Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

31
1
Medium Cost
lunchflow icon

mcp

by lunchflow

Sec9

This server allows AI assistants like Claude to access a user's financial data (accounts, transactions, balances) from 20,000+ banks via the Lunch Flow API.

Setup Requirements

  • ⚠️Requires a Lunch Flow account
  • ⚠️Requires banks to be connected within the Lunch Flow account
  • ⚠️Requires a Lunch Flow API key obtained from their dashboard
Verified SafeView Analysis
The server acts as a proxy for the Lunch Flow API, providing a Model Context Protocol interface. It requires an API key, which is passed as configuration and used in an HTTP header, rather than being hardcoded. The README explicitly states security measures: 'Read-only access', 'API keys are securely encrypted', 'No credentials stored in the MCP server', 'All data fetched from your Lunch Flow account', and 'Open source for transparency'. No 'eval' or other directly dangerous patterns were found. The primary security relies on the Lunch Flow API's security and secure management of the API key within the Smithery deployment environment.
Updated: 2025-11-21GitHub→
31
2
High Cost
documan-ai icon

documan

by documan-ai

Sec7

A documentation tool that provides a built-in MCP server, allowing AI assistants to semantically search and understand documentation in real-time.

Setup Requirements

  • ⚠️Requires OpenAI API Key for semantic search (DOCUMAN_OPENAI_API_KEY)
  • ⚠️Running the binary directly requires downloading from GitHub Releases, which implies trust in the distributed binaries.
Verified SafeView Analysis
A full security audit is not possible as the actual server source code (e.g., Go, Rust) was not provided for analysis, only the README.md. Based solely on the README and deployment instructions: the application uses environment variables for sensitive data (DOCUMAN_OPENAI_API_KEY), which is good practice. The binary distribution method (curl | tar xz) carries the general risk associated with running third-party binaries, but no immediate malicious patterns or dangerous code (like 'eval' or obfuscation) were identified in the provided text. Network exposure is limited to a configurable HTTP port.
Updated: 2026-01-08GitHub→
31
4
Medium Cost
timescale icon
Sec6

This boilerplate provides common code for creating a Model Context Protocol (MCP) server in Node.js, focusing on integrating 'skills' (modular agent capabilities) as tools and resources for LLM agents.

Setup Requirements

  • ⚠️Configuring skills requires a `skills.yaml` file (default: `./skills.yaml`) to specify skill sources (local paths or GitHub repositories).
  • ⚠️Loading skills from GitHub repositories requires an `Octokit` instance in the server context, implying a need for GitHub API tokens (e.g., `GITHUB_TOKEN`) for authentication and rate limit management.
  • ⚠️This is an MCP server, requiring an MCP-compatible client (e.g., Anthropic's Claude Code, or a custom SDK client) to interact with its endpoints.
  • ⚠️The custom ESLint plugin (`mcp-boilerplate/no-optional-tool-params`) enforces that tool input parameters must be required, preventing the use of `.optional()`, `.default()`, or `.nullish()` on Zod schemas for `inputSchema` to ensure compatibility with certain LLMs (e.g., GPT-5).
Review RequiredView Analysis
The boilerplate's `apiRouterFactory` directly exposes MCP tools as REST API endpoints without built-in authentication or authorization, which requires careful implementation by the user for sensitive operations. The 'Skills' feature allows loading content from configured GitHub repositories; this introduces a supply chain risk if untrusted or compromised repositories are used. While local file path traversal is mitigated by `normalizeSkillPath`, the inherent trust in external GitHub sources for skill content is a significant consideration. OpenTelemetry integration, while beneficial for observability, could inadvertently expose sensitive data if not configured properly by the implementer.
Updated: 2026-01-07GitHub→
31
1
Medium Cost
evrimalacan icon

mcp-bitbucket-server

by evrimalacan

Sec9

Connects AI assistants to Bitbucket Server/Data Center for natural language interaction with pull requests, repositories, and users.

Setup Requirements

  • ⚠️Requires a Bitbucket Server Personal Access Token (PAT) with appropriate read/write permissions for projects and repositories.
  • ⚠️Relies on specific environment variables (BITBUCKET_URL, BITBUCKET_TOKEN) to be set for configuration.
  • ⚠️Requires Node.js version 22.0.0 or higher to run.
Verified SafeView Analysis
The server primarily operates over standard I/O (stdio) as an MCP server, which limits direct external network attack surface. Authentication relies on Personal Access Tokens (PATs) passed securely via environment variables (BITBUCKET_URL, BITBUCKET_TOKEN), preventing hardcoded credentials. Tool inputs are validated using Zod schemas, mitigating common injection vulnerabilities. No 'eval' or other directly dangerous functions/patterns were identified in the provided source code.
Updated: 2025-11-28GitHub→
31
1
Medium Cost
apptolast icon

McpServerKotlin

by apptolast

Sec9

An MCP Full-Stack Server implemented in Kotlin that enables AI agents to autonomously build and manage applications.

