Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
aiscibe-mcp-deployment icon
Sec7

This server acts as a Model Context Protocol (MCP) gateway, exposing configured APIs as tools for AI models like Claude.

Setup Requirements

  • ⚠️Requires an OpenAI API Key (Paid service) for associated AI model usage, configured as an environment variable.
  • ⚠️Requires Python 3.9 for deployment on Vercel.
  • ⚠️Requires installing Python dependencies from requirements.txt.
Verified SafeView Analysis
The server constructs API calls using a hardcoded base URL and an 'endpoint' path, which could potentially allow for path traversal or unintended URL manipulation if the 'endpoint' is derived from untrusted AI model output without strict validation. Authentication details for connected APIs are configured within the application, and while currently set to 'none' or empty, these could become a hardcoded secret risk if populated directly in the code rather than through environment variables. No 'eval' or obvious malicious patterns were found.
Updated: 2025-12-02GitHub→
0
0
Low Cost
Somnath1998-hub icon

expense_manager_mcp_server

by Somnath1998-hub

Sec9

Manages personal or business expenses via an MCP server, allowing LLM clients and applications to add, update, delete, list, filter, and summarize financial transactions.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️The `fastmcp` library must be installed (e.g., `pip install fastmcp`).
  • ⚠️The `expense_categories.json` file must be present in the directory where the script is executed.
Verified SafeView Analysis
The server correctly utilizes parameterized queries for all database operations, effectively preventing SQL injection vulnerabilities. No 'eval', 'exec', or similar dangerous functions are used. File paths for the database and categories are derived from the current working directory, limiting potential file system access risks. The server binds to 0.0.0.0, making it accessible from any network interface; while standard for servers, local deployment should consider firewall rules if exposed beyond a trusted network.
Updated: 2025-12-02GitHub→
0
0
Low Cost
code4mk icon
Sec8

Provides AI-powered travel planning tools and real-time weather information for Cox's Bazar, Bangladesh.

Setup Requirements

  • ⚠️Requires Python 3.13+
  • ⚠️Requires uv package manager for installation and running
  • ⚠️Requires Redis server if GitHub OAuth is enabled
  • ⚠️Requires Node.js > 20.x.x for running the inspector tool
Verified SafeView Analysis
The server correctly uses environment variables (`os.getenv`) for sensitive configurations like GitHub OAuth credentials and Redis connection details. It relies on `FastMCP` for its core server logic and interacts with a legitimate external weather API (Open-Meteo). Input parsing for dates uses `python-dateutil`, and structured elicitation uses Pydantic models for validation, which are generally safe practices. No `eval` or obvious obfuscation detected. Potential risks would primarily stem from misconfiguration of OAuth providers or vulnerabilities within the `FastMCP` framework itself, which are external to this specific codebase's immediate scrutiny.
Updated: 2025-11-19GitHub→
0
0
Medium Cost
Tech-Trailblazers icon

pgpro-com-documentation

by Tech-Trailblazers

Sec5

An open-source documentation platform for education, AI training, and MCP server knowledge, supported by utility scripts for scraping and downloading documentation.

Setup Requirements

  • ⚠️Python script requires Selenium WebDriver (e.g., ChromeDriver) to be installed and accessible in the system PATH.
  • ⚠️Python script requires a 'valid_urls.txt' file containing URLs to process.
  • ⚠️Go script requires a Go environment to build and run.
Review RequiredView Analysis
The Python script utilizes Selenium with the '--no-sandbox' argument, which significantly reduces the browser's security protections and can pose a risk to the host system if it navigates to malicious or compromised URLs, especially if the 'valid_urls.txt' input is not carefully curated. The Go script performs HTTP requests to external domains and downloads files based on scraped content; while it attempts to sanitize filenames and hardcodes initial scraping targets, direct interaction with external content always carries a risk of downloading malicious files. Neither script contains obvious 'eval' or direct code injection vulnerabilities within its own logic, but the nature of web scraping and disabling browser sandboxing introduces inherent security risks.
Updated: 2025-11-26GitHub→
0
0
Low Cost
mschultheiss83 icon

context-processor

by mschultheiss83

Sec8

Intelligent context management and enhancement for AI agents, providing configurable pre-processing strategies (clarify, analyze, search, fetch) for content quality and discoverability within a local knowledge base.

