Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
eiabhiram icon
Sec9

Checks the health status of a specific local API endpoint (GET localhost:8080/api/ticket).

Setup Requirements

  • ⚠️Requires Node.js 18+
  • ⚠️An API server must be running on `http://localhost:8080` with a `/api/ticket` endpoint.
Verified SafeView Analysis
The server targets a fixed local endpoint (localhost:8080/api/ticket) and does not contain `eval`, hardcoded secrets, or external network calls to untrusted domains. Input parameters for the tool are empty, further reducing injection risks. The primary risk is the trustworthiness of the `localhost:8080/api/ticket` endpoint itself, which is outside this server's control.
Updated: 2025-11-28GitHub→
0
0
Low Cost
mikeybizzzle icon

prompt-library-app

by mikeybizzzle

Sec8

A personal AI prompt database with multiple access methods including a Web UI, Desktop App, CLI, and integration with Claude Code via its Model Context Protocol (MCP) for managing, searching, and creating prompts.

Setup Requirements

  • ⚠️Requires pnpm for building and managing workspaces.
  • ⚠️Requires local Node.js environment (>=20.0.0) with the MCP server built locally, and its exact path needs to be configured in Claude Code settings.
  • ⚠️Optional GitHub sync feature requires a configured GitHub repository and a personal access token (GITHUB_TOKEN) for authentication.
Verified SafeView Analysis
The server uses a local SQLite database, which limits direct external data exposure. Input validation for API routes and MCP tools is handled using Zod schemas, a good practice for data integrity and preventing injection. GitHub synchronization, while using external credentials (GITHUB_TOKEN), includes validation for the repository path to prevent arbitrary file system access. The GITHUB_TOKEN itself needs to be securely managed by the user, and its exposure depends on environment variable configuration or UI setup, not on hardcoding within the server logic. No 'eval' or obvious obfuscation was found in the provided code snippets. The MCP server itself acts as an intermediary, processing requests for local data, not directly making calls to external AI models.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
EmmyrtGame icon
Sec3

Provides a multi-tenant AI tool server for dental clinics, integrating WhatsApp communication, Google Calendar scheduling, CRM functionalities, and Meta CAPI marketing events to automate patient interactions and business operations.

Setup Requirements

  • ⚠️Requires Google Service Account JSON, Meta Pixel ID/Access Token, and Wassenger API Key/Device ID configured per client.
  • ⚠️Database setup is mandatory via Prisma: `npx prisma db push` and initial admin user seeding `npx ts-node src/db/seed.ts`.
  • ⚠️A strong `ENCRYPTION_KEY` environment variable is critical for securing sensitive client data. The system warns if it's missing or invalid.
Review RequiredView Analysis
The server has critical security vulnerabilities. The `JWT_SECRET` used for admin authentication defaults to a hardcoded 'dev-secret' if the environment variable is not set. Additionally, the `src/db/seed.ts` script creates a default 'admin' user with a hardcoded password ('TempPassword123!'). Both issues are severe and pose a significant risk if deployed without manual intervention to change these defaults. Sensitive client API keys (Meta, Wassenger) and Google Service Account credentials are encrypted using an `ENCRYPTION_KEY` which is loaded from an environment variable, which is good practice.
Updated: 2026-01-09GitHub→
0
0
High Cost
NorceTech icon

commerce-agent-sdk

by NorceTech

Sec9

Provides an AI-powered conversational shopping assistant as a backend-for-frontend (BFF) that integrates with Norce Commerce and can be embedded in webshop UIs.

