Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

31
1
Low Cost
Alexpoopy1 icon
Sec4

Enables AI agents to interact with and automate tasks within Roblox Studio by executing specific commands.

Setup Requirements

  • ⚠️Requires manual installation of a Roblox Studio plugin (`loader.server.lua`).
  • ⚠️Requires 'Allow HTTP Requests' to be enabled in Roblox Studio's Game Settings > Security.
  • ⚠️The Roblox Studio game must be running (e.g., in Play mode) for the plugin to be active and respond to commands.
Verified SafeView Analysis
The server includes a 'RunConsoleCommand' tool that allows the connected AI agent to execute arbitrary Luau code within Roblox Studio. While this is an intended feature for powerful automation, it represents a critical security risk if the AI agent is compromised or misaligned, as it could lead to unintended or malicious modifications within the Roblox Studio environment. The server runs on localhost, limiting direct external network attacks.
Updated: 2025-12-09GitHub→
31
1
Medium Cost
miziodel icon

navigravity

by miziodel

Sec9

Empowers an AI agent to act as a sophisticated music curator for a self-hosted Navidrome library, focusing on quality, discovery, and non-destructive management.

Setup Requirements

  • ⚠️Requires a running Navidrome server with a user account and its URL, username, and password configured in a .env file.
  • ⚠️Requires Python 3.10+ to run.
  • ⚠️Designed to be run by an MCP-compatible AI client (e.g., Claude Desktop, Zed, Cursor) or the MCP Inspector for direct interaction.
Verified SafeView Analysis
The server utilizes standard practices for configuration (.env for secrets), structured logging (JSON), and external API interaction (libsonic). It runs as a local MCP server process, not exposing a public network port by default, which minimizes direct attack surface. Input sanitization is present (e.g., regex for song IDs). There are no direct `eval` or `exec` calls on user-supplied input. File system operations are limited to logging within a configurable path, and directory creation is handled safely. The primary risks would stem from vulnerabilities within the external Navidrome instance or the `libsonic` library, which are outside the scope of this server's direct code.
Updated: 2026-01-18GitHub→
31
2
Low Cost
DAFoam icon
Sec3

Facilitate conversational pre-processing, CFD simulations, optimization, and post-processing of airfoil and wing designs using DAFoam.

Setup Requirements

  • ⚠️Requires Docker or a Linux environment with DAFoam compiled from source and configured.
  • ⚠️Requires DAFoam, OpenFOAM, ParaView (`pvpython`), MPI, pyGeo, pyHyp, prefoil, python-stl, Pillow, Trame, and VTK to be installed and configured in the environment.
  • ⚠️Starts HTTP servers on ports 8001 and 8002; these ports must be available and may need to be exposed if running in a container.
Review RequiredView Analysis
The server uses `subprocess.run` and `subprocess.Popen` to execute shell commands with user-provided arguments (e.g., `airfoil_profile`, `cpu_cores`, `mach_number`, `reynolds_number`, `x_location`, `y_location`, `zoom_in_scale`, `flow_field`, `time_step`, `mesh_cells`, `y_plus`, `n_ffd_points`, `mesh_tool`, `max_cell_size`, `mesh_refinement_level`, `n_boundary_layers`, `mean_chord`, `wing_span`, `leading_edge_root`, `leading_edge_tip`, `angle_of_attack`, `lift_constraint`, `max_opt_iters`, `reference_area`, `primal_func_std_tol`, `spanwise_chords`, `spanwise_x`, `spanwise_z`, `spanwise_twists`). These arguments are directly interpolated into bash commands using f-strings without robust input sanitization. This creates a severe **command injection vulnerability** if a malicious user can control any of these input values. For example, injecting `"; rm -rf /"` into a string argument could lead to arbitrary code execution. Additionally, an HTTP server and a Trame viewer are started on ports 8001 and 8002 respectively, accessible on `0.0.0.0`, which exposes generated plots and interactive viewers over the network. The `download_airfoil_from_uiuc` function downloads files based on user input, which could be a vector for malicious file downloads if the `airfoil_name` input could be manipulated. `os.system` is also used for file operations.
Updated: 2026-01-09GitHub→
31
1
Low Cost
umitkacar icon
Sec9

Orchestrates multi-agent AI systems, managing tasks, communication, and collective intelligence processes like voting and brainstorming, exposed via a robust API and client SDKs.

