Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

30
1
High Cost
refractionPOINT icon

lc-mcp-server

by refractionPOINT

Sec8

This server bridges AI assistants with the LimaCharlie security platform, enabling natural language interaction for querying telemetry, investigating endpoints, responding to threats, and managing security content.

Setup Requirements

  • ⚠️Requires LimaCharlie API Key (LC_API_KEY) and Organization ID (LC_OID).
  • ⚠️Requires a Google Gemini API Key (GOOGLE_API_KEY) for AI-powered generation tools (can be costly).
  • ⚠️Running in HTTP mode with OAuth requires a Redis instance for state management.
Verified SafeView Analysis
The project demonstrates a strong focus on security, especially for multi-tenant environments. Key strengths include mandatory AES-256-GCM encryption for OAuth tokens (REDIS_ENCRYPTION_KEY), extensive testing for credential isolation and concurrency safety (100% test coverage in internal/auth/), and UID validation. The `lc_call_tool` meta-tool allows dynamic invocation of other tools, but is protected by a meta-tool filter mechanism (allow/deny lists). Powerful operations like direct sensor command execution and payload upload/download are core to the security platform integration, and are inherently high-risk, though file path validation is implemented. A hardcoded Firebase API key is noted, but generally considered low risk for client-side Firebase interaction.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
eze-godoy icon
Sec9

Integrates Netherlands Railways (NS) train information (route planning, pricing, real-time departures) into AI assistants via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires an NS API key from apiportal.ns.nl (free to register, but requires subscription to specific APIs).
  • ⚠️Docker Desktop or Docker Engine is required for the Docker installation option.
  • ⚠️Python 3.11 or higher is required for local Python installations (`uv` or `pip`).
Verified SafeView Analysis
The server uses `pydantic-settings` to load the NS API key from environment variables, avoiding hardcoded secrets. It employs robust error handling with `try...except` blocks and logs exceptions internally. Running as a stdio server via Docker means no exposed network ports, reducing the attack surface. Pydantic models are used for input/output validation, enhancing data integrity. Minor information leak in `search_trips` error handling that returns a `traceback` key for unexpected errors, though typically for debugging and not directly user-facing in normal operation.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
pacphi icon
Sec9

AI-powered conversational interface for managing restaurant bookings, customers, orders, and feedback through tool invocation.

Setup Requirements

  • ⚠️Requires Java 25 and Maven 3.9.11.
  • ⚠️Requires API keys for chosen LLM provider (OpenAI, Groq, OpenRouter are paid services).
  • ⚠️Requires a running backend service providing the ResOS API and OAuth2 Authorization Server (can be local H2/PostgreSQL backend supplied by the project).
Verified SafeView Analysis
The project implements a robust three-tier OAuth2 security architecture with JWTs for authentication and authorization. It explicitly addresses security concerns like CSRF (disabling it for API endpoints with justification) and uses BCrypt for password hashing. Sensitive information like API keys and secrets are handled via environment variables with sensible development defaults, intended to be overridden in production. The conditional disabling of OAuth2 for STDIO transport is justified for local integration (e.g., Claude Desktop). Overall, a high focus on security best practices is evident, though default secrets in development profiles should always be overridden in production.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
MWG-Logan icon

Central-Memory-MCP

by MWG-Logan

Sec6

Provides durable, queryable project memory (entities, relations, observations) for AI assistants via HTTP-exposed Model Context Protocol (MCP) tool endpoints.

Setup Requirements

  • ⚠️Requires .NET 10 SDK and Azure Functions Core Tools v4.
  • ⚠️Requires Azurite for local Azure Table Storage emulation.
  • ⚠️Crucially lacks production-ready authentication and authorization; external exposure without adding these is highly risky as per the documentation.
Review RequiredView Analysis
The server is explicitly described as an 'alpha' implementation for 'trusted environments'. It currently lacks authentication (e.g., Azure AD) and authorization for its HTTP endpoints, relying on Azure Functions system-level authorization for webhooks. Secrets (AzureWebJobsStorage connection strings) are managed via environment variables, with future plans for Key Vault/Managed Identity. Input validation is present but not exhaustive across all edge cases. It is critical to add robust authentication and authorization before exposing this server externally in a production environment.
Updated: 2025-11-26GitHub→
30
2
Low Cost
shams858 icon
Sec4

AI agent that generates and executes Python code to interact with Airtable using the Model Context Protocol (MCP) pattern for automation.

