Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
arclabs-studio icon

ARCLinearGitHub-MCP

by arclabs-studio

Sec8

Automating development workflows by integrating Linear issue tracking and GitHub repository management, enforcing ARC Labs Studio naming conventions.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Requires Linear API Key (may be a paid service)
  • ⚠️Requires GitHub Personal Access Token
  • ⚠️Requires `uv` or `pip` for dependency management
  • ⚠️Requires specific environment variables configured in a `.env` file.
Verified SafeView Analysis
The server uses environment variables for API keys (LINEAR_API_KEY, GITHUB_TOKEN) and Pydantic for configuration and data models, which are good practices. There is no usage of 'eval' or direct arbitrary shell command execution. The `GitHubClientError` can include `response.text` in error messages, which could potentially expose sensitive information from API responses if not handled carefully in production logging.
Updated: 2026-01-19GitHub→
0
0
Low Cost
mbeps icon
Sec8

Automate desktop tasks on GNOME & Fedora using AI clients by interacting with system settings and applications.

Setup Requirements

  • ⚠️Requires Python 3.12 or above.
  • ⚠️Requires UV package manager.
  • ⚠️Requires a Linux system with the GNOME desktop environment and its associated command-line utilities (e.g., gsettings, nmcli, pactl, playerctl, gtk-launch, gio, notify-send, wl-copy, dbus-send).
Verified SafeView Analysis
The server utilizes `subprocess.run` with lists of arguments to execute system commands, significantly reducing command injection risks compared to using `shell=True`. `ast.literal_eval` is used for parsing gsettings output safely. No hardcoded secrets were identified. Communication over stdio limits network exposure. Security primarily relies on the integrity of the invoked GNOME/Linux utilities and the permissions of the user running the server, as it can perform actions like file deletion or system shutdown.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
gufao icon
Sec9

Manages email accounts from multiple providers (Gmail, Outlook, IMAP) with a unified inbox and programmatic access via MCP tools.

Setup Requirements

  • ⚠️Requires manual setup in Google Cloud Console (for Gmail) or Azure Portal (for Outlook) to obtain OAuth credentials.
  • ⚠️Secrets (like IMAP password, Outlook client secret) must be provided via environment variables, not hardcoded in configuration files.
  • ⚠️Initial OAuth authentication for Gmail/Outlook requires a temporary local web server running on http://localhost:3000.
Verified SafeView Analysis
The server explicitly rejects plaintext secrets (e.g., IMAP passwords, Outlook client secrets) in the 'accounts.json' configuration file, enforcing the use of environment variables. It validates that these environment variables are set and not empty upon startup. When deployed with Docker, it recommends mounting the 'credentials' directory as read-only, further protecting sensitive files. OAuth flows for Gmail and Outlook follow standard practices for token management and refresh. The MCP communication itself uses stdio, reducing network attack surface for the core protocol.
Updated: 2025-12-31GitHub→
0
0
Low Cost
sharjeeltanoli icon

mcp-servers-gemini

by sharjeeltanoli

Sec6

Configures a collection of modular tools for an AI agent to interact with development-related services and systems.

Setup Requirements

  • ⚠️Requires Node.js and npm for `npx` commands.
  • ⚠️GITHUB_PERSONAL_ACCESS_TOKEN environment variable required for GitHub server.
  • ⚠️Absolute paths for `YOUR_DOCUMENTS_PATH` and `YOUR_DESKTOP_PATH` must be configured for the filesystem server.
  • ⚠️A Context7 API Key must be provided as a command-line argument for the context7 server.
  • ⚠️Vercel authentication is required for the Vercel server.
  • ⚠️The `tailwindcss-server` executable must be in the system's PATH or explicitly defined.
Verified SafeView Analysis
The 'filesystem' server grants broad read/write access to specified local directories, posing a significant risk if the agent is compromised or misused. Relying on `npx -y` introduces a minor supply chain risk from npm packages. Multiple servers require sensitive credentials (GitHub PAT, Context7 API Key, Vercel authentication) which must be securely managed by the user to prevent exposure.
Updated: 2026-01-19GitHub→
0
0
Low Cost
Hydraallen icon

Weather_MCP_Server

by Hydraallen

Sec9

Provides current weather, forecast, and severe weather alerts for supported cities to Claude Desktop via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Docker is required to build and run the server.
  • ⚠️Manual configuration of Claude Desktop's `claude_desktop_config.json` file is necessary.
  • ⚠️Users must verify the Docker image name matches what `docker images` reports after building.
Verified SafeView Analysis
The server uses `httpx` to make requests to a public weather API (`api.open-meteo.com`). There are no apparent hardcoded secrets or 'eval' statements. Input validation for city names and forecast days is present. The primary security consideration is reliance on an external API, which is an inherent risk in most API integrations.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
raisedadead icon

outline-mcp-server

by raisedadead

Sec9

Integrates Outline wiki with LLM applications via Model Context Protocol to enable searching, reading, creating, and managing wiki documents.

