Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse Directory Why Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:

SORT:

Vetted Servers(9120)

Low Cost

MCP-Server

by eragontuan1998

Sec8

Implements a custom Minecraft Protocol (MCP) server for hosting Minecraft games.

Setup Requirements

⚠️Requires Java Runtime Environment (JRE) to run.
⚠️Requires a 'server.properties' file for server configuration.

Verified SafeView Analysis

The server relies on configuration files (server.properties) for sensitive data like host/port, which is a good practice. It connects to api.github.com over HTTPS for update checks, which introduces a minor supply-chain risk but is standard. No 'eval' or hardcoded secrets were found in the provided code snippets.

Updated: 2025-11-26GitHub→

Low Cost

mcp-hub

by DxVerm

Sec9

MCP Hub serves as an open-source client-side registry to discover, browse, and manage Model Context Protocol (MCP) servers, generating configuration snippets for Claude Code.

Setup Requirements

⚠️Custom servers and saved preferences are stored exclusively in the browser's localStorage, meaning they are not synchronized across devices and can be lost if browser data is cleared. Users should utilize the import/export functionality for backups.
⚠️The application acts as a registry and configuration generator for MCP servers; it does not host or run the MCP servers themselves. Users need to manually install and manage the actual MCP servers for Claude Code.

Verified SafeView Analysis

MCP Hub is a client-side application with no backend or server-side code execution, significantly reducing inherent security risks. It stores all user data (saved and custom servers) exclusively in browser localStorage, making it privacy-preserving as no data is sent externally. The application transparently generates configuration snippets for MCP servers, which the user then manually integrates into their Claude Code environment. The 'Security Policy' and 'CONTRIBUTING.md' explicitly highlight that users should verify the source and commands of any MCP server they configure, as MCP Hub itself does not execute these commands. The primary security consideration lies with the external MCP servers users choose to integrate, not the MCP Hub application itself. No 'eval' or similar dangerous patterns are used for arbitrary code execution within the application's core logic.

Updated: 2025-12-15GitHub→

Low Cost

mcp-server-9091

by 111031075jack

Sec8

This server provides a simulated stock trading service with functionalities to buy, sell, and view a stock portfolio, designed to be integrated as tools for an Artificial Intelligence (AI) model.

Setup Requirements

⚠️Requires Java Development Kit (JDK) 17+ (typical for Spring Boot 3 applications)
⚠️Designed for integration with a Spring AI-enabled Large Language Model (LLM)

Verified SafeView Analysis

The source code appears generally safe. It does not use 'eval' or similar dynamic code execution methods. No direct network risks, hardcoded sensitive secrets (only simulated stock data), or malicious patterns were found. The primary security consideration would be in the integration with the AI model, ensuring inputs to the defined tools are properly validated by the AI system to prevent unintended operations.

Updated: 2025-12-13GitHub→

Low Cost

mcp_kali_connector

by josephkjk

Sec1

Connects an AI agent (Claude/ChatGPT) to a remote Kali Linux API server to execute various hacking and security tools remotely.

Setup Requirements

⚠️Requires a separate, self-hosted Kali Linux Flask API server (the code for which is not included in this repository).
⚠️Requires an external AI Agent (e.g., Claude, ChatGPT) to drive the tool execution via the `fastmcp` framework.
⚠️The remote Kali Linux API server must be configured with robust security measures, as this client exposes an arbitrary command execution endpoint that could be exploited by an AI agent.

Review RequiredView Analysis

The `execute_command` tool allows the AI agent to execute arbitrary commands on the remote Kali Linux API server, posing a severe Remote Code Execution (RCE) risk. This is a critical security vulnerability as a malicious or improperly prompted AI could execute dangerous system commands. The overall security relies heavily on the (unseen) remote Kali API server's implementation, which is out of scope of this client.

Updated: 2025-11-28GitHub→

High Cost

israel-drugs-mcp-server-demo

by DavidOsherdiagnostica

Sec3

Provides AI agents with comprehensive access to Israel's Ministry of Health pharmaceutical database for medication guidance, safety assessments, and therapeutic recommendations.

