Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

30
1
Medium Cost

terragrunt-mcp-server

by nataliagranato

Sec9

A specialized Model Context Protocol (MCP) server for analyzing and validating Terragrunt projects, providing intelligent analysis directly in compatible IDEs.

Setup Requirements

  • ⚠️Requires Node.js and npm to be installed.
  • ⚠️Specifically developed for Terragrunt 0.82.3, performance and accuracy may vary with other versions.
  • ⚠️Requires an IDE or client that supports the Model Context Protocol (MCP) for integration, as demonstrated with 'Claude Desktop'.
Verified SafeView Analysis
This is a local analysis server. No direct external network risks were identified. The primary security consideration relates to the parsing and analysis of potentially untrusted HCL/YAML configuration files, which is an inherent part of its function. Ensure the environment where it processes files is secure.
Updated: 2025-11-19GitHub→
30
1
Medium Cost
ExpertVagabond icon

solana-mcp-server

by ExpertVagabond

Sec4

This server provides a Model Context Protocol (MCP) interface for comprehensive Solana blockchain interactions, including wallet management, transaction handling, and SPL token operations.

Setup Requirements

  • ⚠️Requires Node.js 18 or higher.
  • ⚠️Wallets and private keys are stored only in volatile memory and are not persisted; this setup is not suitable for production use or managing real funds, as keys will be lost on server restart.
Review RequiredView Analysis
Private keys for created and imported wallets are stored exclusively in volatile memory (`wallets` Map) and are not persisted. This is explicitly noted by the developer as 'not for production' and poses a critical risk if the server process is compromised or restarted, leading to permanent loss or exposure of funds. While there are no obvious malicious patterns, `eval` usage, or hardcoded sensitive credentials, the fundamental approach to key management makes it unsafe for handling real funds in a persistent or production environment.
Updated: 2025-12-15GitHub→
30
1
Medium Cost
michael-trullion icon

mcp-servers

by michael-trullion

Sec8

This server integrates Redash with Cursor IDE to enable AI-powered management and interaction with Redash queries, dashboards, and visualizations for data analysis and reporting.

Setup Requirements

  • ⚠️REDASH_URL and REDASH_API_KEY environment variables are strictly required for the Redash server (throws error if missing).
  • ⚠️PostgreSQL credentials (POSTGRES_DB, POSTGRES_USER, POSTGRES_PASSWORD) are required for non-demo mode operations; otherwise, the PostgreSQL server runs with mock data.
  • ⚠️The 'kubectl' CLI tool must be installed and configured on the host for the Kubernetes server to function, as it uses child_process.spawn('kubectl').
Verified SafeView Analysis
The server uses environment variables for sensitive credentials (e.g., REDASH_URL, REDASH_API_KEY, PostgreSQL credentials, Kubeconfig), which is good practice. There are no obvious code obfuscation or direct 'eval' patterns. However, several tools (e.g., Redash's `create_query`, `execute_query`, PostgreSQL's `mcp__execute_query`, Kubernetes' `exec_in_pod`) allow the execution of arbitrary SQL queries or shell commands. While this is an intended feature for an agent-based system and relies on the security of the underlying APIs (Redash, Postgres, Kubernetes) to prevent direct injection, it grants high privileges to the calling agent/LLM. Misuse by an untrusted or unconstrained agent could lead to data exposure or unauthorized operations.
Updated: 2025-12-09GitHub→
30
1
Medium Cost
SameerShrivastava-SF icon

Salesforce-MCP-Server

by SameerShrivastava-SF

Sec9

Transforms Claude Desktop into a powerful Salesforce IDE for development, metadata management, SOQL execution, multi-org operations, and automation through natural language commands.

Setup Requirements

  • ⚠️Requires Claude Desktop (specific desktop application).
  • ⚠️Requires careful configuration of `claude_desktop_config.json` with absolute paths, which can be error-prone.
  • ⚠️Salesforce org setup: OAuth login requires browser interaction; username/password login needs security token if IP is not trusted. Local OAuth callback server uses port 1717, which might conflict with other services (though the server attempts to free the port).
Verified SafeView Analysis
The project demonstrates strong security awareness, particularly with explicit input validation for SOQL queries (`validate_soql_query`) and API names. Network requests to Salesforce use `requests` and `simple_salesforce`, which are standard and secure. The OAuth callback server runs locally and attempts to free ports using `psutil.Process.terminate()`, which is a powerful operation, but seems contained to managing its own local environment. No direct `eval` or unvalidated `os.system` calls are apparent. No obvious hardcoded secrets other than the Salesforce `PlatformCLI` client ID, which is public.
Updated: 2025-12-10GitHub→
30
1
Medium Cost
TocharianOU icon
Sec7

Provides an AI-enabled interface to Elasticsearch for security analysis, threat detection, and incident investigation.