Setup Requirements

  • ⚠️Requires an Outline API Key (e.g., `ol_api_xxx`) obtained from your Outline instance settings.
  • ⚠️Requires the base URL of your Outline instance (e.g., `https://your-instance.getoutline.com`).
  • ⚠️Requires Node.js version 22.14 or higher and the pnpm package manager for development and setup.
Verified SafeView Analysis
The server securely handles API keys through environment variables or a configuration file, avoiding hardcoded secrets. Input validation for tools and resources is implemented using Zod, mitigating common injection vulnerabilities. Network requests to the Outline API include retry mechanisms for robustness. No 'eval' or direct arbitrary command execution from user input was identified in the provided source code.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
Amier-ge icon
Sec8

Parses PowerShell ConsoleHost_history.txt files from disk images for forensic analysis.

Setup Requirements

  • ⚠️The `README.md` states a critical dependency on a sibling `ConsoleHost_Parser` library folder (two folders must be in the same parent directory). While the provided `mcp_server.py` code appears self-contained and doesn't explicitly import from this sibling, the README's warning suggests it's essential for the full functionality.
  • ⚠️Requires `pytsk3` (Python bindings for The Sleuth Kit) and `pyewf` (Python bindings for Expert Witness Format) which might require system-level dependencies (e.g., `libtsk` and `libewf`) for successful installation.
Verified SafeView Analysis
The code uses `pytsk3` and `pyewf` for disk image parsing, which are established forensic libraries. No direct 'eval' or other obvious malicious patterns, hardcoded secrets, or command injection vulnerabilities are present in the provided source code. Input path handling uses `os.path.abspath` and passes paths to the trusted forensic libraries. The primary security considerations would be potential vulnerabilities within the underlying `pytsk3` or `pyewf` libraries themselves, rather than this application's custom logic.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
pharmbio icon

specs-mcp-server

by pharmbio

Sec9

The server provides a suite of tools for similarity search and analytics on a compound dataset, focusing on compound-to-compound and MOA-to-MOA relationships, gene co-occurrence, and disease rollups for drug discovery and bioinformatics.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️A `data/compound_aggregate_with_annotations.csv` file must be present at the specified path for the server to function.
  • ⚠️Docker is recommended for local execution as per the README, streamlining dependency management.
Verified SafeView Analysis
The code appears to be well-structured and minimizes obvious security risks. It primarily uses pandas for data manipulation and scikit-learn for similarity calculations. User inputs are generally sanitized (e.g., lowercased, stripped, regex=False) before being used in DataFrame queries or fuzzy matching. There are no apparent uses of `eval`, `exec`, or direct shell command injections. The dataset path is hardcoded, preventing arbitrary file access. Environment variables are used for server configuration (host, port, transport), which is a good practice. The main risk, if any, would stem from vulnerabilities in the underlying `FastMCP`, `pandas`, or `numpy` libraries, or if the `compound_aggregate_with_annotations.csv` file itself is untrusted and can be modified by an attacker in a deployment scenario, though the application itself does not facilitate arbitrary modifications to this file.
Updated: 2025-12-16GitHub→
0
0
Medium Cost
tk-logl icon
Sec9

Provides a unified, multi-tenant gateway for Model Context Protocol (MCP) servers, enabling orchestration and access control for various integrated services.

