Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse Directory Why Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:

SORT:

Vetted Servers(9120)

Medium Cost

icloud-mcp

by localhost433

Sec7

Manages iCloud calendar events via an HTTP Model Context Protocol (MCP) server for integration with MCP-aware clients like ChatGPT custom connectors.

Setup Requirements

⚠️Requires Python 3.11+.
⚠️Requires an Apple ID (email identity) and an iCloud app-specific password, not your main iCloud password.
⚠️Critical security concern: The service must be kept private or secured with strong authentication (e.g., Cloudflare Access, IP allowlist) when exposed publicly, as it grants write access to your iCloud Calendar and handles sensitive credentials.

Verified SafeView Analysis

The server explicitly warns about the critical need to keep it private or fronted by authentication, as it forwards your iCloud app-specific password to Apple's CalDAV endpoint and provides write access to your calendar. Secrets are loaded from a .env file, which is good practice for storage, but the service itself must be securely deployed to prevent unauthorized access.

Updated: 2025-12-13GitHub→

High Cost

diy-helper-webapp

by jrszilard

Sec8

An AI-powered web application designed to assist users with home improvement and DIY projects by providing guidance, building codes, material lists, store searches, and video tutorials through a conversational interface.

Setup Requirements

⚠️Requires Node.js version >= 20.9.0 for `next` framework compatibility and Supabase SDK.
⚠️Requires a Supabase project set up with specific tables for 'user_inventory', 'projects', and 'shopping_list_items'.
⚠️Google OAuth must be configured in Supabase and Google Cloud if Google Sign-in is desired.

Verified SafeView Analysis

The application follows good security practices by using environment variables for API keys and performing server-side user authentication with Supabase before database operations. AI tool usage is explicitly defined via a `switch` statement, mitigating risks of arbitrary code execution from AI outputs. Input validation and HTML sanitization are implemented for web content fetching. Potential areas for vigilance include the integrity of AI-generated tool arguments and robust error handling for external API responses. Frontend storage for guest projects is handled securely via localStorage, without server-side interaction.

Updated: 2026-01-13GitHub→

Medium Cost

tradepilot-mcp-server

by Sakhir786

Sec9

Provides advanced 18-layer trading intelligence for autonomous options trading, integrating real-time market data with technical and options analysis.

Setup Requirements

⚠️Requires Polygon.io API Key (Paid service for market data).
⚠️Requires specific environment variables for paths (TRADEPILOT_PRODUCTION_PATH, TRADEPILOT_LAYERS_PATH), portfolio value (TRADEPILOT_PORTFOLIO_VALUE), and optional alert channels (TRADEPILOT_DISCORD_WEBHOOK, TRADEPILOT_SLACK_WEBHOOK, TRADEPILOT_TELEGRAM_TOKEN, TRADEPILOT_TELEGRAM_CHAT_ID).
⚠️The full 'AI options trading copilot' experience implies integration with an external Large Language Model (e.g., Claude, ChatGPT), which would incur additional API costs and require separate API keys/setup for the LLM itself.

Verified SafeView Analysis

The server correctly uses environment variables for API keys and sensitive information, which is a strong security practice. The README also advises against committing .env files. It performs network requests to external APIs (Polygon.io, Discord, Slack, Telegram) as part of its core functionality, which are inherent network risks typical of such services. No 'eval' or obvious malicious patterns were detected in the provided code snippets.

Updated: 2025-11-26GitHub→

Low Cost

FileMaker-Server-DAPI-MCP

by fsans

Sec6

The server provides AI agents with direct access to FileMaker databases through the FileMaker Data API, enabling natural language interactions for data querying, record management, database introspection, and script execution.

Setup Requirements

⚠️Requires FileMaker Server with Data API enabled and accessible over the network.
⚠️Node.js v18 or higher is required.
⚠️Default client-side SSL certificate validation is disabled (`rejectUnauthorized: false`), posing a security risk; must be enabled manually for production use.
⚠️Persistent storage of database credentials in plain text files (`config.json`, `connections.json`) on the local filesystem, although protected by file permissions, may be a concern for some users/environments.

Review RequiredView Analysis

CRITICAL: SSL/TLS certificate validation is disabled by default in the `FileMakerAPIClient` (`rejectUnauthorized: false`), which is a severe security risk in production for Man-in-the-Middle attacks. Credentials (passwords) are stored persistently in plain text in `~/.filemaker-mcp/config.json` and `~/.filemaker-mcp/connections.json`. While file permissions are restricted to owner-only (`0o600`), this is still a risk if the local system is compromised. The server can be configured to run over HTTP (non-encrypted) transport, which transmits sensitive data in plaintext, explicitly warned against for production use.

Updated: 2025-11-27GitHub→

Low Cost

ai-specs

by sanjusathian

Sec3

This server provides a backend API for an Applicant Tracking System (ATS), primarily focusing on managing job positions and candidates within an AI-assisted development context.

