Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
audreyui icon
Sec9

An MCP server that implements the components.build specification for grading, generating, and validating UI components, designed to assist AI developers.

Setup Requirements

  • ⚠️Requires Node.js version 20 or higher.
  • ⚠️For local development with Claude desktop, manual configuration of the `~/.claude/claude_desktop_config.json` file with the full path to `dist/index.js` is necessary.
  • ⚠️Component generation templates are currently specific to React + TypeScript, not other frameworks.
Verified SafeView Analysis
The server's core logic, `executeTool`, uses a safe `switch` statement to dispatch to predefined functions, preventing arbitrary code execution. It does not contain 'eval', obfuscation, or hardcoded secrets. `gradeComponent` and `generateComponent` process and produce code strings without executing them. The Vercel HTTP API (separate from the MCP server's standard I/O transport) has open CORS (`Access-Control-Allow-Origin: *`), which is noted as a deployment-level configuration.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
duaghwls icon

FileManageMCP

by duaghwls

Sec9

An LLM-powered agent designed to organize and manage files and folders on a Windows local file system according to a predefined set of rules.

Setup Requirements

  • ⚠️Requires Windows 10/11
  • ⚠️Requires Python 3.13+
  • ⚠️Requires 'uv' for dependency management and execution
  • ⚠️Requires specific 'claude_desktop_config.json' setup for Claude Desktop integration
Verified SafeView Analysis
The server implements robust safety features including a default 'dry run' mode, a configurable sandbox for file operations (enforced by `validate_path` and `is_path_in_sandbox`), and explicit forbidden system paths (`C:\Windows`, `Program Files`, `.git`, etc.). File operations utilize safer `pathlib` and `shutil` methods rather than direct shell commands, mitigating injection risks. File content reading is limited by `max_length`, and image processing is for analysis rather than execution. No `eval` or `os.system` on user input was found. The primary residual risk involves potential misuse of file modification tools by the LLM if dry run is disabled, or subtle vulnerabilities within third-party parsing libraries, but these are generally well-mitigated for the intended use.
Updated: 2025-12-15GitHub→
0
0
Medium Cost
josucueva icon

localmcp

by josucueva

Sec3

Provides an MCP server with tools for basic mathematical operations and CSV data analysis.

Setup Requirements

  • ⚠️Docker required
  • ⚠️MCP CLI tool required
  • ⚠️Python pandas library required
Review RequiredView Analysis
The `get_csv_stats` tool accepts a `file_path` as a string argument and directly uses it in `pd.read_csv()`. This creates a path traversal vulnerability, allowing an attacker to potentially read arbitrary files on the server's filesystem if `file_path` is not properly sanitized or restricted by the calling gateway/client. This can lead to sensitive information disclosure.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
Uninen icon

devserver-mcp

by Uninen

Sec8

Manages and controls local development servers and browser automation through a TUI and Model Context Protocol (MCP) for LLM-assisted development workflows.

Setup Requirements

  • ⚠️Requires Python 3.13+.
  • ⚠️Uses `uv` for dependency management.
  • ⚠️Playwright must be manually installed (`uv add playwright && playwright install`) if experimental browser automation features are enabled.
  • ⚠️Requires a `devservers.yml` configuration file in the project root.
Verified SafeView Analysis
The server binds to localhost by default, limiting network exposure. Subprocesses are executed using `asyncio.create_subprocess_shell` (`shell=True`), which can be a shell injection risk if the `command` field in `devservers.yml` is populated from an untrusted source. However, for a local development tool where the user controls the `devservers.yml` configuration, this risk is mitigated. The project roadmap indicates future plans to address command injection prevention for a web-based architecture.
Updated: 2026-01-18GitHub→
0
0
Low Cost
SeaQLe icon

selenium

by SeaQLe

Sec6

Tool for extracting and patching proprietary Android vendor files for custom ROM development (LineageOS).