Setup Requirements

⚠️Requires Node.js 18+
⚠️Requires active internet connection for real-time data access from Israel's Ministry of Health API
⚠️Highly permissive network settings (CORS, allowedHosts, DNS rebinding protection disabled) make it unsafe to run in any exposed network environment, even locally on a non-isolated network.

Review RequiredView Analysis

The server's HTTP configuration (`src/server.ts`) is highly permissive, with CORS enabled for all origins (`*`), `allowedHosts` set to `*`, and DNS rebinding protection explicitly disabled (`enableDnsRebindingProtection: false`). This creates a significant network security risk, potentially allowing arbitrary websites to interact with the server and bypass same-origin policies if the server is exposed beyond a strictly isolated local environment. While environment variables are used for API URLs and other configurations (good practice), this permissive network configuration makes the server unsafe for deployment in any publicly accessible or non-isolated network.

Updated: 2025-11-23GitHub→

High Cost

Antigravity-unity-mcp-server

by azide1337

Sec3

Acts as a bridge for AI agents to control and interact with the Unity Engine in real-time, enabling AI-driven game development and scene manipulation.

Setup Requirements

⚠️Requires Unity 2020.3 or later, with manual copying of the `Assets/Scripts/MCP` folder and attaching the `MCPBridge` script to a GameObject.
⚠️Requires Node.js 16+ to run the MCP server.
⚠️The client configuration (e.g., `claude_desktop_config.json`) needs to be manually set up with the exact absolute path to the server's `dist/index.js` file.

Review RequiredView Analysis

The server exposes powerful capabilities that introduce significant security risks. Specifically, the `create_script` tool allows the AI to generate and execute arbitrary C# code within the Unity Editor/Runtime, which is a direct Remote Code Execution (RCE) vulnerability if the AI or its client becomes compromised. The `invoke_method` tool also enables calling any public method on any Unity component, granting broad control that could be misused. While the Node.js server communicates via stdio and connects to Unity via localhost, these functionalities necessitate a highly trusted environment and robust security measures to prevent malicious code injection.

Updated: 2025-12-15GitHub→

Medium Cost

flet-mcp-server

by Pedro77339

Sec8

Model Context Protocol server providing accurate, version-specific documentation for Flet 0.28.3 to augment LLM capabilities.

Setup Requirements

⚠️Requires Node.js (v16+) runtime.
⚠️Requires `npm install` to install `@modelcontextprotocol/sdk` and other dependencies.
⚠️Requires manual JSON configuration in the LLM client (e.g., Claude Desktop, Cursor, Windsurf) to register the MCP server.

Verified SafeView Analysis

The server operates over standard I/O (stdio) and serves static JSON documentation, limiting direct network exposure. It loads local JSON files, which is safe assuming the 'docs' directory is controlled and not user-configurable. The `ui/videoplayer.py` module, though part of the broader Flet project this MCP documents, is not directly exposed to untrusted user input via the MCP tools, mitigating potential risks associated with media file processing libraries (OpenCV, PIL). There are no obvious hardcoded secrets or malicious patterns in the provided source code.

Updated: 2025-11-26GitHub→

Medium Cost

super-barnacle

by GCUGrayArea

Sec6

A containerized backend server application, likely offering API services.

Setup Requirements

⚠️Docker required for deployment or local development.
⚠️External database required (implied by 'migrations' folder).
⚠️Node.js environment (with npm/yarn) required for local development.

Review RequiredView Analysis

Cannot perform a full security audit without code content. Project uses modern development practices (Node.js, TypeScript, Docker) which can enhance security if implemented correctly. However, reliance on third-party dependencies (supply chain risk) and interaction with an external database require careful configuration to mitigate risks. No explicit signs of obfuscation, but 'eval' usage cannot be verified.

