Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
saadkhan1150 icon

telegram-mcp

by saadkhan1150

Sec8

Manages multiple Telegram accounts, sending bulk messages, scheduling tasks, and integrating with AI tools via a web dashboard for streamlined messaging and automation.

Setup Requirements

  • ⚠️Requires Telegram API ID and API Hash (can use provided defaults, but personal credentials are recommended for higher limits).
  • ⚠️Requires Python 3.10+.
  • ⚠️Requires Playwright's Chromium browser to be installed for web-based QR login. (Can be installed via `playwright install chromium` after `pip install playwright`).
  • ⚠️The 'AI Tools' feature refers to prompts for an external AI model; the server itself does not contain an integrated LLM. An external AI model is needed to consume these prompts and interact with the server's MCP tools.
Verified SafeView Analysis
The project avoids `eval` and dangerous patterns. Sensitive session data (`.telegram_session`, `accounts/config.json`) is correctly listed in `.gitignore`. Telegram API credentials can be overridden by environment variables, though public fallback credentials are hardcoded. A notable security suggestion from the audit report is that local session storage is currently unencrypted, although its risk is assessed as low due to local storage.
Updated: 2026-01-19GitHub→
0
0
Low Cost
Q07K icon
Sec9

Initializes an API server using the FastMCP framework for Multi-Agent Communication Protocol (MCP) related functionalities.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Requires 'uvicorn' to run the ASGI server (install via 'pip install uvicorn' if not included with 'mcp[cli]').
Verified SafeView Analysis
The provided source code is minimal, only initializing the FastMCP server with no evident malicious patterns, hardcoded secrets, or dangerous functions like 'eval'. Potential security risks would reside within the 'mcp' framework itself, which is an external dependency, or in subsequent API endpoint implementations not shown here.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
statnativ icon

novasonicmcp

by statnativ

Sec4

This server acts as a voice-powered AI dental receptionist, handling patient inquiries, scheduling, and emergency detection through real-time speech-to-speech conversations using AWS Bedrock Nova Sonic and MCP for tool integration.

Setup Requirements

  • ⚠️Requires AWS account with Amazon Nova Sonic Bedrock model access enabled (explicit activation needed).
  • ⚠️Requires AWS CLI configured with appropriate credentials (e.g., via 'aws configure').
  • ⚠️MCP server configurations in 'mcp_config.json' can execute arbitrary commands ('npx', 'node') which may download and run untrusted code; these configurations must be strictly controlled and audited.
Review RequiredView Analysis
The server uses Model Context Protocol (MCP) which allows execution of external commands (like 'npx' or 'node') or HTTP calls defined in 'mcp_config.json'. This introduces a significant supply chain and arbitrary code execution risk if MCP server configurations are not carefully vetted and restricted, or if the server itself is exposed to untrusted user input that could alter these configurations. While AWS credentials are primarily sourced from the AWS CLI profile or environment variables, local testing guides mention hardcoding them in Docker run commands, which is a bad practice. Network ingress for the ALB is wide open (0.0.0.0/0) which is typical for public web apps, but requires careful management of other security layers. Basic input validation is present in some areas (e.g., JSON parsing in tool use), but overall, the MCP extensibility model requires extreme caution to prevent exploitation.
Updated: 2025-11-22GitHub→
0
0
Low Cost

dotprompts

by xu2xulim

Sec6

A SvelteKit application for managing and serving AI prompts, integrated with authentication and a database.

Setup Requirements

  • ⚠️Requires InstantDB account and API keys (`INSTANT_APP_ID`, `INSTANT_API_KEY`).
  • ⚠️Requires OAuth credentials for GitHub and Google (`GITHUB_CLIENT_ID`, `GITHUB_CLIENT_SECRET`, `GOOGLE_CLIENT_ID`, `GOOGLE_CLIENT_SECRET`).
  • ⚠️Requires a Turso database and credentials (`DATABASE_URL`, `DATABASE_TOKEN`).
Verified SafeView Analysis
The project uses `better-auth` and InstantDB for authentication and data storage, which are generally robust solutions. Secrets are correctly managed via environment variables. However, the `svelte.config.js` sets `csrf: { trustedOrigins: ['*'] }`, which is a critical security vulnerability for a web application in a production environment as it disables CSRF protection from any origin. This setting should be locked down to specific trusted origins for production deployments.
Updated: 2025-11-25GitHub→
0
0
Low Cost
standardbeagle icon

dart-query

by standardbeagle

Sec9

Manages tasks and documents in Dart AI through an MCP server, focusing on context-efficient batch operations, SQL-like selectors, and CSV imports to prevent context rot in LLM interactions.

