Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
harshdespande icon

MCP_Server_Project

by harshdespande

Sec8

An interactive command-line interface application for chatting with AI models via the Anthropic API, supporting document retrieval, command-based prompts, and extensible tools.

Setup Requirements

  • ⚠️Requires Anthropic API Key (Paid)
  • ⚠️Requires Python 3.9+
  • ⚠️The project contains TODOs in `mcp_server.py` and `mcp_client.py` which indicate incomplete MCP features.
Verified SafeView Analysis
The application runs locally with subprocess communication via stdio, limiting external attack surfaces. The 'edit_document' tool allows AI to modify in-memory document content, which could lead to data integrity issues if the AI is prompted maliciously, but it does not affect the file system or external resources. No hardcoded secrets or obvious malicious patterns were found. Requires an Anthropic API key, which should be protected.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
Decentralised-Jobs-Protocol icon

djp-jobmcp

by Decentralised-Jobs-Protocol

Sec9

An MCP server that provides access to decentralized job listings from the Nostr network, offering search, detail retrieval, and market statistics tools for LLMs.

Setup Requirements

  • ⚠️Requires a Rust development environment to build and run.
  • ⚠️The server must be run as a standalone binary/process (`./target/release/jobmcp`) before interacting with it via an MCP client (e.g., Goose).
  • ⚠️Binds to `localhost:9993`, so client must have network access to this address (typically run on the same machine).
Verified SafeView Analysis
The server is implemented in Rust, which inherently offers strong memory safety. It binds to `127.0.0.1:9993` by default, limiting external exposure. Nostr relay URLs are public and not treated as secrets. No 'eval' or obvious dynamic code execution from untrusted input is present. Input arguments are typed, reducing injection risks. Performance metrics are logged, but no sensitive data is exposed through them. The `dotenvy` crate is used for environment variables, but `PORT` is the only one identified, which is not sensitive. Overall, the design appears robust against common web vulnerabilities.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
kolikaran1992 icon

teacher_dsa

by kolikaran1992

Sec9

This MCP server acts as an AI assistant to track and guide a user's progress on LeetCode Data Structures & Algorithms problems, logging attempts and patterns without providing full solutions.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️Requires internet access to query the LeetCode GraphQL API.
  • ⚠️Managed by Poetry; users need to install dependencies via `poetry install`.
  • ⚠️Designed to run as an MCP server via stdio, meaning it expects to be driven by an external LLM agent or orchestrator.
Verified SafeView Analysis
The server uses the 'requests' library to interact with the official LeetCode GraphQL API. It constructs URLs and payloads using a provided 'title_slug', rather than allowing arbitrary user-supplied URLs, which significantly mitigates SSRF and injection risks. No 'eval' or obvious obfuscation is present. Configuration uses Dynaconf with environment variable support ('SECRETS_DIRECTORY', 'TEACHER_DSA_'), indicating proper handling for secrets, though no external API keys are explicitly required by the LeetCode API interaction shown. The primary risk would be potential vulnerabilities in the LeetCode GraphQL endpoint itself, or if sensitive data were unexpectedly passed through the title_slug.
Updated: 2025-11-26GitHub→
0
0
Low Cost
dggnzs123 icon
Sec5

This project provides a flashing tool built on the fastmcp framework, likely for embedded devices or hardware.

Setup Requirements

  • ⚠️Requires fastmcp framework
  • ⚠️Likely requires specific hardware and drivers for flashing functionality
Review RequiredView Analysis
No actual source code files were provided for analysis beyond the README. Therefore, a comprehensive security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns could not be performed. Running flashing tools from unknown sources carries inherent risks.
Updated: 2025-11-28GitHub→
0
0
Low Cost
tingz-personal icon

mcp-tool-tingz

by tingz-personal

Sec7

A Python toolkit for building Model Context Protocol (MCP) servers, allowing exposure of custom tools via JSON-RPC 2.0 over WebSocket or stdio.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Relies on standard Python packages (FastAPI, uvicorn, typer, pydantic) which are easily installed but must be present.
Verified SafeView Analysis
The server leverages FastAPI for WebSocket endpoints and uses `asyncio` for stdio transport. JSON-RPC requests are deserialized and dispatched to registered tool handlers. The `import_app` utility can load arbitrary Python modules/files, which, while intended for tool registration, could be a security risk if the `--app` argument is controlled by an untrusted source. Tool handlers receive arguments directly from JSON-RPC requests (`**arguments`), requiring developers to implement robust input validation within their custom tools to prevent injection or unexpected behavior. No obvious hardcoded secrets or malicious patterns were found in the provided code, but the powerful dynamic code loading and direct argument passing necessitate careful usage and deployment practices by the developer.
Updated: 2025-11-26GitHub→
0
0
Low Cost
michaelahern icon

