Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
Sec3

This project appears to be a server application, possibly related to the Minecraft Protocol (MCP), providing a backend service.

Setup Requirements

  • ⚠️Docker required for streamlined setup due to `Dockerfile` and `docker-compose.yml`.
  • ⚠️Requires configuration via environment variables, as indicated by `.env.example`.
Review RequiredView Analysis
Cannot perform a deep security audit without access to the source code or comprehensive documentation. As a server application, it inherently exposes network services, which always carries risks. The absence of a readable `README.md` prevents understanding its intended use, security considerations, or how it handles inputs.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
riyadhami icon

mcp-server

by riyadhami

Sec1

Implements a server for the Minecraft Protocol (MCP), likely for custom game servers or related network services.

Review RequiredView Analysis
Cannot perform a security audit as the source code for the 'mcp-server' was not provided beyond the repository name and README title. It is impossible to check for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns without the code itself. Therefore, a very low score is assigned, and 'is_safe_to_run' is set to false, as safety cannot be assessed.
Updated: 2026-01-17GitHub→
0
0
Low Cost
yescay icon

EmailMCP

by yescay

Sec9

Allows LLMs to draft personalized emails using a local browser and Gmail by reading recipient data from an Excel file.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires an Excel file with 'Name' and 'Email' columns for input.
  • ⚠️The tool expects an absolute path to the Excel file.
  • ⚠️Relies on a default web browser being configured and available to open Gmail compose tabs.
Verified SafeView Analysis
The code uses `webbrowser.open` which could be a risk if URLs were constructed unsafely, but `urllib.parse.urlencode` is used to properly encode parameters for the hardcoded `mail.google.com` base URL, mitigating URL injection risks. The `excel_path` argument takes an absolute path which, if provided by an LLM pointing to a malicious local file, could theoretically be an issue, but `pd.read_excel` expects a valid Excel file, and `os.path.exists` is a basic check. No direct `eval`, `exec`, or hardcoded secrets found.
Updated: 2025-11-19GitHub→
0
0
Low Cost
andflett icon

tokens

by andflett

Sec8

A design token generator with a web UI and an MCP server, primarily for generating accessible, perceptually uniform OKLCH color scales and other design tokens for AI-powered UI development.

Setup Requirements

  • ⚠️Node.js 18+ is required.
  • ⚠️npm or pnpm package manager is required.
  • ⚠️The `REDIS_URL` environment variable is required if running the web-based MCP server for Server-Sent Events (SSE) support.
Verified SafeView Analysis
The `tokenSystem` input in `generate_component` and `export_tokens` tools uses `z.any()` in its schema definition. While the current implementation processes `tokenSystem` as data for string generation or prompt formatting without direct code execution, which is safe, it means the internal structure of the `tokenSystem` object isn't strictly validated by the Zod schema. If this object were to contain malicious code and be passed to a different function capable of `eval` or arbitrary code execution, it could pose a risk. However, within this project's defined tools, its usage is limited to safe data manipulation and string output. No hardcoded secrets or direct network risks were identified.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
cloudbuilders-jp icon

mcp-wordpress-server

by cloudbuilders-jp

Sec8

Enables AI-driven content creation and management for WordPress blogs, automating posting of Markdown articles and AI-generated featured images.

Setup Requirements

  • ⚠️Requires WordPress 5.6+ and HTTPS for Application Passwords.
  • ⚠️Code blocks are formatted for the 'Highlighting Code Block' WordPress plugin; it must be installed for proper rendering.
  • ⚠️Gemini API Key (GEMINI_API_KEY or GOOGLE_API_KEY) is required for AI-driven featured image generation, which may incur costs.
Verified SafeView Analysis
The server accesses local files for Markdown processing and image uploads. While this is inherent to its intended functionality as a local developer tool, it means the server can read user-specified file paths from the local filesystem. It relies on environment variables for WordPress and Gemini API credentials, which should be managed securely by the user. No 'eval' or direct network exposure (beyond API calls to WordPress/Gemini) found. Requires HTTPS for WordPress Application Passwords.
Updated: 2025-12-13GitHub→
0
0
High Cost
HelixDevelopment icon

HelixCode

by HelixDevelopment

Sec3

The `event` package provides a core event-driven architecture for the HelixCode platform, enabling loose coupling between components through a publish-subscribe pattern. HelixCode is a comprehensive distributed AI development platform designed for building, testing, and deploying AI-powered applications, particularly focused on code generation, refactoring, and project management with multi-LLM provider support.

