Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

30
1
Medium Cost
pingidentity icon

aic-mcp-server

by pingidentity

Sec9

Enables AI assistants to interact with PingOne Advanced Identity Cloud environments for managing users, roles, groups, organizations, customizing authentication themes, analyzing logs, and querying identity data.

Setup Requirements

  • ⚠️The `AIC_BASE_URL` environment variable is mandatory and the server will exit if it's not set.
  • ⚠️Requires a PingOne Advanced Identity Cloud Sandbox or Development Tenant, as it is not enabled for production environments.
  • ⚠️Local deployment utilizes OAuth 2.0 PKCE flow which requires a local HTTP server on port 3000 for redirect. This port must be free.
  • ⚠️Docker deployment is experimental and requires MCP client support for form elicitation, which may be limited.
Verified SafeView Analysis
The server implements strong security practices including OAuth 2.0 PKCE and Device Code flows for authentication, secure token storage (OS keychain locally, ephemeral file in Docker), input validation against path traversal and query injection, and error response sanitization in production environments. Explicit warnings are provided regarding its preview status and usage with untrusted AI clients/LLM inference. Client IDs are hardcoded but are for public OAuth clients, which is an acceptable practice for this flow.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
Leopaexd icon

smhi-mcp

by Leopaexd

Sec9

Provides real-time localized weather forecasts from SMHI for daily planning and integration into AI assistant workflows in Sweden.

Setup Requirements

  • ⚠️Requires Python 3.11 or newer.
  • ⚠️Python dependencies (`fastmcp`, `httpx`, `pydantic`, `loguru`) must be installed using `pip` or `uv`.
Verified SafeView Analysis
The server makes external HTTP requests to the public SMHI Open Data API (opendata-download-metfcst.smhi.se). This is expected behavior for a weather service and uses the standard `httpx` library with a defined timeout. No hardcoded secrets, use of `eval` or similar dangerous functions, or obvious malicious patterns were found. The SMHI API data is openly licensed (CC-BY 4.0).
Updated: 2025-12-02GitHub→
30
1
Medium Cost
SC-WSKun icon

robot-mcp-server

by SC-WSKun

Sec7

An MCP server designed for controlling a robot, enabling actions like movement and navigation through a defined protocol and tools, bridging an LLM or control system with a ROS2 environment.

Setup Requirements

  • ⚠️Requires Bun runtime for execution, as indicated by `package.json` scripts.
  • ⚠️Requires a Foxglove WebSocket server (typically part of a ROS2 environment) running and accessible at `ws://${ROBOT_IP}:8765` for robot communication.
  • ⚠️The `ROBOT_IP` is hardcoded to `127.0.0.1` in `src/core/services/foxglove.ts` and needs manual modification for controlling a physical robot on a different IP.
  • ⚠️A functional ROS2 environment with specific services (`/tiered_nav_state_machine/switch_mode`, `/nav2_extended/get_labels`, etc.) and topics (`/cmd_vel`, `/nav2_extended/navigate_through_poses_topic`) is required on the robot for the server's tools to function fully.
Verified SafeView Analysis
The `ROBOT_IP` is hardcoded to '127.0.0.1' in `src/core/services/foxglove.ts`, which is a configuration inflexibility rather than a critical vulnerability, but requires modification for non-local robot control. The `navigateToLocation` function uses `TextEncoder().encode(...).toString()` on user-provided `locationName`. While intended for ROS2 message encoding, this pattern could potentially be an injection point if the robot's ROS2 message parser does not properly sanitize or validate the input, leading to unexpected behavior. No 'eval' or obvious malicious patterns were found. The server connects to a local Foxglove WebSocket, implying an internal or trusted robot network, which reduces external attack surface.
Updated: 2025-12-01GitHub→
30
1
Medium Cost
MatiousCorp icon

google-ad-manager-mcp

by MatiousCorp

Sec9

Automate Google Ad Manager operations for campaigns, line items, creatives, and reporting using natural language via an AI assistant.

Setup Requirements

  • ⚠️Requires a Google Ad Manager service account JSON credentials file.
  • ⚠️Requires your Google Ad Manager network code.
  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Many tools require finding specific Ad Unit IDs or Advertiser IDs manually via the Google Ad Manager UI.
Verified SafeView Analysis
The server implements robust security measures including Bearer token authentication with cryptographically secure tokens and constant-time comparison to prevent timing attacks. It uses parameterized queries (bind variables) for Google Ad Manager API calls, mitigating injection risks. Environment variables are used for all sensitive configuration (credentials, network code, auth token). Docker deployments run as a non-root user. The documentation explicitly advises setting an authentication token for remote deployments and using HTTPS. No 'eval' or malicious patterns were found.
Updated: 2026-01-16GitHub→
30
1
Medium Cost
ggoodman icon

mcp-server-go

by ggoodman

Sec9

A sandboxed local Model Context Protocol (MCP) server for developer workspaces, exposing the host filesystem as resources and providing tools for file manipulation, designed for integration with client applications.

