Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
gabriel-berzescu icon

mcp-servers

by gabriel-berzescu

Sec4

Provides an MCP server to execute Windows terminal commands, primarily for use by AI agents or other automated systems.

Setup Requirements

  • ⚠️Requires Python 3.10+ and Windows 11 operating system.
  • ⚠️Requires installation of `mcp-python-sdk` dependencies via `requirements.txt`.
  • ⚠️Careful virtual environment setup is needed, ensuring the full path to the virtual environment's Python executable is used for server configuration, not just `python`.
Review RequiredView Analysis
The server's core functionality is to execute arbitrary system commands using `asyncio.create_subprocess_shell` with `shell=True`. This design is inherently high-risk as it allows for full shell access with the permissions of the user running the server. While the README explicitly warns about this and recommends sandboxed environments, the server itself performs no input sanitization or command validation. This makes it a critical security vulnerability if not deployed in a strictly controlled, sandboxed, and trusted environment. There are no other apparent vulnerabilities like hardcoded secrets or direct network exposure beyond stdio.
Updated: 2025-11-28GitHub→
0
0
Low Cost
myvfc icon
Sec8

A unified API server for multi-source college sports data (ESPN, NCAA) with JSON-RPC 2.0 compliance, designed to be used as a tool by AI bots.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️A `MCP_API_KEY` environment variable is required for server authentication; a default example key is provided in the source code but should be replaced for production environments.
  • ⚠️The provided `server.js` explicitly states that CollegeFootballData.com (CFBD) integrations have been removed, meaning the 6 CFBD-dependent tools (e.g., `get_stats`, `get_recruiting`) described in the `README` will not be functional, even if a `CFBD_API_KEY` is provided.
Verified SafeView Analysis
The server uses environment variables for API keys (`MCP_API_KEY`, `CFBD_API_KEY`), and implements Bearer token authentication for its main `/mcp` endpoint, which are good practices. External API calls (to ESPN, NCAA) are handled with basic error checks. A default `MCP_API_KEY` is present in `server.js`, which should be replaced in a production environment to prevent potential unauthorized access if not properly secured via environment variables. No 'eval', obfuscation, or obvious malicious patterns were found.
Updated: 2025-11-20GitHub→
0
0
Medium Cost
titan77champion icon

webustler

by titan77champion

Sec2

Webustler is designed for extracting clean, markdown text from any URL, including Cloudflare-protected sites, primarily for local desktop use.

Setup Requirements

  • ⚠️Requires a separate, unspecified local service to be running at `http://localhost:8191` for its fallback scraping mechanism, crucial for Cloudflare bypass. Setup instructions for this dependency are missing.
  • ⚠️Relies on the external `r.jina.ai` service for primary scraping, which introduces a dependency on a third-party's availability, reliability, and potential rate limits or costs not detailed in the provided information.
Review RequiredView Analysis
The server's fallback mechanism (`_fetch_fallback`) posts user-provided URLs to `http://localhost:8191/v1` for scraping. If this MCP server is deployed publicly, this constitutes a severe Server-Side Request Forgery (SSRF) vulnerability, allowing attackers to make the server request arbitrary URLs on its local network or external targets. Even as a local desktop application, it poses a risk by allowing malicious URLs to potentially interact with other local services on the user's machine. The primary scraping method also forwards user URLs to an external service (`r.jina.ai`), which could be a risk if `jina.ai`'s service is vulnerable to URL manipulation.
Updated: 2026-01-19GitHub→
0
0
Low Cost
Sec7

This package serves as a minimalistic Python server example, demonstrating basic package structure and server functionality for developers.

Setup Requirements

  • ⚠️Python environment required
  • ⚠️Package dependencies must be installed (e.g., via pip install . or uv sync)
Verified SafeView Analysis
Without access to the source code, a comprehensive security audit is impossible. As a 'sample server,' it inherently involves network exposure. The presence of 'eval' or obfuscation cannot be confirmed. Potential risks depend entirely on the server's implementation details, which are unknown.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
engasix icon
Sec8

Real-time terminal dashboard for monitoring FTE Shop AI Employee operations via Obsidian vault file watching.

