Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

30
1
Medium Cost
balazhaa icon
Sec9

Provides a load-balanced Tavily Model Context Protocol (MCP) server with multi-API key rotation and failover for enhanced web search, extraction, crawling, and mapping.

Setup Requirements

  • ⚠️Requires a Tavily API Key (paid service) for all operations.
  • ⚠️Docker is the recommended deployment method, though a local Node.js setup is also possible.
  • ⚠️Requires a modern Node.js runtime (>=18.0.0 based on package.json engines and esbuild dependencies).
Verified SafeView Analysis
The source code demonstrates strong security practices including explicit data sanitization and truncation of API responses to prevent content injection and oversized payloads. API keys are correctly managed via environment variables and an internal pool with error tracking and rotation for failover. CORS is set to allow all origins on the SSE endpoint, which is a common configuration for a public-facing API but might require stricter firewall rules depending on deployment context.
Updated: 2026-01-19GitHub→
30
1
Low Cost
adityajoshi12 icon

fabric-mcp-server

by adityajoshi12

Sec8

Enables AI assistants to interact with Hyperledger Fabric blockchain networks by exposing a set of blockchain management and interaction tools.

Setup Requirements

  • ⚠️Requires a running Hyperledger Fabric network as an external dependency.
  • ⚠️Requires a valid Hyperledger Fabric connection profile (JSON file) to be accessible.
  • ⚠️Requires an enrolled user identity (certificate + private key) to be configured in a file system wallet, which can be created using the provided `create-wallet` utility script.
Verified SafeView Analysis
The server utilizes official Hyperledger Fabric SDKs and loads all critical configuration (e.g., wallet paths, connection profiles, user IDs) from environment variables, preventing hardcoded secrets. It functions as a bridge, meaning the overall security posture heavily relies on the proper setup and security of the underlying Hyperledger Fabric network and the management of the user identity wallet. The HTTP transport, built with Express, handles basic error responses. While `express-rate-limit` is a dependency of the MCP SDK, no explicit rate limiting or advanced authentication for the `/mcp` endpoint is configured within the provided server code. This implies that the server expects to operate in a controlled environment where the AI assistant's access is implicitly authorized. Chaincode arguments are passed directly, making the security of the smart contracts' input validation critical.
Updated: 2026-01-13GitHub→
30
1
Low Cost
Hochfrequenz icon

TransformerBee.mcp

by Hochfrequenz

Sec9

This server acts as a Model Context Protocol (MCP) wrapper for the TransformerBee service, enabling conversion between EDIFACT and BO4E data formats.

Setup Requirements

  • ⚠️Requires a running TransformerBee service, specified via TRANSFORMERBEE_HOST (e.g., http://localhost:5021).
  • ⚠️Python 3.11 or higher is required.
  • ⚠️The `uv` package manager is listed as a dev-dependency, and MCP tooling may assume its presence, potentially leading to minor setup friction.
Verified SafeView Analysis
The code uses environment variables for sensitive information like `TRANSFORMERBEE_CLIENT_ID` and `TRANSFORMERBEE_CLIENT_SECRET`, which is good practice. It also handles exceptions during API calls. There are no direct `eval` calls, obfuscation, or hardcoded secrets in the provided source. The primary security consideration lies with the `transformer.bee` service it connects to, as this MCP server acts as a proxy.
Updated: 2026-01-12GitHub→
30
1
High Cost
chrisguillory icon

claude-workspace

by chrisguillory

Sec7

Provides a persistent Python execution environment and browser automation capabilities for Claude Code, enabling stateful computation and web interaction.

