Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
vab-labo icon

discord-mcp

by vab-labo

Sec9

This MCP server fetches messages from specified Discord channels, enabling an LLM to access and process Discord communication history.

Setup Requirements

  • ⚠️Requires a Discord Bot Token to be obtained from the Discord Developer Portal.
  • ⚠️The Discord Bot needs 'Read Message History' OAuth2 permission and must be invited to the target Discord server.
  • ⚠️The DISCORD_BOT_TOKEN must be set as an environment variable (e.g., in a .env file).
Verified SafeView Analysis
The code appears secure. It properly validates input parameters using Zod, handles the Discord Bot Token via environment variables (DISCORD_BOT_TOKEN), and limits the number of messages fetched (1-100) to prevent excessive load. No 'eval' or other dangerous dynamic code execution patterns were found. Interactions are limited to the Discord API via the official `@discordjs/rest` library, reducing custom network attack surface. The bot requires 'Read Message History' permission, which is appropriate for its function.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
Sec8

Provides AI-powered crop advisory services by evaluating weather conditions and growth stages against crop-specific decision trees via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires a PostgreSQL database instance to be available and configured via DATABASE_URL.
  • ⚠️Requires an Excel file named `[Digital Green] Maize Decision Trees.xlsx` (with specific sheet structure) in the parent directory for initial data import.
  • ⚠️Node.js version 18.0.0 or higher is required.
Verified SafeView Analysis
The project uses standard Node.js/TypeScript practices and explicitly warns about environment variable handling for database credentials, which is good. No obvious signs of 'eval' or obfuscation. Potential risks are typical for any web application (e.g., dependency vulnerabilities, improper environment config if not using Railway's default handling). SQL injection risk depends on the underlying ORM/DB library.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
larrygmaguire-hash icon

better-claude-mems

by larrygmaguire-hash

Sec9

Provides Claude Code with enhanced access to its conversation history, enabling search, summarization, and detailed retrieval of past coding sessions.

Setup Requirements

  • ⚠️Requires Node.js and npm to be installed.
  • ⚠️Manual configuration in `~/.claude.json` is required to integrate with Claude Code.
  • ⚠️Relies on existing Claude Code conversation history (`.jsonl` files) being present in `~/.claude/projects/` to function, otherwise tools will return empty results.
Verified SafeView Analysis
The server operates as a stdio (standard input/output) server, which inherently minimizes external network attack surfaces. No usage of `eval`, obfuscation, or hardcoded secrets was found. File system access is restricted to the `~/.claude/projects/` directory, and path handling for project directories appears to prevent path traversal vulnerabilities. While parsing `.jsonl` files always carries a minor risk of malformed input, the code's approach to data handling seems robust for its intended purpose.
Updated: 2026-01-18GitHub→
0
0
Medium Cost
eh24905-wiz icon

github-mcp

by eh24905-wiz

Sec9

A Model Context Protocol (MCP) server for GitHub integration, enabling AI assistants to interact with GitHub repositories, pull requests, and issues.

Setup Requirements

  • ⚠️Requires Node.js >= 18.0.0.
  • ⚠️Requires a GitHub Personal Access Token (PAT) to be generated.
  • ⚠️The GitHub PAT must have 'repo' (full control of private repositories) and 'read:user' scopes, granting broad access.
Verified SafeView Analysis
The server uses `process.env.GITHUB_TOKEN` for authentication, preventing hardcoded secrets. Input validation is handled using `zod` schemas for each tool, mitigating common injection risks. All external communication is via HTTPS to the official GitHub API. The main security concern is the broad permissions (`repo`, `read:user`) required for the `GITHUB_TOKEN`, which is inherent to its functionality and noted in the README.
Updated: 2025-12-12GitHub→
0
0
Medium Cost
vinod827 icon
Sec8

Enables AI agents and developer tools to securely interact with Reddit via the Model Context Protocol.