Setup Requirements

  • ⚠️Requires PostgreSQL database setup and migration execution.
  • ⚠️Requires Redis for caching, sessions, and distributed locking.
  • ⚠️Requires RabbitMQ message broker for inter-agent communication.
  • ⚠️Node.js runtime version 18.0.0 or higher is required for TypeScript SDK/Node.js components.
  • ⚠️Python runtime version 3.8 or higher is required for Python SDK/agents.
  • ⚠️An API Key is required for client authentication.
  • ⚠️Database migrations must be run post-setup.
Verified SafeView Analysis
The system demonstrates a strong focus on security, featuring dedicated modules for JWT-based authentication/authorization (using bcrypt for hashing), comprehensive Joi-based input validation with explicit sanitization against XSS, SQL injection, command injection, and path traversal. It also implements extensive security event logging (authentication, authorization, data access, configuration changes, policy violations, rate limits, encryption events, compliance audits) with reporting and alerting capabilities. Secrets are managed via environment variables (dotenv), and Kubernetes secret examples are provided. No obvious hardcoded secrets or 'eval' without clear justification were found. Score is high, but a perfect 10 would require explicit details on secure secret injection mechanisms in production deployment and regular external security audits.
Updated: 2025-12-11GitHub→
31
1
Medium Cost
aike1202 icon
Sec9

Enables AI assistants to securely interact with various relational databases for querying data, analyzing schema, and performing controlled data modifications.

Setup Requirements

  • ⚠️The `DATABASE_URL` environment variable is mandatory for server operation.
  • ⚠️Connecting to SQL Server or Oracle might require specific network configuration, such as enabling TCP/IP protocols or adjusting firewall settings.
  • ⚠️The `get_table_ddl` tool is not fully implemented for PostgreSQL and SQL Server, returning null for these database types.
Verified SafeView Analysis
The server employs robust security measures against SQL injection by using parameterized queries in most database adapters (MySQL, PostgreSQL, SQLite, Oracle). Table names passed to `describe_table` and `inspect_table` tools are rigorously validated using a regex to prevent injection. The `MCP_DB_READ_ONLY` environment variable provides a critical safeguard to disable all write operations. Audit logs capture detailed information about tool calls, queries, and parameters. While the SQL Server adapter's parameter conversion logic could theoretically misinterpret '?' within string literals in AI-generated SQL, the underlying driver's parameter binding still mitigates direct SQL injection from user-supplied values.
Updated: 2025-11-22GitHub→
31
1
Medium Cost
chrisgermon icon

crowdit-mcp-server

by chrisgermon

Sec8

Unified Model Context Protocol (MCP) server for integrating various business services and applications, designed to be interacted with by AI agents.

Setup Requirements

  • ⚠️Requires Google Cloud SDK (gcloud CLI) to be installed and authenticated for deployment and secret management.
  • ⚠️Critical credentials for all integrations (e.g., HaloPSA, Xero, Azure) must be manually updated in Google Secret Manager after initial deployment (placeholder values are used initially).
  • ⚠️OAuth authorization flows for integrations like Xero and SharePoint require manual browser interaction to obtain refresh tokens, which then need to be saved to Secret Manager.
  • ⚠️Requires Python 3.11 or higher.
  • ⚠️Many integrations require specific service principal/API key configurations in their respective platforms (e.g., Azure AD App Registrations, HaloPSA API Clients).
Verified SafeView Analysis
The server leverages Google Secret Manager for sensitive credentials, which is a strong security practice. API key authentication is enforced by middleware for most endpoints. However, if 'MCP_API_KEY' is not configured, the server allows unprotected access (though it logs a warning). SSH host verification can be optionally disabled for Ubuntu/VisionRad servers, which is a potential MITM risk if not carefully managed. Destructive operations (e.g., Azure resource group deletion) include 'force' flags that bypass confirmation, requiring careful agent prompting. A Xero client ID is hardcoded in `deploy.sh`, which might be a public ID, but generally hardcoding IDs can be risky. Initial secret setup involves placeholder values that *must* be manually updated.
Updated: 2026-01-19GitHub→
31
1
Low Cost
hyperpolymath icon