Setup Requirements

  • ⚠️Requires a Dart AI API Token (starts with 'dsa_')
  • ⚠️Requires Node.js 18.0.0 or higher
  • ⚠️Batch operations (`batch_update_tasks`, `batch_delete_tasks`, `import_tasks_csv`) default to `dry_run: true` or `validate_only: true` for safety, requiring explicit confirmation/flag changes for execution.
Verified SafeView Analysis
The server explicitly reads the DART_TOKEN from `process.env`, which is a secure practice (no hardcoded secrets). It performs extensive input validation on all tool arguments, significantly reducing injection risks. The use of `fs.readFileSync` in `import_tasks_csv` for `csv_file_path` could be a vector for arbitrary file access if the input path is not carefully controlled by the calling LLM or MCP environment; however, this is within the expected functionality of a tool designed to interact with local files. Overall, the code demonstrates robust defensive programming, token validation, and error handling, making it relatively safe to run within a trusted environment.
Updated: 2026-01-19GitHub→
0
0
Low Cost
BlockRunAI icon
Sec10

This repository serves as a curated list of Model Context Protocol (MCP) servers focused on research, academia, and knowledge discovery, rather than being an MCP server itself.

Verified SafeView Analysis
The provided source code consists solely of Markdown files (`README.md`, `CONTRIBUTING.md`). There is no executable code (e.g., Python, JavaScript, Dockerfiles) to audit for runtime security risks such as 'eval' usage, code obfuscation, network vulnerabilities, or hardcoded secrets. This repository is a static list of external projects, and its own content poses no direct execution-based security risks. The security of the *listed* external projects is beyond the scope of this analysis.
Updated: 2026-01-17GitHub→
0
0
High Cost
Desckars icon
Sec4

Integrates Claude AI with an OLAP cube (Oracle Essbase O3) via a custom Model Context Protocol (MCP) for natural language MDX queries and data analysis.

Setup Requirements

  • ⚠️Requires an Oracle Essbase O3 server to be running locally on `localhost:7777`.
  • ⚠️Requires a pre-built `mcp_o3` JAR file (expected to be in `chatbot03/mcp_o3/target/` or a path specified in `config.properties`).
  • ⚠️Requires an Anthropic API Key, which is a paid service.
  • ⚠️API key decryption might fail if underlying system properties (username, OS, Java version) change, requiring the key to be re-entered.
Review RequiredView Analysis
A critical security risk exists due to hardcoded Oracle Essbase O3 database username ('user') and password ('user') within `MCPService.java` when it launches the external O3 server process. If this server connects to a production Essbase instance, it could lead to unauthorized access. The API key encryption relies on system properties (username, OS, Java version), which, if changed, could render stored API keys undecryptable and require manual re-entry.
Updated: 2025-12-19GitHub→
0
0
Medium Cost
antisynthesis icon

asc-mcp

by antisynthesis

Sec9

Provides a Model Context Protocol (MCP) server that enables AI assistants to manage Apple App Store Connect resources and operations.

