Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
NikolaiGoMedicus icon

personio-mcp-server

by NikolaiGoMedicus

Sec8

Facilitates AI assistants like Claude in interacting with the Personio HR API for various employee, attendance, absence, and document management tasks.

Setup Requirements

  • ⚠️Requires Node.js 18 or higher.
  • ⚠️Personio API credentials (Client ID and Client Secret) are mandatory and must have appropriate scopes. V2 API features, particularly for attendance, may require specific, non-default scopes that can lead to 403 Forbidden errors.
  • ⚠️Manual MCP client configuration (e.g., for Claude Desktop) requires specifying an absolute path to the server's executable in the client's config file.
Verified SafeView Analysis
The server correctly handles API credentials via environment variables and uses an HTTP client (axios) with interceptors for robust error handling and token management. Input validation for tool arguments is present through `inputSchema` definitions and handler-level checks, primarily focusing on types and presence. No `eval` or direct command injection vectors were found. A minor potential concern is the `upload_document` tool, which accepts base64 file content and a file name but lacks explicit server-side validation of file types before forwarding to the Personio API. This could potentially allow uploading files with inappropriate extensions if the Personio API itself is not strict. The project includes a `SECURITY.md` with good practices.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
mudakara icon
Sec4

This MCP (Model Context Protocol) server enables open-source LLMs to query a MongoDB database containing Azure resource data, generating charts and reports for analytics.

Setup Requirements

  • ⚠️Requires a paid API key for an external LLM provider (OpenRouter or Claude).
  • ⚠️Requires MongoDB 4.0+ running locally on `localhost:27017`.
  • ⚠️Initial data must be uploaded via the Streamlit 'Excel Upload' page before AI analysis can function.
Review RequiredView Analysis
API keys are stored in plaintext in the local MongoDB for persistence, which is a significant security risk for production environments. The MongoDB connection defaults to an unauthenticated `localhost:27017` instance, suitable for local development but insecure for multi-user or network-exposed deployments. External LLM API calls are made, requiring careful handling of API keys.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
chiraggahujaa icon

db-explorer

by chiraggahujaa

Sec4

An AI-powered platform for natural language database exploration, querying, modification, and management, supporting multiple database types with team collaboration features.

Setup Requirements

  • ⚠️Requires a Google Gemini API Key (paid service for AI functionality).
  • ⚠️Requires Supabase credentials (URL, Anon Key, Service Role Key) for user management and potentially other features.
  • ⚠️Requires a Resend API Key for email notifications (e.g., password resets, invitations).
Review RequiredView Analysis
The application uses Zod for validation, JWT for authentication, and Helmet for basic Express security. However, a critical SQL injection vulnerability exists in the `select_data` tool within the `/api/chat` route, where the `where` clause is constructed by direct string concatenation without proper parameterization. The `execute_custom_query` tool, which allows arbitrary SQL execution, also poses a high risk if the underlying database connector's `query` method does not adequately protect against injection for raw SQL statements. Storing tokens in local/session storage makes them vulnerable to XSS attacks. These issues significantly lower the security score, making the application potentially unsafe for sensitive data or untrusted users.
Updated: 2025-12-17GitHub→
0
0
Low Cost
rnben icon

simple-mcp

by rnben

Sec9

A demonstration project for creating a Model Context Protocol (MCP) server with FastMCP, offering calculator and weather query tools, integrated with Cline.

Setup Requirements

  • ⚠️Requires Python 3.8+
  • ⚠️Requires manual Cline configuration
  • ⚠️Port 8000 must be available
Verified SafeView Analysis
The server binds to `0.0.0.0` which makes it accessible from any network interface. While acceptable for a local demo, in a production environment, it should be bound to a specific IP address (e.g., `127.0.0.1`) or secured appropriately if exposed to external networks. The tools provided are simple and do not inherently introduce security risks; there are no uses of `eval`, obfuscation, or hardcoded secrets.
Updated: 2025-12-10GitHub→
0
0
Low Cost
ticket1 icon

MCP-testing

by ticket1

Sec5

A testing environment for a Minecraft Protocol (MCP) server, likely for development and protocol analysis.