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Requires an Obsidian-like vault directory (AI Employee Vault) to be configured via the VAULT_PATH environment variable.
  • ⚠️Relies on an external 'Claude Code' (claude binary) being installed and accessible in the system's PATH, as the orchestrator executes it via subprocess. This is a critical external dependency.
  • ⚠️The Gmail Watcher requires Google Cloud Project setup for Gmail API access and a `credentials.json` file for authentication (OAuth2 flow to generate `token.json`).
  • ⚠️Requires a terminal with UTF-8 and ANSI color support for optimal display.
Verified SafeView Analysis
The project emphasizes local-first operation and includes robust path validation (`_is_path_in_vault`) to prevent directory traversal attacks, ensuring all file operations remain within the configured vault directory. Content displayed in the terminal is sanitized by Textual's built-in ANSI escaping. The `orchestrator.py` component invokes an external `claude` binary with `--dangerously-skip-permissions`, which shifts trust to the security and hardening of the `claude` binary itself; potential vulnerabilities in this external dependency could pose a risk, but the orchestrator's prompt construction for `claude` appears to avoid direct command injection from arbitrary user input. No obvious hardcoded sensitive secrets or unhandled network risks (beyond legitimate Gmail API interaction) were identified within the provided source.
Updated: 2026-01-19GitHub→
0
0
Low Cost

mela-cp

by sroberts

Sec1

This is likely a server or tool related to the Minecraft Client Protocol (MCP), potentially for managing a Minecraft server or developing Minecraft-related applications.

Review RequiredView Analysis
Security audit could not be performed as no code files or comprehensive README were available for analysis. The README was reported as '404: Not Found' and 'Truncated'. Therefore, potential risks like 'eval', obfuscation, or network vulnerabilities cannot be assessed.
Updated: 2025-11-18GitHub→
0
0
Low Cost
GitHub-Insight-ANZ-Lab icon

copilot-lab-mcp-server

by GitHub-Insight-ANZ-Lab

Sec9

This MCP server demonstrates the creation of custom tools and resources to integrate AI clients (like Copilot) with external APIs, specifically providing a friendly greeting and fetching data from NASA's Astronomy Picture of the Day (APOD) API.

Setup Requirements

  • ⚠️Requires a Copilot License to be enabled in your IDE.
  • ⚠️Requires Node.js to be installed on your system.
  • ⚠️A NASA API Key is highly recommended for higher rate limits (a free key is available from api.nasa.gov).
  • ⚠️The project must be built (`npm run build`) before the server can be run.
Verified SafeView Analysis
The server securely retrieves the NASA API key from environment variables, with a fallback to a demo key. The documentation explicitly warns against committing API keys and recommends using environment variables, adding `.env` to `.gitignore`, and regular key rotation. Network requests are made to a known public API (api.nasa.gov). No 'eval' or other directly malicious patterns were found. The server implementation includes basic error handling for API calls. A minor risk is the 'DEMO_KEY' fallback, but it's clearly for a tutorial context and limited.
Updated: 2025-12-01GitHub→
0
0
High Cost
Sec7

Provides a FastMCP server to enable AI agents or language models to automate web browsers for tasks like navigation, interaction, and data extraction.

Setup Requirements

  • ⚠️Requires Chrome, Firefox, or Edge browser to be installed on the machine running the server.
  • ⚠️Requires specific `mcp-json` ecosystem setup, including a `mcp-servers.json` configuration entry with the correct script path.
Verified SafeView Analysis
The `execute_javascript` function allows arbitrary code execution within the browser's context, which carries significant security risks if the input script is not sanitized or comes from an untrusted source. Browser automation itself can expose the system to risks from malicious websites. However, the server itself does not appear to use unsafe practices like `eval` internally, relying on Selenium's robust capabilities. Running locally via stdio transport (default configuration) mitigates external network attack vectors.
Updated: 2025-11-17GitHub→
0
0
High Cost
mschristiansen icon

bc-extra-api

by mschristiansen

Sec7

Provides a Business Central API extension for warehouse and inventory queries, designed to integrate with MCP servers and AI assistants for managing wood materials inventory, reservations, and calculations.