Setup Requirements

  • ⚠️File-based storage (`./contexts` directory) is local and lacks database features such as ACID transactions, concurrent locking, or robust multi-user support, which may limit scalability and data integrity for very large or concurrent datasets.
  • ⚠️No built-in authentication or authorization mechanisms; any client connected via the MCP protocol has full access to all tools and data.
  • ⚠️The 'custom' preprocessing strategy is an extensibility point that could introduce security risks if users implement unsafe code within it.
  • ⚠️Requires a Node.js runtime environment to execute.
Verified SafeView Analysis
The server performs local file system operations for storage and in-memory string processing for content enhancement. It utilizes the standard `@modelcontextprotocol/sdk`. There are no external network requests initiated by the built-in preprocessing strategies (e.g., the 'fetch' strategy only extracts URLs, it does not download content from them). Contexts are stored as plain JSON files on the local disk, lacking built-in encryption, authentication, or authorization, making it suitable for a single-user, local environment rather than an exposed or multi-user production system. The 'custom' preprocessing strategy is an extension point that could introduce risks if users implement unsafe code within it, though the provided implementation is benign.
Updated: 2026-01-12GitHub→
0
0
Medium Cost
JuniorJoanis icon
Sec3

Exposes Meilisearch documentation as structured tools, resources, and prompts for LLMs to facilitate intelligent querying and integration of technical information.

Setup Requirements

  • ⚠️Requires Git client to be installed on the host system.
  • ⚠️Performs an initial clone and indexing of the Meilisearch documentation repository (can take 'a few minutes' on first run and on updates).
  • ⚠️Requires write permissions to the configured cache and index directories (default: `.cache/docs` and `.cache/index` within the package directory).
Review RequiredView Analysis
The `read_resource` function, when handling a resource URI, uses `pathlib.Path` to combine the `repo_path` (local repository clone directory) with `doc_path` (extracted from the URI, which can contain user-controlled input and is URL-decoded). This is vulnerable to path traversal attacks (e.g., `meilisearch-docs://../../../../etc/passwd`), potentially allowing an LLM or malicious user to read arbitrary files on the host system. Although `pathlib.Path` handles `..` sequences, it does not prevent resolving paths outside the intended base directory. Additionally, the system relies on Git cloning and local file system operations, and while configurations are via environment variables, general host filesystem access should be considered when deploying.
Updated: 2025-11-19GitHub→
0
0
High Cost
Anirog icon
Sec7

Transforms Sketch designs into HTML/CSS by enabling AI coding assistants to extract design data via the Sketch MCP server.

Setup Requirements

  • ⚠️Requires Sketch (version 2025.2.4 or later)
  • ⚠️Requires a paid AI coding assistant (e.g., GitHub Copilot for VS Code)
  • ⚠️Manual activation of MCP Server within Sketch settings is required
Verified SafeView Analysis
The provided 'source code' consists of documentation (README, technical decisions) and AI agent/prompt configurations, not the actual MCP server implementation code. Therefore, a code-level security audit for 'eval', obfuscation, or specific network vulnerabilities of the MCP server cannot be performed. The system relies on the Sketch MCP server (an internal Sketch component) and external AI coding assistants. Potential conceptual risks include data exposure if the AI client or connection to the Sketch API through MCP is compromised, as design data is extracted. However, no malicious patterns or hardcoded secrets are evident in the provided documentation for this project.
Updated: 2026-01-18GitHub→
0
0
High Cost
Amier-ge icon
Sec9

Parses PowerShell ConsoleHost_history.txt files from disk images to extract command history for forensic analysis.

Setup Requirements

  • ⚠️Requires 'ConsoleHost_Parser' library folder to be located in the parent directory of this MCP server.
  • ⚠️Installation of 'pytsk3' and 'pyewf' may require system-level dependencies (e.g., libtsk, libewf) which can be complex on some operating systems.
Verified SafeView Analysis
The code uses established forensic libraries (pytsk3, pyewf) for disk image parsing and does not contain obvious security vulnerabilities like 'eval', direct shell execution without sanitization, or hardcoded credentials. It focuses on file system analysis and decoding content, which is generally robust. The main security considerations would be vulnerabilities in the underlying third-party libraries or potential exploits from extremely malformed disk images.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
seb999 icon

EEA_sdi_mcp

by seb999

Sec8

Interacting with the European Environment Agency (EEA) GeoNetwork Catalogue API for metadata search, discovery, export, and management.