Setup Requirements

  • ⚠️Java Development Kit (JDK) required
  • ⚠️Maven or Gradle build tool likely required for compilation and execution
Review RequiredView Analysis
Source code was not provided in the prompt for analysis. Therefore, a comprehensive security audit for malicious patterns, 'eval' usage, hardcoded secrets, or network risks could not be performed. The assigned score reflects an inability to verify safety rather than an assessment of specific vulnerabilities.
Updated: 2025-12-06GitHub→
0
0
Low Cost
bzzimmy icon

h1-mcp

by bzzimmy

Sec9

Provides an MCP server to enable AI agents to query HackerOne disclosed reports and hacktivity.

Setup Requirements

  • ⚠️HackerOne API credentials (username and token) are required and must be set via HACKERONE_API_USERNAME and HACKERONE_API_TOKEN environment variables.
  • ⚠️Requires Node.js version 18.0.0 or higher.
  • ⚠️Core functionality for querying HackerOne data is not yet implemented (all defined tool calls currently return 'Not implemented' errors).
Verified SafeView Analysis
The server correctly uses environment variables for HackerOne API credentials, which is good practice. It defines legitimate HackerOne API endpoints as its base URL. However, the core functionality for making actual API requests to HackerOne is marked with 'TODO: Implement' and currently throws 'Not implemented' errors. This means the current code does not perform any external data fetching or processing beyond setting up the server and tool definitions, minimizing immediate security risks. Future implementations will require careful review.
Updated: 2025-12-11GitHub→
0
0
Low Cost
bioanywhere icon

nachos

by bioanywhere

Sec7

A client library for accessing the World News API to search, extract, and retrieve news articles from various sources and languages.

Setup Requirements

  • ⚠️Requires an API Key for the World News API (which is a paid service) to function, not included in the package.
  • ⚠️Python 3.7+ is required for the Python package.
  • ⚠️For the C++ client, CMake 3.2+, Qt, and a C++ compiler are required for building.
Verified SafeView Analysis
The code primarily implements an API client library. It does not appear to contain malicious patterns or direct hardcoded secrets. API keys and OAuth credentials are expected to be provided by the user programmatically. The C++ client includes a local TCP server for OAuth redirection on port 9999; while a standard pattern for local OAuth flows, this introduces a minor attack surface if not properly firewalled or if the callback data handling were flawed (though no obvious flaws were found in the provided snippets).
Updated: 2025-12-13GitHub→
0
0
Low Cost
yash-learner icon

care_mcp_server

by yash-learner

Sec10

A rudimentary, experimental server project initiated with AI assistance, likely intended for exploring server-side development or a specific application like 'care_mcp'.

Setup Requirements

  • ⚠️The project is incomplete; no server-side code or execution instructions are provided beyond the README.md.
Review RequiredView Analysis
The provided 'source code' consists solely of the `README.md` file, which is not executable. Therefore, there are no security risks detectable within the provided content itself. The project is incomplete as a functional server, lacking actual server-side code.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
AlexMercedCoder icon

dremio-local-mcp

by AlexMercedCoder

Sec8

This Dremio MCP Server connects AI agents to a Dremio lakehouse to manage, analyze, optimize, and govern data, facilitating complex data workflows with natural language prompts.

Setup Requirements

  • ⚠️Requires a Dremio Cloud account with a Project ID and a Personal Access Token (PAT).
  • ⚠️Requires `dremio-cli` to be installed and configured with a profile (`~/.dremio/profiles.yaml`) containing Dremio API credentials.
  • ⚠️Documentation-aware features (e.g., `plan_semantic_layer`, `search_docs`) benefit from a local `~/dremiodocs` folder containing Dremio documentation markdown files.
Verified SafeView Analysis
The server primarily acts as a proxy, forwarding user-generated SQL and commands to the Dremio Cloud API via `dremio-cli`. It does not execute arbitrary code on the local machine from user input. Authentication details (PAT) are managed through `~/.dremio/profiles.yaml`, which is a standard, relatively secure method, rather than being hardcoded or exposed directly as environment variables in the application's runtime. The main security considerations would be the robustness of the Dremio Cloud API itself against SQL injection or other API-level exploits, and ensuring the `dremio-cli` configuration is secure.
Updated: 2026-01-16GitHub→
0
0
Low Cost
patrickkarle icon

loda-mcp-server

by patrickkarle

Sec3

Provides token-efficient document search and navigation capabilities to LLMs (specifically Claude Desktop/Code) by returning relevant logical sections within a specified token budget.