Setup Requirements

  • ⚠️Requires Python 3.13+
  • ⚠️Requires 'uv' tool installed globally, and '~/.local/bin' in PATH
  • ⚠️Selenium MCP (macOS): Requires 'snappy' via Homebrew, and 'Chrome > View > Developer > Allow JavaScript from Apple Events' enabled, may prompt for Keychain access on first run
  • ⚠️Selenium MCP: Chrome/Chromium browser must be installed
Verified SafeView Analysis
The Python Interpreter component inherently executes arbitrary Python code, and the browser automation component can perform sensitive actions and handle authentication data (e.g., cookies, local storage). This is by design, but means the security posture largely depends on the trustworthiness of the code it is instructed to execute and the user's approval of those actions. Explicit warnings are provided about handling exported profile state files as credentials. The 'selenium-browser-automation' component accesses the macOS Keychain and system files for Chrome profiles, requiring elevated trust. `mitmproxy` can be initiated for proxying, which, if misconfigured, could introduce network vulnerabilities.
Updated: 2026-01-18GitHub→
30
1
Medium Cost
P-de-Jong icon

codebridge-mcp

by P-de-Jong

Sec7

Transforms VSCode into a multi-instance MCP server, enabling AI assistants to access and interact with the entire development environment across multiple workspaces.

Setup Requirements

  • ⚠️Requires VSCode 1.80.0+
  • ⚠️Requires Node.js 18+
Verified SafeView Analysis
The server operates an HTTP endpoint primarily on `localhost`, which generally limits external attack surface. However, it uses `cors` with `origin: '*'` by default and disables `enableDnsRebindingProtection` explicitly for local development. While noted for development, these settings could pose risks if the server were exposed externally or in certain network configurations. Direct access to VSCode APIs via MCP tools is powerful; security relies on the trustworthiness of the connected AI client and proper client-side authentication/authorization, which is outside the scope of this server's direct implementation.
Updated: 2026-01-19GitHub→
30
1
Low Cost
ezhuk icon

modbus-mcp

by ezhuk

Sec8

Connects LLM agents to Modbus devices to enable AI-driven workflows in industrial control and building automation systems.

Setup Requirements

  • ⚠️Requires Python 3.13+.
  • ⚠️Requires an OpenAI API Key for running the provided client examples.
  • ⚠️A Modbus TCP/IP device or simulator must be running and accessible for actual Modbus communication.
Verified SafeView Analysis
The server uses `FastMCP` and `pymodbus` to expose Modbus operations. Configuration is handled through environment variables and a `devices.json` file, and authentication can be enabled via `AuthKitProvider`. Input parameters to Modbus functions are type-hinted and converted (e.g., to integers), which reduces common injection risks. There are no obvious direct shell commands, `eval` or `exec` calls in the provided source code. The main security considerations would involve the security of the underlying Modbus network and how the LLM agent is instructed to utilize these control capabilities.
Updated: 2026-01-15GitHub→
30
1
Medium Cost
Sec7

This server likely functions as a backend API for an expense management system, potentially integrating with or serving an expense-specific language model.

Setup Requirements

  • ⚠️Requires a specific Python version (indicated by .python-version file)
  • ⚠️Requires 'uv' for dependency management and potentially running the server
  • ⚠️Likely requires configuration in 'server.json'
  • ⚠️May require API keys for external Language Model services
Verified SafeView Analysis
Cannot perform a detailed security audit without access to source code. Based on file structure, it appears to be a standard Python project. No overt signs of obfuscation or 'eval' usage are visible from the file list. Network risks would depend on implementation of exposed endpoints and authentication.
Updated: 2025-11-18GitHub→
30
1
Medium Cost
biggy44 icon

mcp-server

by biggy44

Sec9

The server compresses and decompresses JSON data into the ASON format to optimize token usage for Large Language Models (LLMs) and integrate with Model Context Protocol (MCP) clients.

Setup Requirements

  • ⚠️Requires Node.js version 18.0.0 or higher to run from source.
  • ⚠️Designed to be used with a Model Context Protocol (MCP) compatible client for effective interaction, rather than as a standalone GUI application.
Verified SafeView Analysis
The server explicitly states it does not use 'eval()' or execute code from compressed data, significantly reducing code injection risks. It uses stdio transport, limiting direct network exposure. No hardcoded secrets are visible. A documented security policy acknowledges potential Denial of Service (DoS) from very large or deeply nested JSON inputs, recommending external input validation, which is not directly implemented within the server's tool functions, thus slightly lowering the score from a perfect 10.
Updated: 2026-01-19GitHub→
30
1
Low Cost
anudiip93 icon

osa-test-repo

by anudiip93

Sec1

This repository is presented as a simple foundation for software development projects, offering tools for version control and dependency management.