Setup Requirements

  • ⚠️Requires Reddit API application setup (Client ID, Client Secret, Redirect URI) for OAuth2 authentication.
  • ⚠️Node.js and npm must be installed on the system.
Verified SafeView Analysis
The README emphasizes human-in-the-loop actions, secure Reddit OAuth2, and scoped API permissions (`read`, `identity`, `submit` - the last with explicit human confirmation). No 'eval' or malicious patterns are evident in the provided README text. A full security audit would require reviewing the actual TypeScript/Node.js source code for implementation details, but the stated architecture and design principles prioritize safety and user consent.
Updated: 2025-12-05GitHub→
0
0
Medium Cost
pea-sys icon

my-mcp-server

by pea-sys

Sec7

A framework for building and operating a Multi-Agent Communication Protocol (MCP) server, including utilities for development, debugging, monitoring, and error tracking.

Setup Requirements

  • ⚠️Requires Python 3.12.11 or newer.
  • ⚠️Potential typo/mismatch: `scripts/dev.sh` sets `ENABLE_REMOTE_DEBUG` but `src/debug_server.py` checks `ENABLE_REMOTE_DEBUGGER`, which would prevent debugging from `dev.sh` if not corrected.
  • ⚠️The `mcp` library, especially with its `[all]` extras, and suggested LLM integration in `e2e_tests`, implies the need for external AI service API keys which may incur costs.
Verified SafeView Analysis
Remote debugging is enabled on all network interfaces (0.0.0.0) if `ENABLE_REMOTE_DEBUGGER` is true, which could be a security risk without proper network segmentation (e.g., firewall). The example usage in `scripts/check_secret_access.py` shows a hardcoded GitHub token (`ghp_xxxxx`); in real deployments, tokens must be securely managed via environment variables or secrets management.
Updated: 2026-01-18GitHub→
0
0
Medium Cost
Ayush9284 icon

openehr_mcp

by Ayush9284

Sec8

Acts as an intelligent bridge, enabling AI assistants to interact seamlessly with openEHR-compliant Electronic Health Record (EHR) systems for natural language access to healthcare data, and provides AI-powered medical coding suggestions.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Docker & Docker Compose are required for EHRbase and Qdrant backend services.
  • ⚠️A manual step is required to load ICD-10 embeddings into Qdrant using `scripts/embedding.py` (requires a `diagnosis.csv` file), otherwise the `suggest_icd_codes` tool will not function.
  • ⚠️GEMINI_API_KEY is required for optional AI refinement in medical coding, which incurs usage costs.
Verified SafeView Analysis
The project uses environment variables for API keys (e.g., GEMINI_API_KEY) which is good practice. Default credentials (`postgres`/`postgres`, `ehrbase`/`ehrbase`) are hardcoded in `docker-compose.yml` for local development, which is a critical security risk if used in production or if exposed publicly. The `README.md` explicitly warns against exposing EHRbase or Qdrant ports to the internet without proper security. `subprocess.Popen` is used in test files, but not with user-controlled input, mitigating a common risk. JSON parsing from external input is handled, but no 'eval' or direct arbitrary code execution from user input was identified in the core server logic. Overall, security practices for sensitive information storage are good for development, but the default infrastructure credentials require careful consideration for any deployment beyond local testing.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
yellnuts icon

mcp-mem0

by yellnuts

Sec8

Manages long-term memory for AI agents using Mem0, serving as an MCP server template.

Setup Requirements

  • ⚠️Requires Python 3.12 or higher based on `pyproject.toml`.
  • ⚠️Needs configuration for an LLM provider (e.g., OpenAI, Ollama) requiring API keys (potentially paid) or a running local server.
  • ⚠️Requires a Supabase vector store, necessitating a `DATABASE_URL` connection string and a Supabase account.
Verified SafeView Analysis
The server uses environment variables for API keys and database connection strings, which is a good practice. It leverages the `mem0ai` library to abstract memory operations, thus not directly exposing raw database queries or LLM calls that could be vulnerable to injection without proper sanitization by the library. No explicit `eval` or malicious patterns are found in the provided source. The default `user_id` is hardcoded to 'user', which limits multi-agent isolation by default but isn't a direct security vulnerability in terms of server-side malicious behavior.
Updated: 2025-12-15GitHub→
0
0
Low Cost
faustofuertes icon

kommo-mcp-server

by faustofuertes

Sec8

Automate Kommo CRM lead management for AI agents using the Model Context Protocol, enabling actions like moving leads, pausing agents, and adding notes.