Setup Requirements

  • ⚠️Requires App Store Connect API credentials (Issuer ID, Key ID, and a .p8 private key file) which must be securely configured via environment variables or Kubernetes secrets.
  • ⚠️Requires Go 1.23 or later for local development and building.
  • ⚠️Kubernetes deployment requires manual population of sensitive data in `ops/k8s/secret.yaml` template before application.
Verified SafeView Analysis
The project demonstrates strong security practices: it uses Go's standard library for cryptographic operations (JWT ES256), prevents hardcoded secrets by requiring environment variables or Kubernetes Secrets for App Store Connect API credentials, and its Kubernetes manifests enforce strict security contexts (runAsNonRoot, readOnlyRootFilesystem, dropped capabilities). The primary communication via stdin/stdout also inherently limits network exposure. No 'eval' or obvious obfuscation detected.
Updated: 2026-01-16GitHub→
0
0
High Cost
Watashicuvu icon

world-history-engine

by Watashicuvu

Sec7

A narrative graph engine for generating, tracking, and visualizing fictional worlds, usable with LLMs as an MCP server or procedurally.

Setup Requirements

  • ⚠️Requires Python 3.11+
  • ⚠️Requires an OpenAI (or compatible) API key for LLM-assisted features (API_KEY env var).
  • ⚠️LLM usage can incur significant token costs due to extensive context building for narration and agent interactions.
Verified SafeView Analysis
The server uses Pydantic for data validation and `yaml.safe_dump` for writing configuration files, mitigating common deserialization and injection risks. LLM-powered agents can call tools that modify the world state (e.g., `define_new_archetype`, `add_entity_instance`, `update_entity_tags`, `add_fact`), which introduces inherent risks of unintended state changes if the LLM acts maliciously or incorrectly. However, these tools are constrained by their defined parameters and Pydantic models. Hardcoded API keys are avoided by using environment variables. The potential to modify `data/custom` with arbitrary YAML content via the `define_new_archetype` tool represents the most significant, though mitigated, write-access risk.
Updated: 2025-12-08GitHub→
0
0
Low Cost
adasNetwoven icon

mcp-server-hotel

by adasNetwoven

Sec9

Exposes an API endpoint for an MCP (Multi-tool Coordination Protocol) server to retrieve hotel reviews.

Setup Requirements

  • ⚠️Requires the 'fastmcp' Python package to be installed.
Verified SafeView Analysis
The provided code is minimal and acts as a simple wrapper, returning a hardcoded string. It does not process user input in a way that introduces direct injection vulnerabilities, nor does it use 'eval' or access external systems beyond what's implied by the 'fastmcp' library. No hardcoded secrets are present. The primary security considerations would lie within the 'fastmcp' library itself or if the 'get_hotel_reviews' function were expanded to interact with a real backend without proper input sanitization.
Updated: 2025-12-14GitHub→
0
0
Low Cost

mcp-local-server

by fancier21

Sec5

A local Python-based server primarily focused on providing computational services or serving local data/protocols.

Setup Requirements

  • ⚠️Requires a specific Python version as defined in the .python-version file.
  • ⚠️Requires the `uv` tool for efficient dependency management, as indicated by pyproject.toml and uv.lock.
Review RequiredView Analysis
Cannot review code content for 'eval', obfuscation, or specific network vulnerabilities. The score is neutral, reflecting no obvious red flags from file names alone. Running an unknown `run.sh` script always carries inherent risk.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
Xiechengqi icon
Sec3

A service for scraping content from Xiaohongshu (a Chinese social media platform), providing API and MCP (Micro-Agent Protocol) access for searching notes and retrieving detailed note content.

Setup Requirements

  • ⚠️Requires Docker to run the Chromium environment.
  • ⚠️Requires manual login to a Xiaohongshu account via the browser interface after initial setup.
  • ⚠️May require proxy configuration to access Xiaohongshu from certain geographic locations (commented out in `run.sh` by default).
Review RequiredView Analysis
The Docker container is run with the `--privileged` flag, which grants the container almost all capabilities of the host system, significantly increasing the attack surface and potential for container escape. Sensitive browser user data (cookies, login sessions) are persisted on the host system by mounting `user-data` volume, posing a risk if the host is compromised. The project description itself includes a disclaimer that it is for 'learning and technical research' and 'prohibits any commercial use or violation of local laws', suggesting awareness of the sensitive nature of scraping activities. No `eval` or direct command injection vectors are found in the Python source code, but the `--privileged` flag is a critical concern.
Updated: 2025-11-24GitHub→
PreviousPage 398 of 760Next