Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
serginator icon

mcp-server

by serginator

Sec9

An integration server that provides AI clients with tools to interact with GitHub, Jira, and Notion for developer and project management tasks.

Setup Requirements

  • ⚠️Requires generating and configuring API tokens for GitHub, Jira, and Notion.
  • ⚠️Jira API authentication specifically requires a username/email in addition to the API token.
  • ⚠️Requires Docker or a Go development environment for local execution.
Verified SafeView Analysis
The server implements a standard JSON-RPC protocol over stdin/stdout. It uses official Go SDKs for GitHub and Notion, and a standard HTTP client with basic authentication for Jira. Configuration loads sensitive API tokens from environment variables or local files, advising against committing them. There is no usage of 'eval' or other dynamic code execution from user input, reducing code injection risks. The `run-docker-mcp-debug.sh` script logs stdin to `/tmp/mcp-debug.log` for debugging purposes, which could expose sensitive command arguments if the log file were publicly accessible, though in its intended context (local debugging) this is typically not a vulnerability. Overall, the architecture and implementation demonstrate reasonable security awareness for an integration server.
Updated: 2025-11-27GitHub→
0
0
High Cost
Heiko888 icon
Sec5

Acts as a central tool-server and orchestration layer for AI agents, providing capabilities for Human Design chart calculations, generating readings, performing partner matching, and interacting with n8n workflows for automation and user data management. It serves as a 'Single Source of Truth' for chart data and encapsulates complex business logic.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid) for all AI agent interactions.
  • ⚠️Requires Docker and Docker Compose for full system deployment across multiple services (e.g., n8n, frontend, ChatGPT-Agent).
  • ⚠️Requires a configured n8n instance, including importing and activating specific workflows, and setting up Mattermost webhooks if notifications are desired.
  • ⚠️Inconsistent states and duplicated chart calculation logic exist across different server instances (Hetzner MCP vs. CK-App), potentially leading to discrepancies and requiring careful synchronization or refactoring.
  • ⚠️The 'Chart-Truth-Service' is noted as 'NOT FERTIG' (not finished) and using demo data, indicating a critical dependency is not fully operational.
Review RequiredView Analysis
The system presents several critical security concerns for a production environment. The extensive use of 'SUPABASE_SERVICE_ROLE_KEY' across server-side API routes (`SUPABASE_JS_TS_AUDIT.md`) completely bypasses Row Level Security (RLS) policies, granting superuser privileges to all authenticated requests and posing a significant data exposure risk. The `CORS_ORIGINS=*` setting in some configurations (`MCP Server - Detaillierte Code-Analyse`) allows requests from any domain, making it vulnerable to Cross-Site Request Forgery (CSRF) and other attacks. The presence of 'eval' or similar dangerous patterns was not explicitly found in the truncated code provided, but the widespread use of powerful API keys and broad access controls lowers the score. Environment variables are used, which is good, but their widespread use as `process.env` without clear separation of privileges (e.g., dedicated read-only keys for certain operations) and the RLS bypass are major weaknesses.
Updated: 2026-01-10GitHub→
0
0
Medium Cost
seanshin0214 icon

gpt-mcp-server

by seanshin0214

Sec9

Enables ChatGPT Desktop to securely access and interact with the local filesystem for reading, searching, and optionally writing files.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires a GPT Pro subscription to enable Developer Mode in ChatGPT Desktop.
  • ⚠️Requires ngrok for public tunneling to ChatGPT, which may require a free ngrok account.
  • ⚠️Mandates explicit configuration of 'allowed_directories' in config.yaml for desired local filesystem access, otherwise defaults to the user's Documents folder.
Verified SafeView Analysis
The server implements robust security measures including path normalization to prevent traversal, a whitelist-based approach for allowed directories, blacklisting of sensitive file and directory patterns (e.g., .env, .git, .ssh), and file size limits to prevent Denial of Service. It defaults to read-only access, requiring explicit configuration for write operations. Sensitive content masking is also available for output. While `rate_limit` is configured in `config.yaml` and `SecurityConfig`, its explicit enforcement within the provided `SecurityLayer` code is not directly visible.
Updated: 2025-11-28GitHub→
0
0
Low Cost
Mayimbipharel icon