Setup Requirements

  • ⚠️Requires JDK 21+ and Gradle 8.10+.
  • ⚠️External database services (PostgreSQL, MongoDB) are required for their respective modules to be fully functional.
  • ⚠️A GitHub personal access token (GITHUB_TOKEN) is needed for authenticated Git operations, especially for private repositories.
  • ⚠️JWT_PUBLIC_KEY is required to enable secure authentication.
Verified SafeView Analysis
The server demonstrates a strong security-first design, implementing multiple layers of defense. This includes robust path traversal protection, command whitelisting with dangerous pattern detection (e.g., fork bombs, rm -rf /, sudo, chmod 777), strict read-only query enforcement for PostgreSQL, file size and extension limits, and working directory isolation. JWT authentication with RBAC is available, though it defaults to disabled, which is a common but notable security consideration for production. MongoDB operations parse JSON strings for filters and pipelines, placing the onus on the calling agent to provide safe JSON, rather than the module sanitizing content within the JSON structure.
Updated: 2025-11-27GitHub→
31
1
Medium Cost
Sec9

Provides a Vercel AI SDK integration for Claude models, specifically designed to enable universal tool support by translating AI SDK tools to Claude Code's XML format, eliminating the need for separate MCP servers.

Setup Requirements

  • ⚠️Requires Claude Code CLI to be installed globally (`npm install -g @anthropic-ai/claude-agent-sdk`)
  • ⚠️Requires authentication via the `claude` CLI command (browser-based OAuth)
  • ⚠️A paid Claude Pro or Claude Max subscription is required for API access
Verified SafeView Analysis
The project acts as a wrapper around the official Claude Code CLI and Vercel AI SDK, with tool execution handled by the Vercel framework. This design minimizes direct execution risks from the provider itself. Security largely depends on the integrity of the Claude Code CLI (a third-party dependency) and the security practices of the user-defined tools. No 'eval' or obfuscation is apparent.
Updated: 2025-11-17GitHub→
31
1
Medium Cost

project-cortex

by mvp-joe

Sec9

Enhances AI coding assistants by providing deep semantic understanding of code and documentation via a searchable vector database.

Setup Requirements

  • ⚠️Requires download of a ~300MB `cortex-embed` binary (bundled with Python runtime and ML libraries) which runs as a separate, memory-intensive process.
  • ⚠️Requires proper configuration of a `.mcp.json` file for integration with AI assistants like Claude Code or Cursor.
Verified SafeView Analysis
Project Cortex is designed for privacy-first, local operation, with the core MCP server and embedding server running locally. Future support for remote embedding providers is planned. The `cortex-embed` binary is ~300MB and is downloaded from GitHub Releases.
Updated: 2025-11-17GitHub→
31
1
Low Cost
seanepping icon

mcp-cross

by seanepping

Sec9

Acts as a cross-platform bridge for Model Context Protocol (MCP) servers, facilitating seamless stdio communication and path translation between different environments, especially Windows and WSL2, and providing an HTTP proxy mode for accessing HTTP-based MCP servers with environment variable expansion.

Setup Requirements

  • ⚠️Requires Windows Subsystem for Linux (WSL2) to be installed and configured for `--wsl` mode.
  • ⚠️Requires Node.js 18+ to be installed on the host system.
  • ⚠️Commands executed within WSL (e.g., `node`, `python`) must be available in the WSL environment's PATH, or their absolute paths must be specified. Users of version managers (like `nvm` or `pyenv`) in WSL may need to use absolute paths or configure their shell carefully.
Verified SafeView Analysis
The project demonstrates a strong focus on security, particularly in handling shell command execution and environment variable propagation across Windows and WSL. Key measures include robust argument escaping for `wsl.exe` and login shells, a WSL runner script (`wsl-runner.sh`) that sanitizes the PATH to prevent unintended Windows binary execution, and careful handling of environment variables via `WSLENV` with a Windows environment variable blacklist. Header parsing includes validation against CRLF injection, and sensitive header values are masked in debug logs. The HTTP proxy mode also warns against using insecure HTTP for non-localhost endpoints. There are no apparent hardcoded secrets or malicious patterns.
Updated: 2025-12-05GitHub→
31
1
Low Cost
mogami-tech icon