Setup Requirements

  • ⚠️Project is in a critical unfinished state with compilation errors and broken tests, preventing full functionality.
  • ⚠️Requires Ollama to be running locally with models (e.g., `llama3:8b`, `codellama:13b`) for local LLM functionality.
  • ⚠️Requires API keys for various cloud LLM providers (e.g., `ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, `GEMINI_API_KEY`) for cloud AI features.
  • ⚠️Requires PostgreSQL (14+) and Redis (7+) database services to be running.
  • ⚠️Critical security vulnerabilities are acknowledged and still under active development, making the system unsafe for sensitive data or production use.
Review RequiredView Analysis
The HelixCode platform, which this event package serves, explicitly identifies and has not yet resolved numerous critical security vulnerabilities, including SSH security issues (e.g., `InsecureIgnoreHostKey()`), incomplete worker isolation, authentication system vulnerabilities (JWT review, token expiration, MFA, password storage), lack of data encryption in transit/at rest, and unimplemented RBAC. Input validation is also incomplete. While the `event` package itself implements thread-safety and basic error logging (last 100 errors), its operations occur within an overall insecure context, making the entire platform highly unsafe to run in its current state.
Updated: 2026-01-14GitHub→
0
0
Medium Cost
drivenrajat icon

f1

by drivenrajat

Sec9

Provides comprehensive Formula 1 data and analytics for Claude Desktop integration, offering detailed insights into race data, telemetry, lap times, standings, and strategies.

Setup Requirements

  • ⚠️Python 3.10 or higher required.
  • ⚠️Requires manual configuration in Claude Desktop's `claude_desktop_config.json`.
  • ⚠️The local path to the cloned repository must be correctly specified in the Claude Desktop configuration.
  • ⚠️Requires the FastF1, Ergast, and OpenF1 APIs to be accessible (no API keys needed for public data).
Verified SafeView Analysis
The server makes outgoing HTTP requests to legitimate F1 data APIs (FastF1, Ergast, OpenF1). Inputs for these requests are derived from tool arguments (e.g., year, GP name, driver code), which limits direct arbitrary URL injection. No 'eval' or obvious command injection vulnerabilities were found. No hardcoded secrets are present in the provided code. Error handling wraps most operations, returning a string or error image on failure.
Updated: 2026-01-18GitHub→
0
0
Medium Cost
davidculver icon

cve-mcp-server

by davidculver

Sec9

Provides conversational access to a local, containerized CVE (Common Vulnerabilities and Exposures) database via Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Docker is required for containerized deployment.
  • ⚠️Python 3.11+ is required for local development.
  • ⚠️Node.js 18+ is required for the MCP Inspector client.
  • ⚠️Initial CVE data loading can take 1-7 minutes depending on dataset size.
Verified SafeView Analysis
The server is designed for local-only use with stdio transport, minimizing network attack surface. It uses parameterized queries for SQLite operations to prevent SQL injection. Configuration (e.g., repository URLs) is loaded from environment variables, preventing hardcoded secrets. The data ingestion process uses `subprocess.run` for `git clone` from a trusted public repository (CVEProject/cvelistV5) for bulk data loading, which is a controlled external execution. The project is explicitly marked as a 'PROTOTYPE' and mentions future network access (SSE transport) would introduce new security considerations, but currently, it operates locally via stdio.
Updated: 2025-12-30GitHub→
0
0
Low Cost
ranjith8847 icon