hyperpolymath

by hyperpolymath

Sec10

This repository provides foundational security policies and development workflow validation hooks crucial for maintaining a secure and compliant Model Context Protocol (MCP) ecosystem.

Verified SafeView Analysis
The provided source code consists of security policies (Markdown files) and Git pre-commit hooks (shell scripts). This code does not implement a 'server' or any application logic that would typically expose network interfaces, handle user input, or process sensitive data directly. Instead, it enforces robust security best practices for development workflows within a larger ecosystem. The scripts analyze local files for compliance with security standards such as SHA-pinning for GitHub Actions, explicit workflow permissions, SPDX license headers, and correct CodeQL configuration. No 'eval' or other dangerous patterns are present, no hardcoded secrets were found, and there are no direct network risks or obfuscation. The `SECURITY.md` outlines clear vulnerability reporting and use of automated security tools.
Updated: 2026-01-18GitHub→
31
1
Low Cost
loadept icon

pg-mcp

by loadept

Sec4

A read-only PostgreSQL server providing database information and query execution via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires a PostgreSQL database connection URI.
  • ⚠️Go 1.25+ is required to build or run from source.
  • ⚠️Communicates via the Model Context Protocol (MCP) over standard I/O, requiring a compatible MCP client or wrapper for practical use.
Review RequiredView Analysis
The 'execute_query' tool directly executes user-provided SQL queries without robust input sanitization or explicit enforcement of 'SELECT only' statements in the code. Although the transaction is marked 'ReadOnly: true', malicious users could craft queries for time-based blind SQL injection, information leakage (accessing unintended tables), or resource exhaustion (complex/long-running queries), despite the README's implied 50-row limit (which is not enforced in the provided source). The PostgreSQL connection URI is passed via a command-line flag, which can expose credentials in process listings; using environment variables or a secrets manager is generally more secure.
Updated: 2025-12-12GitHub→
31
2
Low Cost
TheRealFREDP3D icon

HTB-MCP-Client

by TheRealFREDP3D

Sec9

A Textual TUI client for interacting with the HackTheBox Model Context Protocol (MCP) server, enabling users to browse CTF events and challenges, execute tools, and manage resources.

Setup Requirements

  • ⚠️Requires Python 3.10 or later.
  • ⚠️Requires a HackTheBox API access token (JWT), which must be obtained from HackTheBox profile settings or a local '.mcp.json' file and configured in a '.env' file or environment variables.
Verified SafeView Analysis
The application is an API client for the HackTheBox MCP server. It securely handles API authentication via a JWT token loaded from environment variables or a .env file, following good practices for sensitive credentials. No 'eval' or obvious obfuscation techniques are present in the provided source code. Network communication is standard for an API client using the `mcp` SDK and `httpx`. File saving (JSON/Markdown) includes a timestamp in the filename, which helps mitigate basic path traversal, and content is primarily displayed within a Textual TUI, reducing rendering-related execution risks. The main security consideration is the secure management of the 'API_ACCESS_TOKEN' by the user, as compromise of this token would grant unauthorized access to the HackTheBox MCP API.
Updated: 2026-01-08GitHub→
31
1
Medium Cost
TedyHub icon
Sec8

Manage and synchronize internationalization (i18n) translations for software projects across various frameworks (e.g., next-intl, i18next, React Intl, Flutter, iOS/macOS) using AI assistants.