Setup Requirements

  • ⚠️Requires a full stack setup including Node.js (>=18), PostgreSQL (>=14), and Redis (>=6). Deployment scripts are provided for Oracle Cloud Ubuntu 24.04 ARM.
  • ⚠️Extensive manual configuration is required for external service integrations (e.g., Google Calendar, Slack, Zoho, Obsidian, n8n) including OAuth flows, API key generation, and sometimes installing specific plugins (e.g., Obsidian Local REST API).
  • ⚠️Integrating with KIPRIS (Korean Patent Office) via 'kipris-enhanced' MCP requires applying for a KIPRIS Plus API Key from data.go.kr, which can take 1-2 days for approval.
Verified SafeView Analysis
The project implements robust security features including JWT and API Key authentication, AES-256-GCM encryption for API credentials at rest, Redis-backed rate limiting, Zod for input validation, and comprehensive RBAC. Standard Express security middlewares (Helmet, CORS) are used. Audit logging is in place. The main potential risk lies in not replacing default/example secret values (e.g., JWT_SECRET, ENCRYPTION_KEY, database/Redis passwords) with strong, unique values in production environments, as explicitly warned in documentation and setup scripts. No 'eval' or direct obfuscation found.
Updated: 2025-11-24GitHub→
0
0
Low Cost
daner-itz icon
Sec3

A production-ready automation platform integrating n8n with AI services (Ollama, Qdrant), databases (PostgreSQL, RedisStack), and Model Context Protocol (MCP) servers for enhanced Claude Code interaction.

Setup Requirements

  • ⚠️Docker and Docker Compose are required.
  • ⚠️Manual import and activation of n8n workflows and creation of n8n credentials for MCP servers are required after `docker-compose up`.
  • ⚠️The hardcoded bearer tokens provided in the setup instructions are a severe security risk and *must* be replaced with unique, user-generated API keys.
Review RequiredView Analysis
The setup script `setup-mcp-workflows.sh` and the guide `MCP_SETUP_GUIDE.md` explicitly embed hardcoded bearer tokens for the MCP credentials. If users follow these instructions, their n8n instance will be configured with globally known, shared authentication tokens for its MCP webhooks. This is a critical vulnerability, allowing anyone with these tokens to interact with the MCP server endpoints on any such instance, bypassing proper authentication. Users *must* generate and use their own unique N8N API keys/bearer tokens for these credentials instead of the ones provided in the guide. Additionally, multiple services (n8n, pgadmin, ollama, openwebui, searxng, postgres, redis, qdrant) are exposed on host ports, requiring careful network security considerations if exposed beyond localhost. The n8n code nodes can execute arbitrary JavaScript, posing a risk if not carefully managed when extending functionality, especially in response to AI agent requests.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
sd2k icon
Sec8

Automates token usage analysis for Model Context Protocol (MCP) servers within GitHub CI/CD workflows, providing cost and complexity insights.

Setup Requirements

  • ⚠️Requires an Anthropic API Key (paid service) if `anthropic` token counting provider is desired for accurate token counts.
  • ⚠️Requires `GITHUB_TOKEN` with `pull-requests: write` permission for posting PR comments.
  • ⚠️The MCP server specified by the `command` input must be runnable and correctly built within the GitHub Actions runner environment.
Verified SafeView Analysis
The `install.sh` script uses `curl ... | sh` to install the underlying `mcp-tokens` CLI, which can be a security risk as it executes a script directly without prior review. This is mitigated by pinning versions and implicitly trusting the `sd2k/mcp-tokens` repository. The action's core functionality involves executing a user-provided `command` within the CI environment, which is an expected feature but means the user is responsible for the security of the command they provide. No hardcoded secrets or direct `eval` calls were found within the action's scripts. GitHub API calls for comments are securely authenticated via `GITHUB_TOKEN`.
Updated: 2026-01-06GitHub→
0
0
Medium Cost
MaxOstrowski icon

clockodo-mcp

by MaxOstrowski

Sec9

This server integrates with the Clockodo time tracking API to manage and automate tasks related to time entries, users, projects, and other workforce management data.

Setup Requirements

  • ⚠️Requires `CLOCKODO_API_USER`, `CLOCKODO_API_KEY`, and `CLOCKODO_EXTERNAL_APP` environment variables to be set (typically via a .env file).
  • ⚠️Requires Python 3.13 or newer.
Verified SafeView Analysis
The server uses environment variables (CLOCKODO_API_USER, CLOCKODO_API_KEY, CLOCKODO_EXTERNAL_APP) for API credentials, which is a good practice to avoid hardcoding sensitive information. It leverages the `requests` library to interact with a specific, known external API (`https://my.clockodo.com/api`). No 'eval', code obfuscation, or other immediately obvious malicious patterns were found in the provided source code snippets. All network communication appears to be directed to the Clockodo API.
Updated: 2026-01-12GitHub→
PreviousPage 404 of 760Next