Setup Requirements

  • ⚠️Requires Go 1.24+ runtime environment.
  • ⚠️Redis is required for distributed sessions and horizontal scaling in streaming HTTP deployments.
  • ⚠️An OAuth/OIDC Authorization Server (providing issuer and JWKS endpoint) is required for secure streaming HTTP deployments.
Verified SafeView Analysis
The server demonstrates robust security practices, particularly concerning filesystem access. It employs multiple layers of path validation, including `filepath.Abs`, `filepath.EvalSymlinks`, `path.Clean`, and custom `ensureInsideRoot` logic, to prevent directory traversal and symlink-based escape attacks. All file manipulation tools (`fs.read`, `fs.write`, `fs.append`, `fs.move`, `fs.delete`) rigorously enforce this sandboxing. For network communication, the `streaminghttp` transport integrates a pluggable `auth.Authenticator` to handle OIDC/JWT-based bearer token authentication, including proper `WWW-Authenticate` challenges and error responses. It explicitly rejects JSON-RPC batch requests, a good security practice. Session management via `SessionHost` includes `TTL` and `MaxLifetime` for lifecycle control and uses Redis's optimistic locking for concurrent updates. No 'eval' or similar dangerous dynamic code execution patterns were identified, and sensitive configurations like `REDIS_ADDR` are expected from environment variables.
Updated: 2026-01-18GitHub→
30
4
Low Cost
robertohuertasm icon

zed-datadog-mcp

by robertohuertasm

Sec9

Integrate the Zed IDE with the Datadog Remote MCP server to enable enhanced development, monitoring, and potentially AI/ML features within the editor.

Setup Requirements

  • ⚠️Requires a Datadog account login and may need to join a product preview program.
  • ⚠️Requires configuration of the correct Datadog site (e.g., US1, US3, US5, EU1, AP1, or AP2).
Verified SafeView Analysis
The extension leverages Zed's internal APIs for npm package management and Node.js process execution, reducing direct exposure to shell commands. It connects to legitimate Datadog endpoints based on user configuration, and no direct `eval`, obfuscation, hardcoded secrets, or malicious patterns were found in the provided Rust source code. The security largely depends on the `mcp-remote` npm package, which is explicitly pinned to a specific version.
Updated: 2025-11-19GitHub→
30
1
Low Cost
AaryaBhusal icon

ctfd-mcp

by AaryaBhusal

Sec9

A server that allows CTFd users to manage challenges, start/stop dynamic instances, and submit flags through an MCP interface.

Setup Requirements

  • ⚠️Requires Python 3.13 or higher.
  • ⚠️Requires `CTFD_URL` and at least one authentication method (`CTFD_TOKEN`, `CTFD_SESSION`, or `CTFD_USERNAME`/`CTFD_PASSWORD`) configured via environment variables or a `.env` file.
Verified SafeView Analysis
The client code (ctfd_client.py) demonstrates good security practices for interacting with a CTFd API. It correctly handles various authentication methods (API token, session cookie, username/password login), including dynamically fetching and managing CSRF tokens when session cookies are used. It also implements robust error handling for API responses (e.g., unauthorized, not found, rate limits). No 'eval', hardcoded secrets (all from environment variables), or other obvious malicious patterns were found. The use of httpx for network requests and forcing HTTP/1.1 for compatibility are reasonable choices.
Updated: 2026-01-19GitHub→
30
1
Medium Cost
Darko-Martinovic icon

McpServer

by Darko-Martinovic

Sec8

A dual-mode server for supermarket inventory and sales management, supporting both Web API (REST) and console/MCP operation for integration with AI tools.

Setup Requirements

  • ⚠️Requires SQL Server 2014+ (for Supermarket plugin) with database setup via `Database/SetupDatabase.sql`.
  • ⚠️Requires MongoDB 4.0+ (optional, but necessary for ThirdApi plugin features).
  • ⚠️Requires configuration of Azure OpenAI and Azure Cognitive Search API keys and endpoints in `appsettings.json` for full AI and search functionality (these are typically paid services).
Verified SafeView Analysis
No immediate signs of 'eval', obfuscation, or hardcoded production secrets in the provided truncated code. The `appsettings.json` provides placeholders for Azure API keys and a SQL Server connection string, which users must configure securely. `TrustServerCertificate=true` in the default SQL connection string should be reviewed for production environments as it bypasses certificate validation. The project utilizes preview versions of `ModelContextProtocol` and `System.Net.ServerSentEvents` which might have evolving security postures.
Updated: 2025-12-09GitHub→
30
2
Medium Cost
GerritCodeReview icon

gerrit-mcp-server

by GerritCodeReview

Sec8

This server allows a language model (like Gemini) to query, retrieve details, and manage code reviews within the Gerrit system.