Setup Requirements

  • ⚠️Requires a valid Elasticsearch license (trial, platinum, or enterprise).
  • ⚠️Requires Elasticsearch authentication credentials (ES_API_KEY or ES_USERNAME/ES_PASSWORD) via environment variables.
  • ⚠️Requires Node.js version 18 or higher.
Verified SafeView Analysis
The `execute_es_api` tool allows direct execution of any Elasticsearch API endpoint, which is powerful and could be misused if the MCP server or its client is compromised. Users are explicitly warned to use dedicated API keys with limited scope. The `NODE_TLS_REJECT_UNAUTHORIZED=0` option for SSL/TLS is clearly marked as unsafe for production and should only be used in development/testing. No `eval` or obvious malicious patterns were found in the provided source code, indicating generally clean implementation of its intended functionality, but the raw power of some tools necessitates careful deployment and credential management.
Updated: 2026-01-19GitHub→
30
1
Low Cost
codeactual icon
Sec9

Integrate OpenTelemetry tracing into FastMCP servers to propagate client trace context and generate server-side spans for tool invocations.

Setup Requirements

  • ⚠️Requires FastMCP 2.13.1+ (specifically the `request_context.meta` API).
  • ⚠️Requires Python 3.12+ for proper type annotation support.
  • ⚠️Requires OpenTelemetry API and SDK to be installed (`opentelemetry-api>=1.0.0`, `opentelemetry-sdk>=1.0.0`).
Verified SafeView Analysis
The middleware primarily focuses on OpenTelemetry instrumentation and context propagation. It reads tracing headers from the `_meta` field and attaches attributes to spans. No direct code execution from user input or hardcoded secrets were identified. Debug logging can expose trace IDs/span IDs if enabled in a production environment, but this is a debug feature. Overall, it appears very safe as a library.
Updated: 2025-12-02GitHub→
30
1
Medium Cost
gtonic icon

nfl_mcp

by gtonic

Sec9

A FastMCP server for comprehensive NFL fantasy football management, including health monitoring, web content extraction, NFL news, team data, advanced fantasy intelligence, and league management, optimized for AI/LLM integration.

Setup Requirements

  • ⚠️Requires Python 3.9+.
  • ⚠️Requires ODDS_API_KEY environment variable for full Vegas Lines functionality.
  • ⚠️Initial database setup (SQLite: nfl_data.db) will occur on first run.
  • ⚠️Heavy reliance on external APIs (ESPN, Sleeper, CBS Sports, Odds API) which may have rate limits, require API keys, or change their structure.
Verified SafeView Analysis
Robust input validation and content sanitization are implemented, protecting against SQL/XSS/command injection, path traversal, and dangerous URLs. Uses environment variables for API keys and explicitly states no arbitrary code execution. Web crawling sanitizes content aggressively by removing scripts, styles, and structural HTML elements. SQL queries use parameterized statements. Circuit breakers and rate limiting are implemented for robustness and abuse prevention.
Updated: 2025-11-25GitHub→
30
1
Low Cost
bucketeer-io icon

bucketeer-mcp

by bucketeer-io

Sec9

Manage Bucketeer feature flags programmatically via the Model Context Protocol.

Setup Requirements

  • ⚠️Requires Node.js 18 or higher.
  • ⚠️A Bucketeer instance with API access is necessary.
  • ⚠️An API key with appropriate permissions (READ, WRITE, or ADMIN) for Bucketeer is required. This key must be securely provided via environment variables.
  • ⚠️The environment ID must be provided either via the BUCKETEER_ENVIRONMENT_ID environment variable or as a parameter to each tool call.
Verified SafeView Analysis
The server securely handles Bucketeer API interactions using environment variables for sensitive credentials (BUCKETEER_API_KEY). It utilizes `axios` for HTTP requests, which is a standard and secure library. Input validation is performed using `zod`. No 'eval' or obvious obfuscation is present. All logging is directed to `console.error` to avoid stdout conflicts, which is a good practice for stdio-based servers. The primary security consideration for users is the secure management of their `BUCKETEER_API_KEY` environment variable.
Updated: 2026-01-15GitHub→
30
1
High Cost
duncanchiu409 icon

mcp-obsidian-sse

by duncanchiu409

Sec6

This server provides a Server-Sent Events (SSE) endpoint to expose programmatic access to an Obsidian vault, enabling integration with automation tools like n8n or AI agents via the MCP framework.