Setup Requirements

  • ⚠️Requires `extract_utils` library to be present at `../../../tools/extract-utils`.
  • ⚠️Requires `llvm_objdump` tool to be available in the system's PATH.
  • ⚠️Requires proprietary Android vendor images/files for extraction and patching.
Verified SafeView Analysis
The script performs direct binary patching of system libraries and configuration files using AArch64 NOP instructions and symbol version clearing. While intended for legitimate custom ROM development, incorrect patches could lead to device instability or introduce vulnerabilities. It executes external commands (`llvm_objdump`). There are no obvious `eval` or hardcoded secrets.
Updated: 2025-12-12GitHub→
0
0
Low Cost
remcoboerma icon

mcp-server-demo

by remcoboerma

Sec9

This server acts as an AI assistant tool provider (MCP server) offering calculator functions, data logging, and reporting capabilities via SQLite, demonstrating how AI can interact with external services.

Setup Requirements

  • ⚠️Requires 'uv' for virtual environment and package management (`inv venv` and `inv install`).
  • ⚠️Docker and Traefik (or a similar reverse proxy/SSL setup) are required for networked/production deployment using SSE transport.
Verified SafeView Analysis
The server correctly uses parameterized queries for SQLite operations, preventing SQL injection. It explicitly warns about user input validation for logging functions. The `test_sse.py` client disables SSL verification for `localhost` testing, with an explicit note to re-enable for production, which is a common and acceptable practice for local development.
Updated: 2025-11-20GitHub→
0
0
Low Cost
gergelyszerovay icon

mcp-id-date

by gergelyszerovay

Sec9

Generates auto-incrementing unique hexadecimal identifiers and current ISO 8601 timestamps, serving as an MCP server tool.

Setup Requirements

  • ⚠️Requires Node.js and pnpm (specified as pnpm@9.15.0+ in package.json) to be installed.
  • ⚠️The default 'idCounterFile' path (/workspace/last-tag-id.txt) may not be writable or exist in all environments; users might need to specify a custom path using '--idCounterFile'.
  • ⚠️Enabling HTTP (--enableHttpTransport) or REST (--enableRestServer) servers might lead to port conflicts on default ports (3001 and 3002 respectively) if other services are already using them.
Verified SafeView Analysis
The server implements input validation using Zod schemas for its tools and includes error handling. No 'eval' or direct remote code execution vectors are apparent. File persistence for the ID counter stores only a number, not sensitive data. While the 'idCounterFile' path is configurable, potentially allowing misuse if pointed to sensitive locations by a malicious actor with elevated privileges, the default path is within a workspace, limiting immediate risk. Overall, it appears to follow good security practices for its intended functionality.
Updated: 2025-12-10GitHub→
0
0
Low Cost
gconsigli icon

VLArm

by gconsigli

Sec8

Enables a physical robotic arm (SO-101) to be controlled by a local Large Language Model via the Model Context Protocol (MCP) for autonomous, language-based task execution.

Setup Requirements

  • ⚠️Requires Ollama to be installed and the 'qwen2.5' model to be running locally.
  • ⚠️Requires the Phosphobot API to be downloaded and running locally.
  • ⚠️Requires Python 3.13 or higher.
Verified SafeView Analysis
The server primarily acts as a proxy, forwarding commands from a local LLM to a locally-running Phosphobot API. It uses hardcoded local URLs and a default robot ID (0), which is safe for local operation. No dynamic code execution (e.g., 'eval') or obvious injection vulnerabilities were found in the provided code. The primary risk would stem from vulnerabilities within the local Phosphobot API itself or if the local 'localhost' endpoint is inadvertently exposed externally.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
chris-tutt icon

wincher-mcp-server

by chris-tutt

Sec9

Integrates Wincher's SEO API with Claude Desktop to allow natural language querying and analysis of SEO data.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires Claude Desktop app to function
  • ⚠️Requires a Wincher account with API access (likely paid)
  • ⚠️API key must be configured in Claude Desktop's JSON config file, not a standard .env file.
Verified SafeView Analysis
The server uses `os.getenv` for the API key, preventing hardcoding. It relies on the Wincher API for data and does not appear to execute arbitrary commands or access local files beyond its script. Network requests are made via `httpx`, which is a standard library. There's no clear 'eval' or other directly exploitable code patterns. The main risk lies in the API key exposure if the configuration file is not secured, which the README warns against.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
DistributorX icon

switch-mcp-server

by DistributorX

Sec9

Provides comprehensive Enfocus Switch scripting documentation via MCP to AI assistants for development and context-aware help.