Setup Requirements

⚠️Docker required for database setup
⚠️PostgreSQL database required (can be set up via Docker Compose)
⚠️Manual .env file creation required for backend and frontend

Review RequiredView Analysis

The source code explicitly states a critical security risk: 'Currently no authentication middleware implemented' and 'No authorization checks implemented (all users can update any position)'. This means unauthenticated and unauthorized users could potentially modify or access any data. Additionally, it notes 'Text inputs are validated but not sanitized (should be added)', indicating a potential risk for injection vulnerabilities if the frontend does not properly escape output.

Updated: 2026-01-19GitHub→

Low Cost

paper-download-mcp

by Oxidane-bot

Sec7

Download academic papers from multiple sources with intelligent routing, including metadata retrieval and batch processing.

Setup Requirements

⚠️Requires `PAPER_DOWNLOAD_EMAIL` environment variable to be set for Unpaywall API compliance. (Backward compatible with `SCIHUB_CLI_EMAIL`).
⚠️Requires Python 3.10 or higher.
⚠️Relies on `curl-cffi` and `cloudscraper` for some CDN bypass mechanisms, which might have platform-specific installation challenges or dependencies.

Verified SafeView Analysis

The tool's core functionality involves accessing academic papers from various online sources, including Sci-Hub, which operates in a legal gray area and may violate copyright laws in some jurisdictions. The README explicitly warns users about this. It employs advanced network techniques like User-Agent rotation, rate limiting, and optional Cloudflare/CDN bypasses (`curl-cffi`, `cloudscraper`) for robust downloading. While these methods are common in web scraping, they can be perceived as aggressive. File downloads are directed to a configurable output directory (defaulting to './downloads') and include basic PDF header and size validation. No hardcoded secrets were found; sensitive configurations like email are handled via environment variables or user configuration files. No 'eval' or obvious code injection vulnerabilities were identified within the provided source.

Updated: 2026-01-12GitHub→

High Cost

scraperapi-mcp

by scraperapi

Sec8

Enables LLM clients to retrieve and process web scraping requests using the ScraperAPI service, providing access to web content for AI models.

Setup Requirements

⚠️Requires Python 3.11+ (if not using Docker for deployment)
⚠️Requires a ScraperAPI API Key, which is a paid service

Verified SafeView Analysis

The server correctly uses environment variables for the ScraperAPI key, preventing hardcoded secrets. Pydantic's `AnyUrl` is employed for URL validation, which helps mitigate basic URL injection risks. There is no usage of `eval` or direct shell command execution without proper input sanitization visible in the provided source code. The core function involves making external HTTP requests based on user-provided URLs, which is its intended purpose. Potential risks associated with the content returned from external websites are inherent to web scraping but not due to vulnerabilities in the server's implementation.

Updated: 2025-12-11GitHub→

Low Cost

spotify-mcp

by 254binaryninja

Sec9

An MCP server enabling AI agents to control Spotify playback and manage playlists through a set of defined tools.

Setup Requirements

⚠️Requires Python 3.12 or higher.
⚠️A Spotify Developer account with a registered application and a premium Spotify account are mandatory.
⚠️Requires a `.env` file with `SPOTIFY_CLIENT_ID` and `SPOTIFY_CLIENT_SECRET`.
⚠️There is a discrepancy between the provided `server.py` code (`if __name__ == "__main__":`) and the troubleshooting section of the README (which suggests `if __name__ == "__server__":`). This could lead to confusion if the `mcp` CLI tool relies on `__server__`.

Verified SafeView Analysis

The server uses `spotipy` for Spotify API interaction, which is a well-established library. Sensitive credentials (client ID/secret) are loaded from environment variables via a `.env` file, preventing hardcoding. The OAuth flow uses `http://127.0.0.1:8888/callback` as a redirect URI, which is standard and safe for local development. The requested Spotify scopes are extensive (`user-read-playback-state`, `user-modify-playback-state`, `user-library-read`, `user-library-modify`, `playlist-modify-public`, `playlist-modify-private`), granting broad control over the user's Spotify account. This is necessary for its functionality but implies that a compromised server could perform significant actions on the user's behalf. However, the code itself does not contain obvious vulnerabilities like `eval`, `exec`, or direct shell command injection points.

Updated: 2025-11-24GitHub→

Medium Cost

DevTools

by jcp-tech

Sec3

An AI-powered debugging and system support agent that automates the analysis, investigation, and resolution of software issues in Django/MySQL systems.

Setup Requirements

⚠️Requires multiple API keys/services: Google GenAI (for LLM), GitHub Personal Access Token (for GitHub MCP), Google OAuth (for UI login), and Firebase API key (for email login).
⚠️Requires Docker daemon to be running for both the `github-mcp-server` and the `GenAI Toolbox` (for MySQL interaction). A configured MySQL instance is also mandatory.
⚠️The `SESSION_SECRET` environment variable *must* be set to a strong, random value for the UI to be secure. The `DJANGO_SERVER_URL` environment variable must point to a running Django application instance for lookup tools to function.
⚠️If `DISABLE_WEB_DRIVER` is not set to '1', a Chrome browser and a compatible ChromeDriver must be installed and properly configured for the Selenium-based UI investigation tools to operate.