Setup Requirements

  • ⚠️Requires Node.js 20 or higher.
  • ⚠️Requires an OpenAI API Key (typically a paid service).
  • ⚠️Requires integration with Norce Commerce platform (specific API URL, Client ID, Client Secret, OAuth Scope).
  • ⚠️Optionally requires a Redis instance for session management (`REDIS_URL` environment variable if `SESSION_STORE` is set to 'redis').
  • ⚠️If 'Simple Auth' is enabled, `SIMPLE_AUTH_JWT_SECRET` (or deprecated `DEMO_JWT_SECRET`) must be at least 32 characters long.
Verified SafeView Analysis
The project demonstrates strong security practices for a reference implementation. It explicitly avoids hardcoding secrets, uses environment variables for sensitive data (.env.example as a template). It implements request body validation (Zod) and message length/token estimation limits to prevent abuse (413 errors). Rate limiting is in place for demo auth endpoints. OAuth credentials are handled server-side (NorceTokenProvider) and never exposed to the client. The 'Simple Auth' mechanism is clearly marked as not for production and has basic JWT signing/verification. Error responses (ErrorEnvelope) are designed to be frontend-safe, redacting sensitive information. CORS is explicitly configured. No 'eval' or similar dangerous patterns were observed. Overall, it is well-structured for security for its stated purpose.
Updated: 2026-01-19GitHub→
0
0
Low Cost
LinkedInLearning icon
Sec5

Educational repository for learning to integrate external development tools with GitHub Copilot using the MCP protocol.

Setup Requirements

  • ⚠️Requires Visual Studio Code with GitHub Copilot
  • ⚠️Requires Node.js
Review RequiredView Analysis
No server source code was provided for analysis. The repository contains only documentation (README, CONTRIBUTING.md) which do not inherently pose security risks related to server execution. A proper security audit of the MCP Server would require access to its actual implementation files.
Updated: 2026-01-05GitHub→
0
0
Medium Cost
hitoshura25 icon

mcp-server-generator

by hitoshura25

Sec9

Generates production-ready Model Context Protocol (MCP) servers with a dual-mode architecture (MCP and CLI), acting as a meta-generator for AI agents to create other MCP servers.

Setup Requirements

  • ⚠️Requires Python >=3.10
  • ⚠️Requires 'uv' to be installed for the recommended 'uvx' installation method
  • ⚠️Requires Git to be configured (user.name/email) for 'AUTO' package prefix detection
Verified SafeView Analysis
The project is highly security-conscious, actively identifying and warning against high-risk patterns like code execution, file operations, and credential handling within tool definitions. It includes input sanitization to prevent template injection and provides detailed security guidelines (SECURITY.md) with secure coding patterns, rate limiting, audit logging, and sensitive data redaction examples. No obvious malicious patterns or hardcoded critical secrets were found in the generator's core logic. The primary risk lies in how users implement the generated tool's business logic, for which the project provides extensive guidance and utility functions.
Updated: 2025-11-21GitHub→
0
0
High Cost
mateusluizfb icon
Sec1

Analyzes JVM bytecode from specified classes to identify performance optimizations and suggest improvements.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) to be installed and 'javap' command accessible in PATH.
  • ⚠️User must manually compile JVM language projects (e.g., Java, Kotlin, Clojure) to generate .class files before analysis.
  • ⚠️Requires an MCP client/environment for invocation and communication (e.g., VSCode with MCP extension).
Review RequiredView Analysis
CRITICAL: The server uses `child_process.execSync` to run `find` and `javap` commands, directly embedding user-provided `cwd` and `className` into the shell command string. This is a severe command injection vulnerability, allowing an attacker to execute arbitrary shell commands on the system where the server is running. For example, a malicious `className` like `'; rm -rf /'` could be catastrophic. This is highly unsafe.
Updated: 2025-11-26GitHub→
0
0
High Cost
jayhemnani9910 icon

offline-ai

by jayhemnani9910

Sec7

Provides a local filesystem interface (list directory, read file, search) for AI coding agents to interact with the workspace.