Setup Requirements

  • ⚠️Requires a separate 'Airtable MCP server' to be running at http://localhost:8000/mcp (or specified URL), which is not part of this repository.
  • ⚠️Requires an Anthropic API Key, which is a paid service.
Review RequiredView Analysis
The system executes Python code generated by an LLM in a subprocess. While there's a `validate_code` function attempting to blacklist dangerous imports (`os`, `subprocess`, `sys`, `eval`, `exec`, `open`, etc.) using AST parsing, blacklisting can be bypassed by sufficiently motivated attackers or through clever LLM prompt engineering. The execution environment is the same Python interpreter and current working directory, which is not a true isolated sandbox (e.g., containerized). This poses a significant risk if malicious code is generated, potentially leading to arbitrary code execution or data exfiltration.
Updated: 2025-11-19GitHub→
30
1
Low Cost
YutaGoto icon
Sec8

Provides an adapter to access Idolmaster (IMAS) character data from a SPARQL endpoint via the Model Context Protocol (MCP), supporting both HTTP and standard I/O connections.

Setup Requirements

  • ⚠️Requires Node.js 18+
  • ⚠️Requires pnpm for package management
  • ⚠️Relies on external imasparql SPARQL endpoint (https://sparql.crssnky.xyz/spql/imas/query)
Verified SafeView Analysis
SPARQL queries are constructed dynamically, but user input is escaped using `escapeSparql` to prevent basic injection. No direct use of 'eval' or 'child_process' in application logic. Error messages might expose internal details if an error object contains sensitive information, but this is a minor risk. The system relies on an external SPARQL endpoint for data.
Updated: 2026-01-15GitHub→
30
1
Low Cost

smalltalk-mcp

by ccrraaiigg

Sec3

A server or framework for managing and facilitating communication with AI agents, potentially incorporating a memory system, built using the Smalltalk MCP.

Setup Requirements

  • ⚠️Requires a Smalltalk development environment (e.g., Pharo, Squeak, VisualWorks) to be installed and configured.
  • ⚠️Requires familiarity with the Smalltalk programming language and its unique development paradigm (image-based development).
  • ⚠️Lack of standard package management files (e.g., package.json, requirements.txt, Dockerfile) means dependencies and setup steps are likely manual or specific to Smalltalk tooling.
Review RequiredView Analysis
Without access to the code content, it is impossible to perform a meaningful security audit for vulnerabilities like 'eval' usage, obfuscation, or specific network risks. The score reflects this lack of visibility and defaults to caution, as any server software inherently carries some network exposure risks.
Updated: 2025-11-18GitHub→
30
1
Low Cost
daydayup-zyn icon
Sec8

This project provides a Spring Boot starter for integrating MCP (Model Controller Protocol) services, enabling developers to define HTTP API functions using annotations.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) installed.
  • ⚠️Requires Maven for building and running.
  • ⚠️Explicitly compatible with Spring Boot 2.1.x, which is an outdated version and may lead to compatibility issues or security vulnerabilities with newer Spring Boot versions or libraries.
Verified SafeView Analysis
The server dynamically invokes methods based on user input (tool name and arguments). However, this is constrained to methods explicitly annotated with `@McpFunction` on registered Spring beans, limiting the attack surface to defined functions. Parameter conversion is basic and limited to primitive types. There are no obvious `eval` or arbitrary code execution vulnerabilities. The usage of `ThreadLocal` for `HttpServletRequest` is standard. Compatibility with Spring Boot 2.1.x is noted, which is an old version and might pose security risks if not updated/patched properly, but this is an environmental concern, not a code-level vulnerability in the provided snippets.
Updated: 2025-11-25GitHub→
30
1
Low Cost
hyperpolymath icon

poly-secret-mcp

by hyperpolymath

Sec7

Unified Model Context Protocol (MCP) server for managing secrets through HashiCorp Vault and Mozilla SOPS, enabling AI assistants and other MCP clients to securely handle credentials and sensitive data.