x402-mcp-server

by mogami-tech

Sec2

Enables native x402 payments for AI agents via a Spring Boot server, exposing payment operations as MCP tools.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) for Spring Boot execution.
  • ⚠️Requires configuration of x402 payment credentials (e.g., wallet keys) for transaction processing.
  • ⚠️Dependencies on Mogami Java x402 Client, which needs to be available.
Review RequiredView Analysis
Full source code for the Spring Boot server and its dependencies is not provided, making a comprehensive security audit impossible. The provided content is limited to a README. As a payment-processing server, it inherently deals with sensitive financial transactions and requires rigorous security practices (e.g., secure handling of payment keys, robust authentication, input validation, secure communication). Without access to the actual Java source code, critical vulnerabilities such as insecure API endpoints, improper credential storage, or business logic flaws cannot be assessed. The 'Mogami Java x402 Client' is a dependency, and its security also impacts the overall system.
Updated: 2025-11-23GitHub→
31
1
Medium Cost
hyperpolymath icon

poly-db-mcp

by hyperpolymath

Sec9

Provides a unified Model Context Protocol (MCP) server for querying and managing over 20 diverse databases (SQL, NoSQL, Vector, Cache) through a single natural language interface.

Setup Requirements

  • ⚠️Requires Deno runtime to execute the server.
  • ⚠️Database connections are configured individually via environment variables (e.g., POSTGRES_HOST, MONGODB_URL) for each database you intend to use.
  • ⚠️Designed to be integrated with an MCP-compatible client (e.g., Claude Code) for natural language interaction.
Verified SafeView Analysis
The server leverages Deno's secure runtime with explicit permission grants (`--allow-net`, `--allow-read`, `--allow-write`, `--allow-env`), avoiding `--allow-run` to prevent shell execution vulnerabilities. It actively tests against hardcoded credentials in adapters and enforces environment variable-based configuration for sensitive data. A comprehensive `SECURITY.md` outlines robust vulnerability reporting and disclosure policies, including a 'Safe Harbour' for researchers. The `PROVEN-INTEGRATION.md` indicates a plan to integrate formally verified modules for SQL injection prevention and schema validation, demonstrating a proactive approach to security by design. Pre-commit hooks for GitHub Actions also enforce security best practices for workflows. The primary security boundary for data access relies on the user's configuration of database authentication, which is a common and necessary practice.
Updated: 2026-01-17GitHub→
31
1
Low Cost
cbolden15 icon
Sec4

Personal tool for managing Claude Code and Auto-Claude project configurations across multiple projects and machines, acting as a single source of truth for agent personas, MCP servers, model profiles, and project settings.

Setup Requirements

  • ⚠️Requires Node.js 20.0.0+ and pnpm 9.0.0+ for local development/CLI.
  • ⚠️The server has no built-in authentication and relies entirely on network-level trust (e.g., local network, VPN like Tailscale). This is a critical security consideration.
  • ⚠️Requires Docker for production deployment.
  • ⚠️A `CCM_ENCRYPTION_KEY` environment variable (32+ characters) must be set for encryption features to work. Otherwise, sensitive data will be unencrypted or features will fail.
  • ⚠️Full Auto-Claude features require a separate Auto-Claude installation.
Review RequiredView Analysis
The server explicitly states 'No authentication - Relies on network-level trust (local network / Tailscale)'. This is a critical security vulnerability if the server is exposed outside a strictly controlled, trusted network. If deployed incorrectly (e.g., publicly accessible without a VPN/firewall), it could allow unauthorized access to sensitive configurations and API keys. Sensitive data like API keys are encrypted at rest in the database and masked in the UI, which is good practice, but the lack of transport-layer authentication remains a significant risk by design.
Updated: 2026-01-19GitHub→
31
6
High Cost
hamid-vakilzadeh icon

AIRA-SemanticScholar

by hamid-vakilzadeh

Sec9

Provides AI models with comprehensive access to the Semantic Scholar Academic Graph API for intelligent literature search, paper analysis, and citation network exploration.

Setup Requirements

  • ⚠️Semantic Scholar API Key (for higher rate limits and full access)
  • ⚠️Wiley TDM Client Token and institutional access (for Wiley full-text PDF download functionality)
  • ⚠️Node.js runtime required
Verified SafeView Analysis
API keys are properly externalized via environment variables or client configuration. Robust error handling and rate-limiting are implemented for external API calls. PDF processing is in-memory using a widely used library (pdfjs-dist). CORS is set to '*' which is generally acceptable for an MCP server designed for integration, but could be restricted further in a highly specific production deployment.
Updated: 2025-11-19GitHub→
PreviousPage 200 of 760Next