airthings-consumer-mcp

by michaelahern

Sec9

Provides real-time air quality data from Airthings devices to AI assistants via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires an Airthings Developer Account to obtain 'client_id' and 'client_secret' for API access.
  • ⚠️Requires Node.js version 20 or higher.
  • ⚠️An MCP client (e.g., Claude Desktop, Amazon Q, 'mcpb' CLI) is needed to interact with the server.
Verified SafeView Analysis
Secrets (Airthings Client ID and Secret) are properly handled via environment variables and are not hardcoded, adhering to secure coding practices. There is no usage of 'eval' or other dangerous dynamic code execution patterns. The server's core function is to act as a proxy to a third-party Airthings API via the 'airthings-consumer-api' library; therefore, external risks would primarily depend on the security and trustworthiness of that external API and library.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
Microck icon
Sec5

Automate Discord user actions and interactions through an AI agent, leveraging a wide range of tools for comprehensive user autonomy.

Setup Requirements

  • ⚠️Using a Discord selfbot violates Discord's Terms of Service and can lead to permanent account termination.
  • ⚠️Initial setup requires extracting a Discord user token either manually or via an automated browser process, which demands user interaction and trust in the setup script.
  • ⚠️Automated captcha solving (for joining servers) is optional but requires an API key for a paid third-party service (e.g., CapSolver, CapMonster, NopeCHA).
Review RequiredView Analysis
The primary security concern is the inherent nature of a 'selfbot', which violates Discord's Terms of Service and carries a significant risk of account termination. The setup process involves handling a Discord user token, which grants full access to the account, requiring careful management by the user. Optional integration with third-party captcha-solving services (CapSolver, CapMonster, NopeCHA) means sending captcha-related data to external APIs, which is a privacy consideration. The `download_attachment` tool allows downloading files to the local filesystem, which could be a vector for malicious files if the AI is instructed to download untrusted content to sensitive locations. The code base itself uses Zod for input validation and has a `DANGER_MODE` setting for sensitive relationship actions, indicating an attempt at internal safety, but these do not mitigate the fundamental risks of selfbotting or user-directed malicious actions.
Updated: 2026-01-17GitHub→
0
0
Low Cost
Yutaka-Murata icon
Sec8

Real-time monitoring and analysis of Claude Code token usage and cost for local development sessions.

Setup Requirements

  • ⚠️This project is explicitly noted as archived and deprecated in favor of an MCP server version. It has known issues, specifically incorrect `cache_read` pricing ($1.50/MTok vs correct $0.50/MTok) which is corrected in the MCP version.
  • ⚠️Requires Python 3 to be installed and available in the system's PATH.
  • ⚠️Full functionality, including desktop notifications for alerts, requires macOS due to the use of `osascript`.
  • ⚠️Assumes a specific local directory structure for Claude Code logs and transcripts (`~/.claude/token_logs` and `~/.claude/projects`).
Verified SafeView Analysis
The scripts utilize `python3 -c "..."` to embed shell variables (e.g., log entries, pricing rates) into Python strings for processing JSON. While this pattern carries an inherent, albeit low, risk of command injection if the source data (Claude Code transcript files) were malicious or improperly formed, it's generally considered safe within a controlled local environment where Claude Code itself is assumed to be trusted. No direct `eval` commands are used in Bash. No hardcoded credentials or external network risks are identified. macOS notifications via `osascript` use extracted log data, posing a minimal risk if log content were specifically crafted to exploit shell commands.
Updated: 2026-01-17GitHub→
0
0
Low Cost
theshivamlko icon

flutter-ai-labs

by theshivamlko

Sec3

A Dart-based server implementing the Model Context Protocol (MCP) to enable AI agents to perform email sending operations.