Setup Requirements

  • ⚠️Requires Node.js and npm to install dependencies and run the server.
  • ⚠️Write operations (e.g., duplicate, update, tag management, attachment upload/delete) require 'CATALOGUE_USERNAME' and 'CATALOGUE_PASSWORD' environment variables configured for authentication with the upstream GeoNetwork API.
  • ⚠️The 'upload_file_to_record' tool requires the specified 'filePath' to be an absolute path accessible on the local filesystem of the machine running the MCP server.
Verified SafeView Analysis
The server correctly uses environment variables for sensitive API credentials (CATALOGUE_USERNAME, CATALOGUE_PASSWORD). Rate limiting is implemented using 'express-rate-limit' to prevent abuse. File uploads are handled by 'multer' with a configurable MAX_FILE_SIZE. Crucially, the serving of uploaded files includes robust directory traversal protection using 'path.resolve'. The CORS configuration with 'origin: true' is highly permissive; while common for flexible API clients, it means any origin can make requests, potentially requiring the upstream GeoNetwork API to have its own origin validation for sensitive operations. No instances of 'eval' or other obvious malicious patterns were found in the provided code.
Updated: 2025-12-04GitHub→
0
0
Medium Cost
Zetrix-Chain icon

zetrix-mcp-server

by Zetrix-Chain

Sec6

The Zetrix MCP Server allows AI assistants, like Claude, to interact with the Zetrix blockchain using natural language, providing a suite of tools for account management, transaction processing, real-time monitoring, cryptography, and smart contract development and generation.

Setup Requirements

  • ⚠️Requires Node.js v18 or higher.
  • ⚠️MCP client configuration (`args` field) requires an absolute path to the server's `dist/index.js` file.
  • ⚠️When using the `create-zetrix-tool` or `zetrix-sdk-nodejs` internally, `NODE_URL` environment variables in `.env` files must NOT include the `https://` protocol prefix (e.g., `node.zetrix.com` instead of `https://node.zetrix.com`).
Review RequiredView Analysis
The server's `zetrix_contract_init_dev_environment` tool utilizes `child_process.execSync` to run `npx -y create-zetrix-tool`. While the `contractName` input is sanitized, executing external CLI tools via `npx` introduces a supply chain risk. A compromised `create-zetrix-tool` package, even with valid input, could lead to arbitrary code execution on the user's system. Additionally, the `zetrix_contract_generate_advanced` tool writes LLM-generated code directly to the filesystem (`fs.writeFileSync`), which could pose a risk if malicious or vulnerable code is generated and later executed. The default WebSocket connections use `ws://` (unencrypted), which is less secure than `wss://` for sensitive data over untrusted networks.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
liamintemann icon
Sec9

A lightweight Model Context Protocol server that proxies Notion API calls for OpenAI Agent Builder.

Setup Requirements

  • ⚠️Requires 'NOTION_API_KEY' environment variable to be set for tools to function.
  • ⚠️Requires Node.js version 18 or higher.
Verified SafeView Analysis
The server uses environment variables for sensitive API keys (NOTION_API_KEY) and explicitly warns if it's not set. It relies on official Notion and MCP SDKs. Input schemas for tools use `z.any()` for Notion filters and properties, which allows for flexible but potentially large/complex inputs from an agent. However, this is passed directly to the Notion API and is not a direct server vulnerability. There are no 'eval' calls, obfuscation, or hardcoded secrets found.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
OumaimaZerouali icon

chatbots-mcp-server

by OumaimaZerouali

Sec8

This server acts as a backend for AI chatbots, exposing tools for managing bot configurations and creating appointments through a REST API client.

Setup Requirements

  • ⚠️Requires a dependent Spring Boot service running on `http://localhost:8080` that provides `/api/bot-configs` and `/api/appointments` endpoints. Without this service, the application's core functionality will not work.
  • ⚠️The `systemPrompt` field in `BotConfigEntity` could potentially store very long strings, which if returned to an AI model, could increase token costs and latency for the AI interaction.
Verified SafeView Analysis
The code does not use 'eval' or any obfuscation. It relies on internal REST calls to 'http://localhost:8080'. While the hardcoded URL is a configuration best practice violation (should be configurable), it points to an internal resource and does not expose direct external network risks or hardcoded secrets. Basic input validation is present for appointment creation. The overall security of the system heavily depends on the security of the dependent service running on localhost:8080.
Updated: 2026-01-05GitHub→
PreviousPage 397 of 760Next