Updated: 2025-11-18GitHub→

Low Cost

MCP-SERVER-

by gundatharuntej2006-hue

Sec9

This server provides tools to interact with the Aevo decentralized derivatives exchange, enabling operations like transferring funds and canceling orders.

Setup Requirements

⚠️The `fastmcp` library must be installed to run this server.
⚠️For optimal performance and SDK interaction, an `aevo-sdk` or `client.py` module is expected in the environment. The server will fall back to direct REST API calls if it's not found or fails to initialize.
⚠️Requires the `requests` library for fallback REST API calls.

Verified SafeView Analysis

The server securely handles sensitive information by requiring API keys, secrets, and wallet addresses to be set as environment variables, avoiding hardcoded credentials. It does not use 'eval' or other inherently dangerous functions. The network risks are primarily associated with the necessary external API calls to Aevo, which are intrinsic to its functionality. The server attempts to use an Aevo SDK client, falling back to direct REST calls if the SDK is unavailable or fails to initialize, maintaining functionality. Users should ensure their environment variables are managed securely.

Updated: 2026-01-03GitHub→

Medium Cost

multi-agent-auto-heal

by srinikraman

Sec9

A multi-agent system prototype for automated IT incident detection, triage, and healing using LLMs and LangGraph.

Setup Requirements

⚠️Requires an OpenAI API Key (paid service).
⚠️Requires Python 3.10 or higher.

Verified SafeView Analysis

The provided source code snippets for agents and MCP tools are largely simulations or return hardcoded strings, which inherently limits direct security vulnerabilities. No usage of `eval` or other notoriously dangerous patterns is observed. Environment variables are loaded from a `.env` file, which is good practice. The main security considerations would arise when integrating with real-world ITSM systems or a robust RAG (as outlined in future enhancements), where LLM output validation and proper access controls for external systems would be critical to prevent prompt injection or unauthorized actions. Based on the current, mostly simulated, codebase, it appears safe.

Updated: 2025-12-14GitHub→

Medium Cost

frontmatter-mcp

by kzmshx

Sec5

An MCP server for querying Markdown frontmatter with DuckDB SQL, with optional semantic search capabilities.

Setup Requirements

⚠️Requires `FRONTMATTER_BASE_DIR` environment variable to be set to a valid directory.
⚠️Semantic search requires large dependencies (~1GB) and a longer installation timeout (`MCP_TIMEOUT`).
⚠️Requires Python 3.11+.

Review RequiredView Analysis

The server exposes powerful file system and database operations. The `query` tool directly passes user-provided SQL to DuckDB, which is susceptible to SQL injection if the input is not sanitized by the calling client or if the MCP client itself is compromised. Batch file modification tools use `glob` patterns, allowing broad access to files within the `FRONTMATTER_BASE_DIR`, although `_resolve_path` prevents operations outside this directory. Semantic search dependencies download large models from the internet; while configured to a default, an attacker might attempt to manipulate the `FRONTMATTER_EMBEDDING_MODEL` environment variable to load a malicious model.

Updated: 2025-12-31GitHub→

Medium Cost

docmost-mcp

by robertlestak

Sec7

An MCP (Model Context Protocol) server that translates Docmost REST API calls into MCP tools, enabling external clients (e.g., AI models) to interact with Docmost functionalities.

Setup Requirements

⚠️Requires a running Docmost instance (URL, username, and password are mandatory configuration).
⚠️To build from source, a Go development environment is required.

Verified SafeView Analysis

The server retrieves credentials (username and password) from environment variables or command-line arguments. While environment variables are a standard secure practice, passing sensitive information directly via command-line flags (e.g., `-docmost-pass`) can expose it to other processes on the same system (e.g., via `ps aux`). The internal client handles authentication and uses `Bearer` tokens for subsequent requests. Input parameters are handled via `url.Values` encoding, which prevents direct injection issues at the gateway level. Overall security largely depends on the underlying Docmost API's robustness.

Updated: 2025-11-27GitHub→

PreviousPage 346 of 760Next