MCP_server

by ranjith8847

Sec9

This project demonstrates building and consuming Model Context Protocol (MCP) servers using Python, leveraging FastAPI for HTTP and STDIO for different transport mechanisms, and integrating with LangChain for LLMs to dynamically discover and use tools.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️Requires an API Key/Deployment for the LLM (e.g., SAP AI Core or OpenAI) to be configured via environment variables or direct code modification in the client.
  • ⚠️The client (`fast_mcp_client_langchain.py`) requires the `BASE_URL` variable to be manually updated to the running server's address.
  • ⚠️The `uvicorn` run commands provided in the README (e.g., `uvicorn fast_mcp_server:app`) imply running from within the `FastAPI_MCP_HTTP` subdirectory, which contradicts the initial `cd MCP_server` installation instruction, potentially requiring users to navigate into the subdirectory or adjust the command to `uvicorn FastAPI_MCP_HTTP.fast_mcp_server:app`.
Verified SafeView Analysis
The server code generally appears secure, utilizing standard Python libraries and FastAPI with proper input validation (e.g., division by zero). No 'eval' or direct command injection points were identified. Network requests use httpx with error handling. The primary 'risk' is inherent to LLM applications: the client connects to a configurable BASE_URL, meaning if configured to a malicious server, it could be exploited. However, this is a configuration concern rather than a code vulnerability in the provided server/client logic. LLM interactions inherently require careful prompt engineering and security considerations to prevent misuse of tools.
Updated: 2025-12-12GitHub→
0
0
Low Cost
arielfr icon

mcp-heritage

by arielfr

Sec8

An aggregate Model Context Protocol (MCP) server that exposes tools from multiple child MCP servers as a unified interface.

Setup Requirements

  • ⚠️Requires running three separate Node.js processes concurrently: `mcp-child-a.js`, `mcp-child-b.js`, and `parent.js`. The child servers must be running before the parent server can successfully connect and register their tools.
  • ⚠️External API dependencies for child tools (official-joke-api.appspot.com, api.agify.io) are used.
Verified SafeView Analysis
The server architecture involves a parent server aggregating tools from child servers. The `jsonSchemaToZodSchema` function dynamically converts JSON schemas from child services to Zod schemas for validation. While Zod provides strong validation, there's a theoretical risk of performance issues or crashes if child services provide extremely large or maliciously crafted schemas. Child services also make external API calls (e.g., `fetch` to official-joke-api.appspot.com and api.agify.io). No direct use of `eval` or obvious hardcoded secrets was found in the provided code. Overall, the use of a well-maintained SDK (Model Context Protocol SDK) and Zod for validation contributes to a good security posture, assuming child services are trusted.
Updated: 2025-12-12GitHub→
0
0
High Cost
gholtzap icon

doctor-claude

by gholtzap

Sec8

Provides Claude Code with access to peer-reviewed medical information from trusted sources and acts as an educational diagnostic medical expert.

Setup Requirements

  • ⚠️Requires Node.js environment to run.
  • ⚠️Requires installation as a Model Context Protocol (MCP) server for Claude Code.
  • ⚠️Relies on local file system (patient-profile.json or ~/.doctor-claude/profile.json) for patient profiles.
  • ⚠️Requires internet access to query MedlinePlus and StatPearls (NCBI).
Verified SafeView Analysis
The server primarily interacts with trusted external medical information sources (medlineplus.gov, ncbi.nlm.nih.gov) via HTTP requests, with explicit domain validation to prevent arbitrary URL fetching. Local file system interaction is limited to managing a user-specific patient profile. There are no clear instances of 'eval', hardcoded secrets, or direct arbitrary command execution based on user input. The `@modelcontextprotocol/sdk` uses `cross-spawn` internally, but this server does not leverage it directly. The main security considerations would involve potential vulnerabilities in web scraping (cheerio library) or the external sites themselves, though these are well-established government/medical domains.
Updated: 2026-01-16GitHub→
0
0
Medium Cost
gauravnadkarni icon
Sec7

A Model Context Protocol (MCP) server for accessing and analyzing health metrics data stored in Google Drive spreadsheets, primarily for LLM interaction.

Setup Requirements

  • ⚠️Requires a Google Cloud Platform project with the Google Drive API enabled.
  • ⚠️Requires creating and downloading a Google Service Account JSON credentials file.
  • ⚠️Requires uploading the health data spreadsheet to Google Drive, sharing it with the service account, and providing its File ID.
  • ⚠️Requires Node.js v16 or later.
Verified SafeView Analysis
The server retrieves sensitive health data from Google Drive. Access is managed via Google Service Account credentials, which must be securely stored and configured. The HTTP server's default CORS setting (`origin: "*"`) is insecure for production environments and requires explicit configuration. No obvious 'eval', obfuscation, hardcoded secrets (environment variables are used), or malicious patterns were found in the provided code snippets. The parsing of XLSX files is done with a standard library.
Updated: 2025-11-26GitHub→
PreviousPage 311 of 760Next