Setup Requirements

  • ⚠️Requires a Microsoft Dynamics 365 Business Central environment (SaaS or local Docker-based sandbox).
  • ⚠️Requires the 'DHS - Basis' Business Central extension (v1.0.0.17) by 'Aktieselskabet balance.as' as a dependency.
  • ⚠️Assumes an MCP (Microsoft Cloud Platform) server is configured to integrate with Business Central APIs to expose the endpoints.
Verified SafeView Analysis
The `app.json` manifest for the Business Central extension has `allowDebugging: true`, `allowDownloadingSource: true`, and `includeSourceInSymbolFile: true`. While standard for development, these settings can expose source code and debugging capabilities in production environments if not secured through tenant-level access controls.
Updated: 2026-01-05GitHub→
0
0
Low Cost
DharaniKumarLearning icon

test-remote-mcp-server

by DharaniKumarLearning

Sec9

Provides a simple calculator server with basic arithmetic (addition) and random number generation capabilities via MCP tools.

Setup Requirements

  • ⚠️Requires Python 3.11 or higher.
  • ⚠️Requires the 'fastmcp' Python package to be installed.
Verified SafeView Analysis
The server's code is simple and does not use dangerous functions like 'eval'. It binds to '0.0.0.0' which makes it accessible from any network interface, standard for server deployments, but implies external access if deployed without network restrictions. No hardcoded secrets or malicious patterns were found.
Updated: 2026-01-17GitHub→
0
0
Low Cost
JPishikawa icon

mcp-servers

by JPishikawa

Sec6

These servers provide a 'Model Context Protocol' (MCP) interface for various external services, including Slack, Kubernetes, GitHub, and Weather APIs, primarily to serve as context providers for AI Agents.

Setup Requirements

  • ⚠️Requires a Kubernetes cluster for deployment.
  • ⚠️External API keys are needed for Slack (SLACK_MCP_XOXP_TOKEN) and Weather (WEATHER_API_KEY for OpenWeatherMap or similar).
  • ⚠️Specific Kubernetes RBAC permissions (ClusterRole and ClusterRoleBinding) are required for the Kubernetes MCP server to operate.
Review RequiredView Analysis
The 'weather-mcp.yaml' contains a hardcoded 'WEATHER_API_KEY' set to 'demo-key'. While labeled as a demo key, hardcoding API keys is a significant security risk and a poor practice, potentially leading to exposure of real keys in production. The 'kubernetes-mcp.yaml' grants broad read-only access (get, list, watch) to numerous Kubernetes resources (pods, events, services, secrets, deployments, etc.) via a ClusterRole. While intended for observability, this constitutes a wide attack surface if the server itself is compromised.
Updated: 2025-11-27GitHub→
0
0
Medium Cost
klkhlt icon

tekmetric-mcp

by klkhlt

Sec9

The Tekmetric MCP Server allows users to query their Tekmetric shop management data (customers, vehicles, repair orders, appointments, etc.) using natural language through an AI assistant.

Setup Requirements

  • ⚠️Requires Tekmetric API credentials (Client ID and Client Secret) which must be requested from Tekmetric and can take 2-3 weeks for approval.
  • ⚠️For building from source, Go 1.23+ is required.
  • ⚠️API results are typically limited to 25-100 records per query, requiring careful filtering for broad requests.
Verified SafeView Analysis
The server is explicitly designed for read-only access to Tekmetric data, minimizing accidental modification risks. It relies on OAuth 2.0 for authentication with client ID and secret, which are expected to be provided securely via environment variables or configuration files (no hardcoded production secrets found). API interactions enforce HTTPS for production environments. Input parameters are validated, and rate limiting with exponential backoff is implemented for robust API communication. No 'eval' or similar dangerous dynamic code execution patterns were identified.
Updated: 2026-01-19GitHub→
PreviousPage 414 of 760Next