Setup Requirements

  • ⚠️Requires a Dart runtime environment to be installed.
  • ⚠️Requires external SMTP service credentials (username, password, server address, port) which are hardcoded in the example and must be replaced with actual secure credentials.
  • ⚠️Initial setup involves running `dart pub get` to install dependencies within the `email_dart_mcp_server_example` directory.
  • ⚠️Integration with specific IDEs (like Cursor) or the MCP Inspector requires manual configuration of the server's exact file path on the user's system.
Review RequiredView Analysis
The example code explicitly hardcodes SMTP server credentials (username and password) directly into the source file for email sending. While the README advises to replace these values, the presence of hardcoded credentials in the example code itself is a significant security risk if deployed or committed as-is, potentially leading to accidental exposure of sensitive information.
Updated: 2025-12-01GitHub→
0
0
Medium Cost
caioldcarvalho icon

gtm-mcp

by caioldcarvalho

Sec10

Automates Google Tag Manager operations and deployments using natural language commands via Claude AI.

Setup Requirements

  • ⚠️Requires Claude AI access/API Key (Paid)
  • ⚠️Requires Google Tag Manager API access and proper authentication/permissions
  • ⚠️Installation and usage instructions are currently missing from the README
Verified SafeView Analysis
The provided 'SOURCE CODE' is only the `README.md` file. Based solely on the contents of the README, no security vulnerabilities, malicious patterns, or dangerous functions (like `eval`) can be identified. A comprehensive security audit would require access to the actual application source code files.
Updated: 2026-01-16GitHub→
0
0
Medium Cost

SpreadJS_mcp

by CharlieNey

Sec3

A web application with an AI chat interface alongside a spreadsheet, allowing users to interact with the spreadsheet through natural language using the SpreadJS MCP server to execute operations.

Setup Requirements

  • ⚠️Requires ANTHROPIC_API_KEY (a paid service) for AI chat functionality.
  • ⚠️Requires a Supabase project (SUPABASE_URL, SUPABASE_ANON_KEY) for file storage and management.
  • ⚠️SpreadJS license (VITE_SPREADJS_LICENSE or SPREADJS_LICENSE_KEY) is optional but needed for the full Excel-like UI and advanced features like Excel I/O.
  • ⚠️The `SPREADJS_MCP_PATH` environment variable needs to point correctly to the built MCP server, typically `../../dist/index.js` when run from the `packages/backend` directory.
Review RequiredView Analysis
The `src/tools/io.ts` module allows the AI (driven by user prompts) to read from and write to the local filesystem via tools like `import_json`, `export_json`, `import_csv`, and `export_csv` using a user-provided `filePath`. This poses a critical security risk, as a malicious prompt could instruct the AI to read sensitive server files (e.g., `/etc/passwd`) or write arbitrary files, potentially leading to remote code execution or data exfiltration. Additionally, the backend spawns the MCP server as a child process; while the default path is relative, if `SPREADJS_MCP_PATH` were to be controlled by an attacker, it could lead to arbitrary code execution. The application also handles arbitrary file uploads, which are then analyzed by the AI, increasing the potential attack surface if combined with the filesystem manipulation tools.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
major icon

pcp-mcp

by major

Sec9

Provides an MCP server to query real-time system performance metrics from Performance Co-Pilot (PCP), including CPU, memory, disk I/O, network, and processes, enabling LLM-driven system analysis and troubleshooting.

Setup Requirements

  • ⚠️Requires Performance Co-Pilot (pmcd and pmproxy daemons) to be installed and actively running on the target system(s).
  • ⚠️Requires Python 3.10 or newer.
  • ⚠️For monitoring remote systems, the PCP_TARGET_HOST environment variable must be set. If tools are used to query arbitrary hosts via their 'host' parameter, PCP_ALLOWED_HOSTS must be explicitly configured (e.g., to ['*'] or a specific list of hostspecs) for such requests to be permitted.
Verified SafeView Analysis
The server correctly uses environment variables for sensitive credentials (PCP_USERNAME, PCP_PASSWORD) and enables TLS verification by default (PCP_TLS_VERIFY). It implements a robust allowlist mechanism (PCP_ALLOWED_HOSTS) to restrict which remote hosts can be queried via the 'host' parameter in tools, mitigating Server-Side Request Forgery (SSRF) risks. No 'eval', 'exec', or other dynamic code execution patterns were found. The implementation demonstrates good security practices for a network-facing service.
Updated: 2026-01-19GitHub→
PreviousPage 400 of 760Next