Setup Requirements

  • ⚠️Requires Node.js 18+ runtime environment.
  • ⚠️Requires manual configuration in Claude Desktop/Code's JSON settings, including replacing a placeholder with the full path to the server script.
  • ⚠️Documents for search are expected to be in a local 'staging' directory or provided via absolute paths.
Review RequiredView Analysis
CRITICAL: The `search_content` tool directly uses the user-provided `query` to construct a regular expression (`new RegExp(query, 'gi')`), making it vulnerable to Regular Expression Denial of Service (ReDoS) attacks. CRITICAL: The `documentPath` parameter allows for absolute paths, meaning a malicious client could potentially instruct the server to read arbitrary files on the host system that the Node.js process has access to, bypassing the intended 'staging' directory.
Updated: 2025-11-28GitHub→
0
0
Low Cost
crypticsaiyan icon

phosphor

by crypticsaiyan

Sec9

A terminal-based IRC client with modern UX, AI integration, and unique features, designed for efficiency.

Setup Requirements

  • ⚠️Python 3.11+ required.
  • ⚠️Docker must be installed, running, and user must have appropriate permissions for '/ai docker-...' commands to function.
  • ⚠️Azure SDK (`azure-identity`, `azure-mgmt-containerinstance`) and environment variables (`AZURE_SUBSCRIPTION_ID`, `AZURE_CLIENT_ID`, `AZURE_CLIENT_SECRET`, `AZURE_TENANT_ID`, `AZURE_RESOURCE_GROUP`) are required for Azure integration.
  • ⚠️The `magic-wormhole` command-line tool must be installed for file transfers (`/send`, `/grab`).
  • ⚠️`simpleaudio` (and underlying system audio libraries like `libasound2-dev` on Linux) is required for audio feedback.
Verified SafeView Analysis
The application uses `subprocess` for various system commands (e.g., `docker`, `uname`, `wormhole`, audio players) and file system operations. These are generally implemented by passing arguments as lists to `subprocess.run` or `asyncio.create_subprocess_exec`, avoiding `shell=True` and direct user input interpolation into command strings, which significantly reduces command injection risks. File operations via `/ai list-files`, `/ai read-file`, `/ai search-files` use Python's `pathlib` for safer file system interaction. Hardcoded secrets are avoided in favor of environment variables for Azure integration. Overall, a good effort to minimize common security pitfalls related to external command execution.
Updated: 2025-12-05GitHub→
0
0
Low Cost
ibraimacamara icon

PAP_mcp_server

by ibraimacamara

Sec2

This server provides a backend API with tools for managing school-related data, including students, guardians, and their relationships, likely for a school administration system.

Setup Requirements

  • ⚠️Requires a MySQL database named 'gestor_escola'.
  • ⚠️Hardcoded database credentials (root user, empty password) must be changed for any non-local/production environment.
  • ⚠️The PHP files in the 'dashmin' directory require a web server (e.g., Apache/Nginx with PHP) to function.
  • ⚠️The Python backend requires 'fastmcp' and 'mysql.connector' libraries.
Review RequiredView Analysis
CRITICAL: Database credentials (root user with empty password) are hardcoded in `backend/conexao.py` and `dashmin/conexao.php`. This is a severe security vulnerability. The MCP tools in `backend/server.py` appear to be directly exposed without any visible authentication or authorization mechanisms, which is also a critical risk for an administrative system. While SQL queries use parameter binding to prevent injection, the overall lack of access control makes the system highly insecure.
Updated: 2026-01-19GitHub→
PreviousPage 323 of 760Next