bigmind-mcp

by Mayimbipharel

Sec4

Automates network device management and analysis, primarily for Cisco infrastructure, by enabling Claude AI to interact with network devices via SSH using the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Node.js >= 18.0.0.
  • ⚠️Requires Claude Desktop (latest version) for AI integration.
  • ⚠️Requires SSH access to target network equipment and manual configuration of device credentials in JSON files (e.g., `config/devices-cisco.json`).
Verified SafeView Analysis
The server's configuration files (e.g., `config/devices-cisco.json`) contain hardcoded credentials (e.g., `username: "admin", password: "cisco"`). While the README advises editing these, using default or weak hardcoded credentials in configuration examples is a critical security vulnerability if not changed by the user. The `ssh2` library is used for SSH connections, which is standard, and there are no direct `eval` or obvious malicious patterns in the provided source. However, exposure to the network with weak authentication in config is a significant risk.
Updated: 2025-11-19GitHub→
0
0
High Cost
wolfdancer icon

rockfish-mcp

by wolfdancer

Sec9

This server enables AI assistants to interact with the Rockfish machine learning platform for managing data, creating ML workflows, handling models, and generating synthetic data with incident injection capabilities.

Setup Requirements

  • ⚠️Requires Rockfish API Key (Paid service likely)
  • ⚠️Requires Python 3.12 or below
  • ⚠️Rockfish SDK package hosted on a custom PyPI index (`packages.rockfish.ai`), which is handled by provided `requirements.txt` but worth noting for custom setups.
Verified SafeView Analysis
The server uses environment variables for API keys and sensitive configurations, preventing hardcoding. It employs `httpx` for secure asynchronous HTTP requests with status checks. Input validation is performed through defined JSON schemas for each tool. There is no usage of `eval` or other dangerous dynamic code execution methods. A minor point is deducted for an in-memory cache of training configurations in `sdk_client` which, while likely safe in this single-tenant MCP context, could theoretically be a concern in a multi-user environment without proper isolation.
Updated: 2026-01-12GitHub→
0
0
Medium Cost
raisedadead icon

outline-wiki-mcp

by raisedadead

Sec9

Connects Claude (or any MCP-compatible client) to an Outline wiki for document search, creation, management, and browsing.

Setup Requirements

  • ⚠️Requires an Outline instance URL (`OUTLINE_BASE_URL`).
  • ⚠️Requires an Outline API Key (`OUTLINE_API_KEY`), which needs to be generated from Outline settings.
Verified SafeView Analysis
Input validation is enforced using `zod` for all tool arguments, significantly reducing injection risks. API keys and base URLs are loaded securely from environment variables or a configuration file, not hardcoded. Network requests are made to the configured Outline API base URL with robust retry logic for transient errors (429, 5xx). No `eval` or obvious code obfuscation is present. The implementation follows good security practices for an integration of this type.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
jonnadul icon

newsapi-mcp

by jonnadul

Sec9

Integrates with NewsAPI to provide access to global news articles, headlines, and sources for MCP-compatible applications.

Setup Requirements

  • ⚠️Requires a free NewsAPI API key (registration needed)
  • ⚠️Node.js 16 or higher is required
  • ⚠️The NewsAPI key must be set as a NEWS_API_KEY environment variable
Verified SafeView Analysis
The server correctly retrieves the NewsAPI key from environment variables, preventing hardcoding. It uses axios for HTTP requests, which handles parameter encoding to prevent injection. No 'eval' or other dynamic code execution patterns were found. Error handling is present, preventing raw stack trace exposure. The primary security consideration is the secure management of the user's NEWS_API_KEY.
Updated: 2026-01-18GitHub→
0
0
Low Cost
mfiordel icon
Sec4

A remote Model Context Protocol (MCP) server providing custom tools (like a calculator) to AI agents, deployed on Cloudflare Workers without authentication for demonstration purposes.

Setup Requirements

  • ⚠️Requires deployment on Cloudflare Workers.
  • ⚠️No authentication: The server is openly accessible to anyone with the endpoint URL, as per its 'authless' design.
  • ⚠️Customizing or extending tools requires TypeScript knowledge and familiarity with Zod for schema definitions.
Verified SafeView Analysis
The server is explicitly designed 'without authentication' as stated in the README and title. This means any client with the deployed URL can access and use the exposed tools (e.g., calculator functions). While the internal tool logic uses Zod for input validation, preventing basic injection for arguments, the lack of authentication makes it highly insecure for any production use case beyond a public demo. No direct 'eval' or malicious patterns were found in the provided source code.
Updated: 2025-12-03GitHub→
0
0
High Cost
adner icon
Sec8

Develop AI agents leveraging Microsoft Agent Framework and CopilotKit, featuring generative UI, shared state, and human-in-the-loop capabilities.

