Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
tedrubin80 icon

BlueSkyMCP-Server

by tedrubin80

Sec1

A server for a game, likely Minecraft, allowing players to connect, interact, and play together.

Setup Requirements

  • ⚠️Requires Java Runtime Environment (JRE) for execution.
  • ⚠️Potential need for port forwarding (e.g., 25565) for external player access.
  • ⚠️Configuration files (e.g., server.properties) will need to be set up or customized.
Review RequiredView Analysis
Source code was not provided for analysis. Therefore, a comprehensive security audit for specific risks like 'eval' usage, obfuscation, hardcoded secrets, or network vulnerabilities could not be performed. Without source code, it's impossible to verify the implementation's security practices, leading to a critical risk assessment by default.
Updated: 2025-12-05GitHub→
0
0
Low Cost
josedefreitas91 icon

raycast-codex-manager

by josedefreitas91

Sec8

Manages Codex MCP server configurations and skills (scripts/files) through Raycast commands, offering local operations and diagnostic tools.

Setup Requirements

  • ⚠️Requires Raycast (macOS application) to run.
  • ⚠️The ZIP import functionality relies on the macOS-specific `ditto` command, limiting its full functionality to macOS environments.
  • ⚠️Requires Node.js (version 22.14.0 or higher for `@raycast/api` runtime).
  • ⚠️If the 'Preferred Editor' preference is set to 'VS Code (code)', the VS Code command-line tool (`code`) must be installed and accessible in the system's PATH.
Verified SafeView Analysis
The application primarily performs local file system operations (read, write, delete, copy) and local command execution. It uses `fs/promises` for file handling and `child_process.execFile` for executing external utilities like `unzip`, `ditto`, and `code`. The use of `execFile` with arguments passed as an array is a good practice to prevent shell injection. Input validation is present for MCP server names, skill names, and content, mitigating risks from malformed user input. Path resolution in `SkillEntryForm` is designed to prevent directory traversal within skill folders. Configuration changes trigger optional timestamped backups, adding a layer of safety. No direct network requests or hardcoded secrets for its own operation are apparent in the provided source.
Updated: 2026-01-17GitHub→
0
0
Low Cost
avinashyadav09 icon

Avinash-portfolio

by avinashyadav09

Sec9

This repository serves as a professional portfolio showcasing Avinash Yadav's expertise across various cloud, data, and AI technologies, including experience with MCP Server Integrations.

Verified SafeView Analysis
Only README.md content was provided for analysis, which does not contain executable code. Therefore, common security vulnerabilities like 'eval', obfuscation, hardcoded secrets, or malicious patterns within server logic could not be assessed. The provided content itself poses no direct security risk.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
ry-ops icon
Sec9

Integrates Pulseway RMM (Remote Monitoring and Management) API capabilities with AI assistants using the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires a Pulseway RMM account with API access and manually generated API credentials (Token ID and Token Secret).
  • ⚠️Installation heavily recommends using `uv` (Astral's fast Python package manager), which may need to be installed separately.
  • ⚠️When configuring for Claude Desktop, the path to the `pulseway-mcp-server` repository must be an absolute path, which is a common setup oversight.
Verified SafeView Analysis
The server follows good security practices by loading API credentials from environment variables and explicitly warning against committing them. It uses HTTPS for API communication and handles API errors gracefully without exposing raw secrets. No 'eval' or other directly malicious patterns were found. A minor potential concern is that `response.text` from API errors is included in the custom `APIError` details, which could theoretically contain sensitive information if the remote API leaks it, but this is standard practice for debugging.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
GSA-TTS icon
Sec8

Acts as a portfolio Multi-cloud Proxy (MCP) server, aggregating and exposing data from other specialized MCP servers like NIH Reporter and USA Spending via a single endpoint.

Setup Requirements

  • ⚠️Python 3.13+ required
Verified SafeView Analysis
No 'eval' or obvious obfuscation found. Hardcoded external MCP server URLs are dependencies, not secrets. The project explicitly outlines its GSA Vulnerability Disclosure Policy. The server acts as a proxy, forwarding requests; its overall security relies on the upstream MCP services it connects to, but the immediate code does not introduce new vulnerabilities. Uses 'random-route' in deployment config for better security.
Updated: 2026-01-06GitHub→
0
0
High Cost
LZMW icon
Sec9

Enables a local AI to receive iterative guidance from a remote, superior AI for solving programming problems, fostering hierarchical AI collaboration.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️Requires an API Key for external LLM providers (paid services like OpenAI, Zhipu, Anthropic, Gemini, or custom relays).
  • ⚠️Integration with Claude Code requires the `claude mcp` CLI tool.
  • ⚠️The 'custom' AI provider requires the `AURAI_BASE_URL` environment variable to be explicitly set.
Verified SafeView Analysis
The server uses `json.loads` to parse LLM responses and certain tool parameters (`context`, `files`, `project_info`). While the expected JSON schema is defined, a compromised or misconfigured LLM could potentially craft malicious JSON content. The server itself does not execute `action_items` or `code_changes` returned in the JSON; these are intended for the client (Claude Code) to interpret and act upon. The overall system security relies on the client's safe handling of these structured outputs.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
BROKENISTXD icon

