameters is handled using Zod, and database queries use parameterized statements to prevent SQL injection. OAuth is handled via the MCP SDK's proxy provider, abstracting many security complexities. The YTM_API_KEY is a publicly known key and not a secret.
Updated: 2026-01-09GitHub→
32
1
Medium Cost
aborruso icon

ckan-mcp-server

by aborruso

Sec9

Enables AI agents to interact with CKAN-based open data portals for searching datasets, exploring organizations, and querying tabular data.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️Requires `npm install` to get dependencies if running from source or locally.
  • ⚠️The CKAN MCP server currently only supports public CKAN API endpoints, without authentication for private instances.
  • ⚠️Deploying to Cloudflare Workers requires a Cloudflare account and setup using the Wrangler CLI.
Verified SafeView Analysis
The server is designed to be read-only and interact with public CKAN APIs. Input parameters are validated using Zod schemas. No 'eval' or hardcoded secrets were found in the provided source code. A previously identified ReDoS vulnerability in the `@modelcontextprotocol/sdk` dependency (version 1.25.1) has been resolved by updating to version 1.25.2. The server makes network requests to user-provided `server_url` which is inherent to its function. CORS is open (`Access-Control-Allow-Origin: *`) for public access.
Updated: 2026-01-19GitHub→
32
2
Low Cost
mark-oori icon

mcpserve

by mark-oori

Sec1

A server for deploying AI/ML models, providing shell access and containerization features for development and remote access.

Setup Requirements

  • ⚠️Requires Docker for containerized deployment (as per `docker-compose.yml`).
  • ⚠️The `Getting Started` instructions in the README are inaccurate and misleading, referencing `npm install` and `node` commands for what is a Python-based server.
  • ⚠️API key authentication is disabled by default, requiring manual uncommenting of the middleware in `main.py` and configuration of `MCP_API_KEY` for any level of security.
Review RequiredView Analysis
CRITICAL: The `shell_command` tool uses `subprocess.check_output(command, shell=True)`, which is an extreme security risk. This allows arbitrary command injection if the `command` variable can be influenced by external input. Furthermore, the API key authentication middleware is commented out in `main.py`, meaning the server is unauthenticated by default. This combination allows for remote code execution without any authentication, making it highly vulnerable.
Updated: 2026-01-19GitHub→
32
2
Medium Cost
staminna icon
Sec3

This server acts as an MCP (Model Context Protocol) interface for Directus, enabling AI assistants to programmatically interact with Directus data, schema, and operations.

Setup Requirements

  • ⚠️Requires Node.js version 22.0.0 or higher.
  • ⚠️CRITICAL: Provided IDE configuration examples (`show-windsurf-config.sh`) contain a hardcoded Directus API token. Users MUST replace 'your-directus-token-here' or the example token with their actual API token and ensure it is not exposed in configuration files or source control.
  • ⚠️WebSocket real-time subscription support is explicitly disabled by default in the main server configuration (`src/index.ts`) to 'reduce logging noise'. Users expecting this feature must manually enable it.
Review RequiredView Analysis
The core server code follows good security practices like using environment variables for tokens and handling HTTPS. However, a critical security vulnerability exists in the provided helper script `show-windsurf-config.sh` which hardcodes a Directus API token (`1X6eST1lyCGCtjGOucQ-i65tLXfcKkE4`). If a user copies this configuration into their IDE settings (as instructed) without replacing the placeholder, their Directus API token will be exposed, leading to unauthorized access. While the server itself reads from environment variables, the ease with which a user could adopt this insecure configuration significantly lowers the overall security posture. There is also an option to disable TLS certificate validation (`DIRECTUS_HTTPS_REJECT_UNAUTHORIZED=false`), which, if enabled by users, could lead to insecure connections.
Updated: 2025-12-12GitHub→
PreviousPage 185 of 760Next