Setup Requirements

  • ⚠️Requires GitHub Personal Access Token for GitHub Models API.
  • ⚠️Requires .NET 9.0 SDK for the C# agent backend.
  • ⚠️Requires Node.js 20+ for the Next.js frontend.
  • ⚠️Implicitly requires an OpenAI API key (or similar LLM provider) for the C# agent's functionality, as indicated by `appsettings.json`.
Verified SafeView Analysis
The application employs `dotnet user-secrets` for managing sensitive API keys like `GitHubToken`, which is a good practice to prevent hardcoding credentials in source control. Configuration files (`appsettings.json`) also use placeholders for other API keys (e.g., `OpenAI.ApiKey`) and credentials (e.g., Dataverse), indicating they should be securely configured outside the repository. Communication between the Next.js UI and the C# agent defaults to `http://localhost:5119/`, which is local-only during development, minimizing external network exposure. However, a full security audit of the C# agent's business logic (`Program.cs`) is not possible with the provided truncated source. The large number of transitive dependencies in `pnpm-lock.yaml` could introduce supply chain risks, common in modern web development.
Updated: 2025-12-05GitHub→
0
0
Medium Cost
Christoph icon

treesitter-mcp

by Christoph

Sec9

Facilitates AI-powered code analysis and refactoring by exposing code structure, usage, and diff analysis across multiple languages via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Rust toolchain (1.70 or later)
  • ⚠️Requires configuring an absolute path to the compiled binary for client applications
Verified SafeView Analysis
The server operates over standard I/O (stdio) and does not expose network ports, minimizing its external attack surface. It executes `git` commands for diff analysis, but implements input validation (`validate_git_revision`) using a regex to prevent command injection. File system access is limited to reading files specified by tool arguments; integrating client applications are responsible for sanitizing user-provided paths to prevent arbitrary file access. No dynamic code execution (e.g., 'eval') or hardcoded secrets were identified.
Updated: 2026-01-13GitHub→
0
0
Medium Cost
annpannmannnouta-afk icon

note_MCP_server

by annpannmannnouta-afk

Sec8

Enables AI assistants to programmatically interact with Note.com, offering features like article search, user RSS feed retrieval, content reading, and draft creation.

Setup Requirements

  • ⚠️Requires manual extraction of a `note_session` cookie from the browser to enable the `create_draft` functionality.
  • ⚠️Requires Python 3 and installation of dependencies via `pip install -r requirements.txt`.
Verified SafeView Analysis
The server correctly handles sensitive information (session cookie) via environment variables. It does not use `eval` or other notoriously unsafe functions. The `get_note_content` tool could theoretically be directed to arbitrary URLs by the AI, leading to unintended web scraping or resource consumption, though the underlying `requests` library generally mitigates severe SSRF vulnerabilities. The `create_draft` tool relies on a user-provided session cookie and sends AI-generated HTML; if Note.com's platform does not adequately sanitize user input, there could be risks, but this is an interaction risk rather than a direct server vulnerability.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
aelkz icon
Sec6

This MCP server enables AI assistants to manage Keycloak Identity and Access Management operations safely and efficiently, offering comprehensive tools for user, group, realm, authentication, and client scope management.

Setup Requirements

  • ⚠️Requires Node.js 18+ to run.
  • ⚠️Requires a running Keycloak Server (v26.4.5 recommended) with admin credentials or a configured service account.
  • ⚠️The default Keycloak client secret ('test12345') is hardcoded; users MUST override `KEYCLOAK_CLIENT_SECRET` via environment variables for production environments to avoid security vulnerabilities.
Verified SafeView Analysis
The server has good safety features like read-only and operation modes, but a critical risk is the hardcoded default `KEYCLOAK_CLIENT_SECRET` ('test12345') in `src/common/constants.ts`. If environment variables are not properly configured, this weak default could be used in `client_credentials` authentication, potentially exposing admin access. While the HTTP transport is currently unimplemented, its future implementation would require careful security review. No `eval` or obvious malicious patterns found.
Updated: 2025-12-01GitHub→
PreviousPage 366 of 760Next