Setup Requirements

  • ⚠️Requires Deno runtime (>=2.0.0) to be installed.
  • ⚠️Requires HashiCorp Vault CLI installed and configured with `VAULT_ADDR` and `VAULT_TOKEN` environment variables for Vault tools.
  • ⚠️Requires Mozilla SOPS CLI installed and configured with a `.sops.yaml` file for SOPS tools.
Verified SafeView Analysis
The server executes external CLI tools (Vault, SOPS) via `Deno.Command.run`. While Deno's `Command` typically treats array arguments as literal strings (preventing basic shell injection), the code directly concatenates user-provided inputs into single string arguments before passing them to the CLI (e.g., `--field=` + field, `["` + key + `"] "` + value + `"`). This pattern could potentially lead to application-level injection vulnerabilities if the underlying CLI tools (Vault or SOPS) misinterpret or improperly process crafted strings that exploit internal parsing flaws. However, the project's `SECURITY.md` demonstrates a strong commitment to security, including CI-enforced checks, non-root container usage, no hardcoded secrets, and clear vulnerability reporting policies. Future integration with a formally verified `proven` library for access control and audit logging is planned, which would significantly enhance security.
Updated: 2026-01-18GitHub→
30
1
High Cost
Nice-Wolf-Studio icon

databento-mcp-server

by Nice-Wolf-Studio

Sec9

Accessing and analyzing professional market data from DataBento via a Model Context Protocol (MCP) server or Claude Code skills.

Setup Requirements

  • ⚠️Requires Node.js v18+ runtime.
  • ⚠️Requires a DataBento API key (access to most datasets requires a paid subscription).
  • ⚠️Requires either Claude Desktop (for MCP server mode) or Claude Code CLI (for skills mode).
Verified SafeView Analysis
The server loads the DataBento API key from environment variables, which is a secure practice. It implements robust input validation and comprehensive error handling, mitigating risks from malformed inputs or API failures. There are no direct uses of 'eval' or obvious obfuscation. The main risk, as with any API client, is ensuring the DATABENTO_API_KEY environment variable is kept confidential in the deployment environment.
Updated: 2025-11-25GitHub→
30
1
High Cost
azurenoops icon
Sec9

The Platform Engineering Copilot MCP server acts as an AI-powered orchestrator, exposing specialized AI agents for infrastructure management, compliance auditing, cost optimization, resource discovery, environment lifecycle, and security assessment to external AI tools and web applications.

Setup Requirements

  • ⚠️Requires Azure OpenAI API Key (Paid) and a configured Azure OpenAI deployment (e.g., GPT-4o).
  • ⚠️Requires .NET SDK 9.0+ and Node.js 18+ for local development of all components.
  • ⚠️For Docker deployments, `az login` must be run on the host machine before starting containers, as credentials are mounted from `~/.azure`.
  • ⚠️Database migrations need to be run for the SQLite (default) or SQL Server database.
Verified SafeView Analysis
The project demonstrates a strong focus on security, particularly for Azure Government compliance (FedRAMP, DoD Impact Levels, STIGs) and uses features like Azure Key Vault for secret management. It leverages Azure AD for authentication, including CAC/PIV support. Default development passwords for SQL are present in docker-compose files but are placeholders intended to be overridden by environment variables. Network binding to 0.0.0.0 is common in Docker, with ingress/firewall expected in production. No 'eval' or direct malicious patterns were observed within the application source code itself.
Updated: 2026-01-13GitHub→
30
1
High Cost
agarib icon
Sec3

Exposing comprehensive Home Assistant control as a FastAPI/OpenAPI REST and WebSocket API, including AI vision, real-time events, and code execution for AI assistants, automation platforms, and custom integrations.

Setup Requirements

  • ⚠️Requires Home Assistant 2025.11+.
  • ⚠️Relies on automatic SUPERVISOR_TOKEN injection via s6-overlay, which can be prone to specific environment issues if the structure changes.
  • ⚠️Requires external VLM API (e.g., OpenAI, Anthropic, or local model via Open-WebUI) and corresponding API credentials for camera analysis tools.
  • ⚠️The Python code execution tool exposes a high-risk `exec()` function, requiring extreme caution or deployment in an isolated and ephemeral environment.
Review RequiredView Analysis
The `ha_execute_python` endpoint allows executing arbitrary Python code using `exec()`. While `safe_globals` attempts to sandbox the environment by providing access only to specified libraries (pandas, numpy, matplotlib, json, datetime, re), `exec()` is an extremely high-risk function. A sophisticated attacker or an LLM with unexpected behavior could potentially bypass the sandbox or leverage vulnerabilities in the exposed libraries to gain unauthorized access or execute arbitrary commands on the host system. This is a critical vulnerability if the endpoint is not perfectly secured and the sandbox is not rigorously tested against advanced exploits. Direct file write operations are also present (`ha_write_file`).
Updated: 2025-12-12GitHub→
PreviousPage 227 of 760Next