Setup Requirements

  • ⚠️Requires Python 3.12+ (or 3.11+ as per README, but pyproject.toml specifies >=3.12).
  • ⚠️Requires 'curl' to be installed and available in PATH.
  • ⚠️Manual creation and configuration of `gerrit_mcp_server/gerrit_config.json` with Gerrit credentials is required.
  • ⚠️The build process uses 'uv', which is installed during `./build-gerrit.sh` but implicitly required for that script to function correctly in some scenarios (e.g., if `.venv` is missing and needs rebuilding).
Verified SafeView Analysis
The server primarily interacts with Gerrit via `curl` commands. The `run_curl` function uses `asyncio.create_subprocess_exec` with a list of arguments, which mitigates shell injection risks. Input parameters for Gerrit queries are URL-quoted. Authentication details (username, auth_token, gitcookies_path) are stored in `gerrit_config.json`, which must be secured by the user. The `server.log` could expose executed commands and responses, requiring local filesystem security. Overall, the approach to command execution is robust against common injection vectors, but secure handling of the configuration file is critical.
Updated: 2026-01-08GitHub→
30
1
Medium Cost
sgaunet icon

gitlab-mcp

by sgaunet

Sec9

Provides GitLab integration tools as a Model Context Protocol (MCP) server for Claude Code, enabling AI to manage issues, labels, epics, and project metadata.

Setup Requirements

  • ⚠️Requires `GITLAB_TOKEN` environment variable with appropriate GitLab API scopes (`api`, `read_api`, `write_api`).
  • ⚠️Requires Go 1.21 or later if building from source or running directly via `go run .`.
  • ⚠️Designed to be integrated with Claude Code CLI as an MCP server, not typically run as a standalone network service.
Verified SafeView Analysis
The server uses `GITLAB_TOKEN` from environment variables, which is good practice. Communication occurs over standard input/output (stdio), significantly reducing external network attack surfaces. No `eval` or obvious malicious patterns were found. Label validation can be disabled via `GITLAB_VALIDATE_LABELS=false`, which is a documented user-configurable option and not a vulnerability.
Updated: 2026-01-10GitHub→
30
1
High Cost
mcp-z icon

mcp-pdf

by mcp-z

Sec7

Generate PDFs from text, layouts, or JSON Resume data, render PDF pages as images, and measure text dimensions for layout planning.

Setup Requirements

  • ⚠️Requires Node.js version 20 or higher.
  • ⚠️Emoji rendering requires `NotoColorEmoji.ttf` to be available; it's typically installed automatically via `postinstall` script, but manual intervention might be needed if postinstall fails.
  • ⚠️`@napi-rs/canvas` is a native module that requires pre-built binaries for your specific OS/architecture or successful compilation during installation.
Verified SafeView Analysis
The server uses `eval` for dual ESM/CJS module loading, which is generally discouraged but used here in a controlled context for internal module initialization. `LiquidJS` is used for templating in `pdf-resume`; while generally sandboxed, custom templates could pose a risk if not carefully reviewed. File system operations for temporary files and resource storage are present, but inputs are validated by `zod` and `ajv` schemas, and network-downloaded fonts are placed in temporary directories. No hardcoded secrets or direct remote code execution vulnerabilities are apparent.
Updated: 2026-01-16GitHub→
30
1
Low Cost
Jing-yilin icon
Sec9

Provides structured, token-efficient access to Product Hunt data via its GraphQL API for AI models and agents.

Setup Requirements

  • ⚠️Requires a Product Hunt API access token (`PRODUCTHUNT_ACCESS_TOKEN` or `PH_ACCESS_TOKEN`) which needs to be generated from the Product Hunt API Dashboard.
  • ⚠️Requires Node.js runtime (version >= 18.0.0).
Verified SafeView Analysis
The server correctly handles API keys via environment variables and makes standard HTTPS requests. It includes a feature to save cleaned data to a local directory specified by the `save_dir` argument. While this is a local operation, it's generally safe within the intended MCP server context where the LLM controls the arguments. No 'eval' or direct arbitrary code execution patterns were found.
Updated: 2026-01-10GitHub→
PreviousPage 233 of 760Next