ilspy-mcp-server

by BROKENISTXD

Sec7

Decompile and analyze .NET assemblies via a structured MCP server.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️ILSpy CLI (ilspycmd) must be installed and available in system PATH.
  • ⚠️Python dependencies (`mcp`, `pydantic`, `pefile`, `dnlib`) must be installed via `pip install -r requirements.txt`.
Review RequiredView Analysis
The server primarily executes `ilspycmd` on user-provided assembly files, which inherently carries risk when processing untrusted binaries. While `subprocess.run` is used with a list of arguments to mitigate direct shell injection, any vulnerability in `ilspycmd` itself could be exploited. Additionally, `pickle.load` is used for caching results, which poses a local deserialization risk if an attacker can manipulate the cache files on the filesystem. The server operates over stdio, avoiding direct network exposure, but a wrapper exposing it over a network would need its own security considerations. No hardcoded secrets were identified.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
iosxx icon
Sec1

A server component likely designed to interact with or serve resources within the Hugging Face ecosystem.

Review RequiredView Analysis
No source code was provided for analysis, making it impossible to perform a security audit. Critical security risks such as 'eval' usage, obfuscation, network vulnerabilities, or hardcoded secrets cannot be identified. Therefore, it is highly unsafe to run without reviewing the complete source code yourself.
Updated: 2025-11-28GitHub→
0
0
Low Cost
nezzeur icon
Sec1

A simple Model Context Protocol (MCP) server that exposes a tool to send emails via SMTP and a resource for server information.

Setup Requirements

  • ⚠️Requires Python 3.13 or newer.
  • ⚠️SMTP credentials (server, port, sender email, password) must be manually edited and hardcoded into the 'main.py' file.
  • ⚠️If using Gmail, requires a Google App Password (not your regular password) after enabling 2-Step Verification.
Review RequiredView Analysis
CRITICAL RISK: The repository includes a 'get-pip.py' file which is heavily truncated and contains large sections of base64 encoded, obfuscated code. This file is highly suspicious and its presence in a server's root directory with obfuscation is a severe security vulnerability, indicating potential for malicious code injection or unexpected behavior that cannot be easily audited. Additionally, SMTP credentials (SMTP_SERVER, SMTP_PORT, SENDER_EMAIL, SENDER_PASSWORD) are hardcoded directly into 'main.py' and the README instructs users to edit the file to configure them. This is a poor security practice, as sensitive information should be managed via environment variables to avoid exposure in source code and enable more secure deployment.
Updated: 2025-11-24GitHub→
0
0
Low Cost
Sec8

Deploys a remote Model Context Protocol (MCP) server on Cloudflare Workers to expose custom tools to AI agents without authentication.

Setup Requirements

  • ⚠️Requires a Cloudflare account and Wrangler CLI for deployment.
  • ⚠️Custom tools must be manually defined in 'src/index.ts' to add specific functionalities beyond the basic server framework.
  • ⚠️The deployed server is publicly accessible due to the lack of built-in authentication, requiring careful consideration for any tools handling sensitive data.
Verified SafeView Analysis
The server is explicitly designed to be 'authless', meaning it provides public access to any tools defined. While suitable for demos, deploying tools that handle sensitive data without implementing additional authentication mechanisms is a significant security risk. The underlying Cloudflare Workers platform provides a secure runtime environment.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
joerawr icon

scaha.net-mcp

by joerawr

Sec8

Provides youth hockey data (schedules, standings, player stats) from scaha.net via web scraping for AI agents.

Setup Requirements

  • ⚠️Requires Chrome or Chromium browser installed locally.
  • ⚠️Tool calls involving browser automation (Puppeteer) can take 5-15 seconds.
  • ⚠️Specific parameter formats are required for seasons (e.g., '2025/26'), schedules (e.g., '14U B'), and exact team names.
  • ⚠️Historical player and team roster data retrieval is currently unavailable for some tools due to an explicit SCAHA website limitation.
Verified SafeView Analysis
The server uses Puppeteer for web scraping, which is generally safer than direct 'eval' but involves executing code in a browser context. No hardcoded secrets were found. The primary security consideration is if the server is exposed publicly without rate limiting, it could be misused for aggressive scraping against scaha.net. The 'npx -y' installation method skips user confirmation, a minor supply chain risk if the package source is compromised.
Updated: 2025-12-23GitHub→
0
0
Low Cost
crypto-ninja icon

mcp-test-repo

by crypto-ninja

Sec10

A test repository for validating the repository management and pull request capabilities of a GitHub Multi-Cloud Platform (MCP) server.

Verified SafeView Analysis
The provided source code consists entirely of inert markdown files (README.md, TESTING.md, pr-test-file.md). These files themselves contain no executable code, network calls, or secret credentials, and therefore pose no direct security risks. The security assessment is strictly limited to the provided content. The actual GitHub MCP server that interacts with and manages these repositories would require a separate, in-depth security audit.
Updated: 2025-12-11GitHub→
PreviousPage 375 of 760Next