Setup Requirements

  • ⚠️Requires the 'mcp' Python package to be installed (`pip install mcp`).
  • ⚠️Requires Ollama to be running locally on port 11434.
  • ⚠️Requires sourcing `~/.ai_profile` to set up environment variables and aliases for the workspace and Ollama.
Verified SafeView Analysis
The server uses standard input/output (stdio) for communication, which reduces network exposure risks. It does not contain 'eval' or obvious obfuscation. However, the 'list_dir', 'read_file', and 'grep' functions take 'path' as an argument directly from the AI agent. This means a malicious or unconstrained agent could potentially read or list any file on the system (e.g., '/etc/passwd') if the MCP client (like Continue) does not implement path sanitization or sandboxing at a higher level. Additionally, the 'grep' function's regex pattern, also provided by the agent, could potentially be crafted for a Regular Expression Denial of Service (ReDoS) attack, causing performance issues on large files.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
bsim0927 icon
Sec4

Enables LLMs to interact with the TexasSolver console poker solver for game theory analysis through structured parameters.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️Requires the TexasSolver console_solver binary (v0.2.0 or compatible) to be installed locally and executable.
  • ⚠️The `TEXAS_SOLVER_PATH` environment variable must be set to the absolute path of the TexasSolver binary.
Review RequiredView Analysis
The `load_range` tool and the range handling in `run_solver` and `build_game_tree_config` allow an LLM or malicious user to specify an absolute path for range files (e.g., `/etc/passwd`). The server will then read the content of this file and include it in the `range_string` in its response, which is a significant arbitrary file read vulnerability. Although the server communicates via stdio, this vulnerability allows sensitive local files to be disclosed. Other aspects like using `child_process.spawn` (instead of `exec`) and extensive input validation are positive, but the file read vulnerability is critical.
Updated: 2025-12-22GitHub→
0
0
Medium Cost
granerodev icon

balizamcp

by granerodev

Sec9

Provides real-time information about active V16 emergency beacons in Spain to LLMs and other consumers.

Setup Requirements

  • ⚠️Requires Node.js version 18.0.0 or higher.
  • ⚠️Requires configuration in a compatible MCP client like Claude Desktop.
Verified SafeView Analysis
The server fetches data from a trusted official source (DGT) over HTTPS. It uses internal caching and processes input parameters for filtering data safely, without direct injection into system commands or databases. XML parsing is done via regex, which extracts data but does not execute it. No apparent hardcoded secrets or malicious patterns were found. Relies on the security of the @modelcontextprotocol/sdk.
Updated: 2026-01-18GitHub→
0
0
Low Cost
BlockRunAI icon
Sec5

A curated directory/list of Model Context Protocol (MCP) servers for marketing, growth, and analytics integrations.

Verified SafeView Analysis
The provided content consists solely of README.md and CONTRIBUTING.md files. This repository ('awesome-marketing-mcp') is a documentation project listing other MCP servers, not an executable server itself. Therefore, a security audit for server-side vulnerabilities (e.g., 'eval', obfuscation, network risks, hardcoded secrets) cannot be performed on this repository as it does not contain server source code. The markdown files themselves are safe to read.
Updated: 2026-01-17GitHub→
0
0
Low Cost
GHjiejie icon

mcp-server

by GHjiejie

Sec2

This MCP server provides a structured environment for AI models to access predefined tools, dynamic resources, and reusable prompt templates for various software development tasks.

Setup Requirements

  • ⚠️Requires Node.js and npm to be installed.
  • ⚠️The `MCP_FILE_RESOURCES_DIR` environment variable MUST be set, as the default path is hardcoded to a developer's specific local directory, posing a security and functionality risk.
  • ⚠️Integration with Claude Desktop requires manual configuration in `claude_desktop_config.json`.
Review RequiredView Analysis
CRITICAL: The server is vulnerable to path traversal attacks due to insufficient sanitization of user-provided URI paths in `src/server/services/fileResourceService.ts`. An attacker could potentially read arbitrary files on the server's filesystem by crafting malicious `file://` URIs. Additionally, the `DEFAULT_RESOURCE_DIR` is hardcoded to a specific local user path (`/Users/jie/Documents/Github/my-mcp-server/resources`), which is a significant information leakage risk and poor practice for deployment if not explicitly overridden by `MCP_FILE_RESOURCES_DIR`.
Updated: 2025-11-30GitHub→
PreviousPage 305 of 760Next