Setup Requirements

  • ⚠️Requires a LangAPI API Key (paid service after initial free credits).
  • ⚠️Requires Node.js runtime version 18.0.0 or higher.
  • ⚠️Requires specific configuration within various AI tools/IDEs (e.g., Claude Desktop/Code, Cursor, VS Code, Windsurf) to function.
Verified SafeView Analysis
The server uses `process.env` for API keys, which is a standard security practice. File system operations (read/write locale files) are confined to the `project_path` and include path validation (`isPathWithinProject`) to prevent path traversal. It relies on an external LangAPI service for translations, introducing a dependency on that service's security. No 'eval' or other highly dangerous patterns were observed.
Updated: 2026-01-17GitHub→
31
1
Low Cost
mvsaran icon
Sec7

An AI-driven mobile test automation framework that integrates Appium with the Model Context Protocol (MCP) and GitHub Copilot to generate and execute end-to-end tests for native Android apps and mobile Chrome.

Setup Requirements

  • ⚠️Requires a comprehensive setup of multiple tools including Java JDK (11, 17, or 21), Maven, Node.js (18+), Appium Server (3.0+), Appium UiAutomator2 driver, Android Studio (for SDK and emulator), and a GitHub Copilot subscription.
  • ⚠️Manual configuration of several environment variables (e.g., ANDROID_HOME) is necessary for both the system and the MCP server's `.vscode/mcp.json` config.
  • ⚠️The Android emulator and Appium server must be started manually in separate terminal sessions before the MCP server can be utilized.
  • ⚠️The `capabilities.json` file contains a hardcoded Windows path for the Android application APK (`C:\apkfiles\AndroidUI.apk`), which must be modified by the user to match their local setup or OS.
Verified SafeView Analysis
The MCP server is designed to interact with and control a mobile device/emulator via Appium, performing privileged actions such as app installation and dynamic UI interactions. While essential for its automation purpose, this grants significant control. An attacker gaining access to the MCP server could potentially manipulate the connected Android device or emulator. The `capabilities.json` uses a hardcoded Windows path for the APK file (`C:\apkfiles\AndroidUI.apk`) which needs to be adjusted by the user, and could pose a risk if an untrusted APK is configured. No explicit 'eval' or malicious obfuscation was found within the provided Node.js code snippets, but the inherent power of the automation tools requires careful management of the AI agent's permissions and instructions.
Updated: 2025-11-22GitHub→
31
1
High Cost
consigcody94 icon

office-whisperer

by consigcody94

Sec2

Provides AI-powered automation for Microsoft Office Suite (Excel, Word, PowerPoint, Outlook) through a natural language interface, enabling tasks like document generation, data manipulation, and email management.

Setup Requirements

  • ⚠️PDF conversion for Word/PowerPoint explicitly states it requires external tools like LibreOffice, Microsoft PowerPoint, or online services, which are not part of this server.
  • ⚠️Outlook features (email sending/reading, calendar, contacts) require external SMTP/IMAP server configurations and credentials to be provided in tool arguments for actual functionality.
  • ⚠️Many advanced Office features (e.g., SmartArt, 3D models, form fields, track changes) create placeholders or metadata, and full interactive functionality often requires opening and interacting with actual Microsoft Office applications.
  • ⚠️The `excel_compare_versions` tool is explicitly noted as 'not yet implemented' in the source code.
Review RequiredView Analysis
CRITICAL: The `outlook-generator.ts` contains a direct `eval()` call within the `evaluateCondition` helper function used for advanced mail merge. This allows arbitrary code execution if the `conditional.condition` argument can be controlled by an attacker or manipulated by an LLM. Additionally, numerous file system operations (`fs.writeFile`, `fs.readFile`) are performed based on user-provided `filename` or `outputPath` arguments, which could be vulnerable to path traversal attacks if input is not properly sanitized by the calling agent. Outlook IMAP/SMTP configurations are passed directly in tool arguments, exposing sensitive credentials if not handled securely by the caller.
Updated: 2025-11-22GitHub→
PreviousPage 201 of 760Next