Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
NNSTD-cloud-ru-hack-2025 icon

ymetrika-mcp

by NNSTD-cloud-ru-hack-2025

Sec9

This server provides a Model Context Protocol (MCP) interface to Yandex Metrika, enabling tools to query analytics data, generate reports, and access insights.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️YANDEX_API_KEY environment variable is critical for Yandex Metrika tools functionality and is enforced in production mode.
  • ⚠️Requires 'uv' or 'pip' for dependency management. 'uv' is recommended.
Verified SafeView Analysis
All sensitive configurations, like the YANDEX_API_KEY, are managed via environment variables. The Dockerfile is configured to run the application as a non-root user (UID 1000), significantly reducing the blast radius in case of a container compromise. Input parameters are validated using Pydantic, which helps mitigate common injection vulnerabilities. OpenTelemetry tracing is implemented, and while the OTEL_ENDPOINT is configurable, this is a standard pattern for observability rather than a direct security flaw in the application's core logic. There are no obvious 'eval', obfuscation, or direct malicious patterns in the provided source code.
Updated: 2025-12-12GitHub→
0
0
Medium Cost
CodeProcessor icon

mcp-server

by CodeProcessor

Sec6

Provides optical character recognition (OCR) capabilities for images, either from base64 encoded strings or remote URLs.

Setup Requirements

  • ⚠️Requires Python 3.13+ for the Tesseract OCR server (the weather server requires Python 3.12+).
  • ⚠️The Tesseract OCR engine must be installed on the host system and available in the system's PATH, as 'pytesseract' is only a Python wrapper.
  • ⚠️Requires 'uv' package manager for dependency installation and running the server.
Review RequiredView Analysis
The 'ocr_image_from_url' function fetches images from arbitrary HTTP/HTTPS URLs. This poses a Server-Side Request Forgery (SSRF) risk, allowing a malicious actor to potentially scan internal networks or access internal services if the URL is not sufficiently validated. While 'httpx' includes timeouts and redirect following, it doesn't mitigate the core SSRF vulnerability. Temporary files created for OCR are cleaned up. No 'eval' or hardcoded secrets were found.
Updated: 2025-12-10GitHub→
0
0
Medium Cost
Sec7

This is a client-server application designed to interact with a locally running Ollama instance for AI model inference.

Setup Requirements

  • ⚠️Requires a running Ollama instance locally with the desired models downloaded.
  • ⚠️Python 3 and dependencies listed in `requirements.txt` must be installed.
  • ⚠️Configuration in `config.json` might need to be adjusted (e.g., Ollama host/port, model name).
Verified SafeView Analysis
The project involves client-server communication. Potential network risks exist if the server is exposed publicly without proper authentication or authorization. Without code analysis, specific vulnerabilities (e.g., 'eval' usage, insecure deserialization) cannot be identified. Assumed to be designed for local/internal network use.
Updated: 2025-11-18GitHub→
0
0
Low Cost
elcometestemail7-ui icon

test_mcp_server

by elcometestemail7-ui

Sec1

Cannot determine the use case as no source code was provided for analysis. Analysis is based solely on the project name 'MCP Server', which could imply a server related to the Minecraft Coder Pack or a similar game/development context.

Setup Requirements

  • ⚠️No source code provided, making it impossible to identify specific requirements, dependencies, or potential friction points for setup.
  • ⚠️Running this server without source code inspection is extremely risky and not recommended due to unverified security and unknown functionality.
Review RequiredView Analysis
A critical security audit cannot be performed as no source code was provided. Running any server or application without inspecting its source code is highly dangerous and poses severe security risks, including potential for malicious activity, data breaches, or system compromise. No known 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns can be identified or ruled out due to the absence of code. Therefore, it is considered extremely unsafe.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
brutalzinn icon

simple-mcp-selenium

by brutalzinn

Sec7

Automates browser interactions, web testing, and data extraction using Selenium, enabling programmatic control of web pages and access to browser developer tools.