Setup Requirements

  • ⚠️Requires a Kommo CRM account and a long-duration API token with appropriate scopes (crm, files, notifications).
  • ⚠️Designed for deployment on Cloudflare Workers and utilizes Cloudflare Durable Objects for state management, not a generic Node.js environment.
  • ⚠️Primarily intended for integration within the Laburen.com AI agent ecosystem, implying specific client-side expectations for interaction.
Verified SafeView Analysis
The server dynamically receives Kommo authentication tokens and subdomain via HTTP headers or environment variables. While this offers flexibility for multi-account support, it shifts the responsibility for securing these sensitive credentials to the calling client and the underlying Cloudflare Workers infrastructure. No hardcoded secrets were found in the provided source code, nor any direct 'eval' or malicious patterns. Error handling prevents exposing raw stack traces. The security relies heavily on the secure deployment context (e.g., TLS, proper access controls for the Cloudflare Worker endpoints).
Updated: 2025-12-15GitHub→
0
0
Medium Cost
rifkimaulana05 icon

onemcp

by rifkimaulana05

Sec8

Connects APIs to AI models using the Model Context Protocol (MCP), generating and caching execution plans for natural-language prompts to ensure accurate, cost-efficient, and high-performance API interaction for AI agents.

Setup Requirements

  • ⚠️Requires an OpenAI, Anthropic, or Google Gemini API Key (paid service) for LLM-based features.
  • ⚠️Requires Java 21 and Apache Maven installed if running natively and building from source.
  • ⚠️Requires a running ArangoDB instance (or Docker to run it) as the default graph database, with a default root password of 'test123' for local setups.
Verified SafeView Analysis
The core Java application utilizes standard libraries for JSON parsing and network requests, avoiding direct 'eval' or dangerous runtime execution from untrusted input. Secrets (like API keys) are configured via environment variables or external configuration, a good practice. However, the default ArangoDB root password of 'test123' in local development scripts and Docker entrypoint presents a significant security risk if not changed in production deployments. The Docker 'entrypoint.sh' allows execution of arbitrary commands passed to the container, which is standard Docker behavior but could be misused in an uncontrolled environment.
Updated: 2026-01-19GitHub→
0
0
Low Cost
KeerthiChavla83vandana icon

MCP_Server_filesystem

by KeerthiChavla83vandana

Sec1

A server application for an unknown purpose related to 'MCP', likely for hosting or backend services.

Review RequiredView Analysis
Source code was not provided for analysis. Therefore, a comprehensive security audit could not be performed, and the server is assumed to be unsafe without inspection.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
prequired icon
Sec7

An AI-powered system for conversational discovery and generation of production-ready frontend projects using a defined architectural framework like Next.js, Tailwind CSS, and shadcn/ui.

Setup Requirements

  • ⚠️Node.js >= 18.0.0 is required.
  • ⚠️Requires `npm run build` to compile TypeScript to JavaScript before starting the server.
  • ⚠️Relies on `@modelcontextprotocol/sdk` for communication over standard input/output (stdio), meaning it expects an orchestrator to communicate via this transport.
Verified SafeView Analysis
The `generate_project` tool allows specifying an `outputPath` for file system writes. If this path is directly controlled by untrusted user input without validation, it could lead to directory traversal vulnerabilities, overwriting arbitrary files, or exhausting disk space on the host system. The generated code itself, influenced by discovery answers, could theoretically introduce client-side vulnerabilities (e.g., XSS) if content is not properly sanitized, though the server itself does not execute this generated code.
Updated: 2025-12-03GitHub→
PreviousPage 297 of 760Next