Setup Requirements

  • ⚠️Requires `OBSIDIAN_API_KEY` environment variable to be set.
  • ⚠️Requires the [Obsidian API](https://github.com/obsidianmd/obsidian-api) plugin to be installed and configured in your Obsidian vault.
  • ⚠️Requires Python 3.12.4 or newer.
Review RequiredView Analysis
The `Obsidian` class defaults `verify_ssl` to `False` if not explicitly set by environment variables (OBSIDIAN_API_URL/OBSIDIAN_URL). This disables SSL certificate verification for requests to the Obsidian API, making the connection vulnerable to Man-in-the-Middle (MITM) attacks if not overridden to `True` in a production environment. User inputs for filepaths, queries, and content are passed to the Obsidian API, relying on the API itself for sanitization. The `OBSIDIAN_API_KEY` is correctly loaded from environment variables, preventing hardcoded secrets.
Updated: 2025-12-02GitHub→
30
1
Medium Cost
danielsimonjr icon

deepthinking-mcp

by danielsimonjr

Sec9

A comprehensive Model Context Protocol (MCP) server offering 34 specialized reasoning modes for complex problem-solving, analysis, and decision-making, including historical and meta-reasoning.

Setup Requirements

  • ⚠️Requires an MCP-compatible client to interact with the server.
  • ⚠️Performance depends on the complexity of reasoning modes invoked (e.g., multi-mode analysis runs 2-10 modes in parallel).
  • ⚠️Session data is stored on the local filesystem by default, which may impact performance or security if not configured properly.
Verified SafeView Analysis
The codebase demonstrates strong attention to security with explicit mentions of 'Enterprise Security', 'Input validation (Zod)', 'path sanitization', and 'PII redaction' in the README. Code analysis reveals the use of robust file-locking mechanisms for session storage (`src/utils/file-lock.ts`) and Zod schemas for input validation (`src/tools/schemas/`). There are no evident signs of 'eval', unhandled `child_process` calls, or hardcoded secrets in the provided snippets. The in-memory search and in-memory caching components further reduce external attack surface. Overall, it appears well-architected for security within its operational scope.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
Hymieincorrupt440 icon

Ideate

by Hymieincorrupt440

Sec2

A collaborative web application for real-time idea formation and sharing.

Setup Requirements

  • ⚠️Requires Node.js version 18 or higher.
  • ⚠️Requires `pnpm` as the package manager (`pnpm@9.0.0`).
  • ⚠️Requires a PostgreSQL database with the `DATABASE_URL` environment variable configured for Prisma.
  • ⚠️The client uses a hardcoded token '123abcd' for WebSocket connection, which is a severe security flaw for authentication.
Review RequiredView Analysis
The server has critical security vulnerabilities. A hardcoded token '123abcd' in `apps/ws-backend/src/index.ts` allows any client using this token to impersonate a specific user ('32cc98f7-172c-4ed6-a4a1-2e9605ce8f71'), effectively creating a backdoor for unauthorized access. The `JWT_SECRET` in `@repo/backend-common/src/index.ts` has a weak default fallback ('randomPhoenixSecret'), making JWTs easily forgeable if the environment variable is not explicitly set in production. Additionally, the `/api/v1/room/chat/:slug` endpoint in `apps/http-backend/src/routes/room.route.ts` is not protected by authentication middleware, allowing unauthenticated access to room details and chat history by anyone who knows a room's slug. There is also no explicit message validation for WebSocket chat messages and rate limiting is noted as a TODO, which could lead to abuse.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
AlBa231 icon

test-mcp-server

by AlBa231

Sec8

A .NET Core web API application designed for deployment on AWS, integrating with AWS Lambda for serverless functions and Keycloak for authentication.

Setup Requirements

  • ⚠️AWS account and configured credentials are required for deployment to AWS Lambda or ECS Fargate.
  • ⚠️Docker is required for local development using the container profile and for deploying Keycloak.
  • ⚠️Requires building and pushing Docker images to an Amazon ECR repository for ECS Fargate deployment.
  • ⚠️The Keycloak setup script requires `keycloak_admin_username`, `keycloak_admin_password`, and `cloudfront_domain` to be provided as environment variables.
Verified SafeView Analysis
The `AllowedHosts: "*"` setting in `appsettings.json` might be a concern in some deployments if not properly mitigated by upstream proxies or load balancers. Keycloak admin credentials are passed via environment variables during provisioning, which is a good practice.
Updated: 2026-01-15GitHub→
PreviousPage 224 of 760Next