Setup Requirements

  • ⚠️Requires Google Chrome browser installed on the host system.
  • ⚠️Requires a compatible ChromeDriver executable, which the `postinstall` script attempts to download but can be a point of failure depending on the OS and system tools (e.g., 'unzip', 'powershell').
  • ⚠️Tools saving files (like `take_screenshot`) prioritize `CURSOR_PROJECT_DIR`, `CURSOR_WORKSPACE_ROOT`, `WORKSPACE_ROOT`, or `PWD` environment variables to determine the project root. If these are not set, it defaults to `process.cwd()`, which might not be the user's intended project directory.
Verified SafeView Analysis
The server allows execution of arbitrary JavaScript within the browser context via the `execute_script` tool. While sandboxed within the browser, untrusted scripts could perform actions like data exfiltration from visited websites or malicious DOM manipulation. This is an inherent risk of browser automation tools that expose such functionality. The `dev_tools` tool also injects JavaScript for logging and network monitoring, which is standard for its purpose but extends browser control. No direct server-side 'eval' of untrusted input or hardcoded secrets were found.
Updated: 2025-11-20GitHub→
0
0
Medium Cost
ngr-drm icon
Sec8

Exposes support case retrieval functionality via an MCP server, interacting with a backend 'BX API' to fetch and format case data.

Setup Requirements

  • ⚠️Requires a local HTTP server to be running on `http://localhost:3000` that exposes a `/cases` endpoint to provide support case data.
Verified SafeView Analysis
No 'eval' or code obfuscation found. The 'API_BASE' for the BX API is hardcoded to `http://localhost:3000`, which is not a secret, but typically should be configurable via environment variables in a production setup. The server relies on an external local HTTP service for its data, so the security of that external service is paramount. The server itself does not introduce obvious new vulnerabilities.
Updated: 2025-11-23GitHub→
0
0
Low Cost
TahaHussein-dotcom icon

mcp-encrypted-sqlite

by TahaHussein-dotcom

Sec6

To provide secure and encrypted data storage for a Minecraft-related application or server using SQLite.

Setup Requirements

  • ⚠️Requires SQLite library installation and configuration.
  • ⚠️Encryption key management will be critical for secure operation.
  • ⚠️Likely requires integration with a Minecraft server or client to be functional.
Review RequiredView Analysis
Source code is unavailable for full review, preventing a comprehensive audit for 'eval', obfuscation, hardcoded secrets, or specific network risks. The 'encrypted' aspect suggests a focus on data security at rest, but implementation details for runtime security, dependency vetting, and potential vulnerabilities (e.g., SQL injection, key management practices) cannot be assessed.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
yeshsurya icon
Sec8

Provides AI assistants with comprehensive access to React Flow components, hooks, types, utilities, examples, and documentation via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️For Microsoft Copilot Studio deployment, an external hosting service with Streamable HTTP transport (e.g., Azure, AWS) and proper configuration (authentication) is required, as the server's default transport is stdio.
Verified SafeView Analysis
The server includes Zod for robust input validation and `sanitizeString` to mitigate potential injection risks in textual outputs. It primarily uses StdioServerTransport, reducing direct network exposure in its default run mode. No hardcoded secrets or direct `eval` calls are identified. While it relies on external data (React Flow definitions), these are hardcoded within the server, preventing external data injection. Deployment to HTTP transport (e.g., for Copilot Studio) would introduce standard web security considerations (authentication, HTTPS, rate limiting) which are external to this specific server's code but mentioned as requirements.
Updated: 2025-11-22GitHub→
0
0
Medium Cost
jhigh1594 icon
Sec7

An MCP server to integrate AI agents with the AgilePlace project management platform, providing tools for board, card, OKR, and activity management.