Setup Requirements

  • ⚠️Requires Node.js runtime (v12+).
  • ⚠️Manual JSON configuration in AI client settings (e.g., Claude Desktop, Cursor) is required.
  • ⚠️If not using 'npx', a build step ('npm run build') is needed to compile TypeScript to JavaScript before running.
Verified SafeView Analysis
The server operates over stdin/stdout (stdio) primarily, limiting direct network attack vectors. It has zero external runtime dependencies, relying only on Node.js built-ins. Crucially, it implements robust path sanitization (uriToPath, sanitizeUri, abs.startsWith(DOC_ROOT)) to prevent directory traversal attacks when reading resources. JSON parsing includes error handling. There are no signs of 'eval' usage, arbitrary command execution from user input, or hardcoded secrets. The only minor potential risk could be denial-of-service if very large documentation files are repeatedly requested via 'resources/read' or 'search_docs' leading to high memory/CPU usage, but this is inherent to serving large documents and mitigated by the application's single-threaded Node.js nature and typical MCP client behavior.
Updated: 2025-11-26GitHub→
0
0
Low Cost
alanhc icon

yt-mcp-server

by alanhc

Sec9

A Model Context Protocol (MCP) server that enables MCP clients (like ChatGPT, Claude Desktop, or other LLM applications) to control and create n8n workflows through standardized tool interfaces.

Setup Requirements

  • ⚠️Requires a running n8n instance with API access.
  • ⚠️Requires an n8n API Token (Bearer token) for authentication.
  • ⚠️Requires Python 3.10 or higher.
Verified SafeView Analysis
The server correctly loads API tokens from environment variables, preventing hardcoded secrets. It utilizes httpx for asynchronous HTTP requests to the n8n API, handling timeouts and error responses. The FastMCP server implementation includes explicit TransportSecuritySettings for allowed hosts and origins, enhancing network security when deployed behind a reverse proxy. Input validation ensures that the 'workflow' parameter is a dictionary, but deep content validation for the n8n workflow definition itself is not performed by the proxy, relying on the n8n API for that. No 'eval' or direct arbitrary shell command execution patterns were found in the Python code.
Updated: 2025-12-10GitHub→
0
0
Medium Cost
johannehouweling icon

ro-crate-mcp-server

by johannehouweling

Sec9

Server for indexing and querying Research Object (RO-Crates) using pluggable storage backends and offering keyword and semantic search capabilities.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Requires configuration for a storage backend (Filesystem, Azure Blob Storage, or HTTP) to be fully functional, otherwise defaults to no backend.
  • ⚠️Semantic search requires an embeddings provider (e.g., a local SentenceTransformer model or an external service like OpenAI), which can incur computational or monetary costs.
Verified SafeView Analysis
The codebase demonstrates good security practices for preventing common vulnerabilities: 'pydantic-settings' with 'SecretStr' is used for sensitive environment variables like API keys. Filesystem and HTTP storage backends include explicit path traversal prevention checks. The zip file extraction utility (`zip_reader.py`) also safely extracts members, mitigating 'zip slip' vulnerabilities. SQL queries in `sqlite_store.py` use parameter binding to prevent SQL injection. The custom query parser and FTS interaction appear to correctly use parameterized queries for SQLite FTS, reducing injection risk. No 'eval' or direct shell command execution with unsanitized user input was observed.
Updated: 2025-12-09GitHub→
PreviousPage 383 of 760Next