Review RequiredView Analysis

CRITICAL: The `DevTools/fileEditor.py` tool grants read/write/delete access to files within the repository root. While `_is_safe_path` attempts to restrict this, autonomous file manipulation by an AI agent is a significant security risk, potentially leading to critical data loss, corruption, or arbitrary code execution if exploited or misused. CRITICAL: The `SESSION_SECRET` in `UI/main.py` has a default value of 'CHANGE_ME_LONG_RANDOM'. This must be replaced with a strong, randomly generated secret in production to prevent session hijacking. The `selenium_tools.py` can navigate to arbitrary URLs and capture screenshots, which could expose sensitive data or trigger unwanted actions if untrusted inputs are processed. Reliance on external MCP (Multi-Container Platform) servers (GitHub, GenAI Toolbox) introduces dependencies on their security and configuration. The `videoAnalyzer.py` downloads videos, and the safety of `_download_video_internal` is not detailed, posing a potential risk for arbitrary file downloads.

Updated: 2025-11-25GitHub→

Medium Cost

ai-infrastructure-agent

by sakthisundar-16

Sec4

Manage AWS infrastructure using natural language commands with AI.

Setup Requirements

⚠️Requires an AWS Account with configured IAM permissions. The example policy uses broad service-level permissions (e.g., 'ec2:*'), which should be refined for production to adhere to the principle of least privilege.
⚠️Requires a paid AI provider API key (OpenAI, Google Gemini, Anthropic) or AWS Bedrock access. All options incur usage costs.
⚠️Requires Go 1.24.2+ for script-based installation or Docker for containerized deployment.
⚠️The default web UI configuration allows all Cross-Origin Resource Sharing (CORS) origins, which is a significant security risk if the application is exposed beyond localhost.

Review RequiredView Analysis

CRITICAL: The web server's WebSocket handler (`pkg/api/server.go`) explicitly sets `upgrader.CheckOrigin: func(r *http.Request) bool { return true }` and the `corsMiddleware` sets `Access-Control-Allow-Origin: *`. This means the web UI is vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Origin Attacks if exposed publicly in production without modification. IAM permissions provided in the example (`ec2:*`, `vpc:*`, etc.) are broad, granting extensive control over AWS resources. This high level of access, combined with potential web UI vulnerabilities and the LLM's susceptibility to prompt injection, presents significant risks if not managed with extreme care. While the documentation correctly advises using environment variables for API keys and `dry_run` is enabled by default, the default web server configuration makes it unsafe for general deployment without immediate security hardening.

Updated: 2026-01-19GitHub→

Low Cost

ddc-ci-control-bridge

by jonat-han-tech

Sec8

Controls monitor settings (brightness, contrast, power, input) via DDC/CI, integrating with Home Assistant via MQTT and exposing control to AI agents via FastMCP.

Setup Requirements

⚠️Requires a DDC/CI-compatible monitor with a USB connection.
⚠️Requires the DDC_API_KEY environment variable to be set.
⚠️May require special OS permissions (e.g., i2c group on Linux) for DDC/CI communication.

Verified SafeView Analysis

The server leverages DDC/CI for monitor control, MQTT for Home Assistant integration, and FastMCP for AI agent control. Input validation for MCP tools is handled by Zod schemas, which is a good practice. However, the DDC_API_KEY is used as the MQTT password, creating a single point of failure if the MQTT broker is exposed publicly without proper network segmentation or if the API key is compromised. The documentation acknowledges this risk and recommends network security measures. A known build-time privilege escalation vulnerability in the 'pkg' devDependency is noted but is not a runtime risk.

Updated: 2026-01-19GitHub→

Low Cost

DotnetFastMCP

by tekspry

Sec9

Provides a .NET framework for building secure, scalable Model Context Protocol (MCP) servers, supporting enterprise-grade OAuth authentication and LLM interaction templates.

Setup Requirements

⚠️Requires .NET 8.0 SDK.
⚠️Requires manual registration of an application with an external OAuth provider (e.g., Azure AD, Google, GitHub, Auth0, Okta, AWS Cognito) to enable authentication.
⚠️Mandatory configuration of sensitive credentials (client IDs, secrets, domains/tenant IDs) as environment variables for chosen authentication provider.

Verified SafeView Analysis

The framework is designed with enterprise-grade security in mind, leveraging ASP.NET Core, OAuth 2.0/OpenID Connect for authentication, JWT token verification, and attribute-based authorization. It strongly emphasizes using environment variables for secrets. Security best practices are documented.

Updated: 2026-01-18GitHub→

PreviousPage 216 of 760Next