Setup Requirements

  • ⚠️Requires an active AgilePlace account and generating an API token (commercial product).
  • ⚠️OKR features rely on an external Planview API endpoint specified by `OKRS_API_BASE_URL` (defaulting to `https://api.pv-platforma.xyz/api`), implying an external dependency or service.
  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Designed for interaction with an MCP-compatible client like Claude Desktop.
Verified SafeView Analysis
The server utilizes environment variables for sensitive API credentials (AGILEPLACE_DOMAIN, AGILEPLACE_API_TOKEN), which is a good practice. It handles API communication via HTTPS with httpx. Input parameters that are expected to be complex structures (like lists or dictionaries) are received as JSON strings and then parsed using `json.loads`. While `json.JSONDecodeError` is caught, the parsed dictionaries are then passed directly to underlying API client methods without extensive internal schema validation for all possible fields within the `server.py` wrappers. This shifts the responsibility for validating the *content* of these dynamic inputs primarily to the backend AgilePlace and OKR APIs. The OKR API interactions use GraphQL, which typically provides some inherent protection against SQL injection when variables are used correctly with parameterized queries, as appears to be the case here. No explicit `eval()` or obfuscation is observed. The `okr_activities.py` module uses Pydantic models for stricter input validation for some actions, which is a positive. The main security concern is the direct passing of parsed JSON dictionaries without strong internal schema validation for *all* possible fields in `server.py` wrappers, which could forward unexpected or malformed data to the backend APIs if they are vulnerable.
Updated: 2025-12-15GitHub→
0
0
Medium Cost
RookieKiwi icon
Sec9

Enables AI assistants to convert, compress, archive, share, and import files across over 100 formats using the ConvertEverything.io API.

Setup Requirements

  • ⚠️Requires Node.js 18 or higher to run.
  • ⚠️Requires a ConvertEverything.io API key (a free tier is available, but higher usage tiers are paid).
  • ⚠️Local file operations require the server to have appropriate filesystem access permissions.
Verified SafeView Analysis
The server employs robust security measures, including explicit input validation using Zod schemas, path sanitization, and checks for null bytes and directory traversal ('..') to prevent malicious file access. It explicitly states it uses the public API and does not expose internal endpoints or secrets. API keys are loaded from environment variables or CLI arguments, not hardcoded. Large file uploads are handled with chunking for reliability and memory efficiency. All API communication uses HTTPS. While interacting with local files always carries some inherent risk, the implementation demonstrates strong mitigation strategies.
Updated: 2025-12-18GitHub→
0
0
Low Cost
santhoshnvv icon

mcp-server

by santhoshnvv

Sec1

To provide a custom server implementation, likely for the Minecraft game protocol, allowing for tailored gameplay or administration.

Review RequiredView Analysis
No source code was provided for analysis beyond the `README.md` file. Therefore, it is impossible to assess specific security risks like 'eval' usage, obfuscation, network vulnerabilities, hardcoded secrets, or malicious patterns. Without code to audit, the safety of running this server cannot be guaranteed.
Updated: 2025-11-30GitHub→
0
0
Medium Cost
gjoeckel icon

my-mcp-servers

by gjoeckel

Sec3

Automate predefined development workflows with autonomous approval for AI agents within an IDE.

Setup Requirements

  • ⚠️Requires Node.js runtime (>=18.0.0).
  • ⚠️Relies on a `.cursor/workflows.json` file for workflow definitions, which must be manually created and maintained. This file is critical for security.
  • ⚠️Commands defined in `workflows.json` are executed with `child_process.exec`, meaning they run with the permissions of the user running the IDE. Be extremely cautious with workflow definitions.
Review RequiredView Analysis
The server's core function is to execute arbitrary shell commands defined in local workflow files (`.cursor/workflows.json`), with an option for autonomous approval. While workflows are intended to be 'explicit' and 'version-controlled', the `child_process.exec` function is used without an internal allow-list or strict command sanitization for workflow commands. If another tool (e.g., a filesystem tool with write access) or a malicious actor can modify the `workflows.json` file, it can lead to arbitrary code execution and full system compromise, especially with `auto_approve: true` workflows. This constitutes a high-risk vulnerability for arbitrary code execution if the workflow definitions are not absolutely trusted and immutable.
Updated: 2025-11-26GitHub→
PreviousPage 379 of 760Next