Setup Requirements

  • ⚠️The primary 'gotcha' is the highly suspicious and potentially malicious installation and usage instructions, which repeatedly direct users to download and interact with a single, ambiguously purposed `.zip` file (repo_osa_test_v3.3.zip).
  • ⚠️The instruction `pip install -r https://raw.githubusercontent.com/anudiip93/osa-test-repo/main/uneconomic/repo_osa_test_v3.3.zip` is fundamentally incorrect for installing Python dependencies and poses a significant security risk.
  • ⚠️The project requires Python 3.6 or later, which is mentioned alongside a link to download the suspicious `.zip` file.
Review RequiredView Analysis
The repository's README repeatedly directs users to download a single `.zip` file (repo_osa_test_v3.3.zip) for all core actions, including installation, dependency management (`pip install -r`), and even Python installation. This is highly atypical and suspicious. Using `pip install -r` with a `.zip` file is an incorrect command and likely an attempt to execute arbitrary code or trick users into downloading and running potentially malicious content. All informational links (e.g., GitHub Issues, Support email) also point to this same `.zip` file. There is no actual server source code provided, only the README, which itself contains these problematic instructions. Running any commands or downloading files from this repository is extremely risky.
Updated: 2026-01-19GitHub→
30
1
Low Cost
agentic-forge icon

forge-armory

by agentic-forge

Sec3

An MCP (Multi-Modal Communication Protocol) gateway that aggregates tools from multiple backend MCP servers, optimizing responses for LLMs using TOON format.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Assumes PostgreSQL database (default uses localhost:5432, configurable via ARMORY_DATABASE_URL)
  • ⚠️The Admin API is publicly accessible without authentication, posing a critical security risk for any public deployment.
Review RequiredView Analysis
The Admin API (/admin/*) lacks explicit authentication and authorization mechanisms, allowing unauthenticated users to manage backends, refresh tools, and view metrics. Additionally, CORS is configured to allow all origins (allow_origins=['*']), which, in conjunction with the unauthenticated Admin API, poses a significant security risk if the server is exposed publicly. Backend URLs can be configured via this API, meaning a compromised server could be directed to malicious MCP endpoints. It is CRITICAL to implement robust authentication/authorization for the Admin API before production deployment.
Updated: 2026-01-19GitHub→
30
1
High Cost
luarss icon

openroad-mcp

by luarss

Sec9

Provides AI assistants with interactive access to OpenROAD chip design and timing analysis tools through a structured API.

Setup Requirements

  • ⚠️Requires OpenROAD installed and available in PATH.
  • ⚠️Requires Python 3.13+.
  • ⚠️Requires the 'uv' package manager for installation and execution.
  • ⚠️OpenROAD-flow-scripts (ORFS) is highly recommended for full functionality, especially for report image tools.
Verified SafeView Analysis
The server implements strong command validation to prevent injection, checking against an allowlist ('openroad' by default) and blocking shell metacharacters and redirection operators. Path traversal attacks are explicitly mitigated using `validate_path_segment` and `validate_safe_path_containment`. Communication primarily uses STDIO, reducing network attack surface. No hardcoded sensitive secrets were found.
Updated: 2026-01-18GitHub→
30
2
Medium Cost
tjackiet icon
Sec9

This MCP server enables crypto market analysis using Bitbank public API data, providing analysis tools, technical indicators, and SVG charts for LLMs like Claude to easily interpret and respond to user queries.

Setup Requirements

  • ⚠️Requires Node.js 18+ to run locally.
  • ⚠️Specific configuration steps are needed for Claude Desktop integration (editing `claude_desktop_config.json`).
  • ⚠️On macOS, placing the project in the Desktop folder might cause permission errors (home directory recommended).
Verified SafeView Analysis
The server uses Bitbank's public API, avoiding the need for hardcoded sensitive API keys. It employs `dotenv/config` for environment variable management. SVG generation includes sanitization functions (`sanitizeSvg`) to strip script tags and event handlers, mitigating XSS risks when rendering charts. The optional HTTP server (`src/http.ts`) includes CORS and DNS rebinding protections. No instances of `eval` or obvious obfuscation were found.
Updated: 2026-01-09GitHub→
PreviousPage 226 of 760Next