Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
andersoncarmona913 icon

Agentic-Kubernetes-CLI

by andersoncarmona913

Sec3

Translates natural language prompts into executable kubectl commands for Kubernetes cluster management.

Setup Requirements

  • ⚠️Requires AWS Account and configured AWS credentials with Bedrock access.
  • ⚠️Kubectl command-line tool must be installed and configured to access a Kubernetes cluster.
  • ⚠️Python 3.x with 'strands' and 'mcp' libraries installed.
Review RequiredView Analysis
The MCP server directly executes 'kubectl' commands generated by the AI agent based on user input. While 'shlex.split' is used to mitigate basic shell injection, the 'validate_kubectl_command' function in 'k8s_cli_mcp_server.py' explicitly allows dangerous 'delete', 'drain', and 'cordon' operations to 'pass' without actual validation or user confirmation by the tool itself. The system relies on the LLM's prompt to 'confirm the command with the user first' for destructive operations, which is not a robust security mechanism. A confused or malicious LLM could issue highly destructive commands without sufficient guardrails, posing a significant risk to the Kubernetes cluster.
Updated: 2026-01-19GitHub→
0
0
Low Cost
SeanAtsatt icon

mcpManager

by SeanAtsatt

Sec6

Manages Model Context Protocol (MCP) servers dynamically and per-project within the Claude Code environment.

Setup Requirements

  • ⚠️Requires Claude Code CLI to be installed and available in PATH.
  • ⚠️Requires Docker Desktop to be running for Docker-based MCPs.
  • ⚠️Requires Python 3.x for script execution and JSON/YAML parsing.
  • ⚠️Users must manually `source ~/.config/claude-mcp/mcp-helpers.sh` in their shell configuration (`.zshrc`, `.bashrc`) to enable shell helpers.
Review RequiredView Analysis
The system's core function involves executing commands and arguments defined in configuration files (`.mcp.json`, `.docker-mcp.yaml`, `registry.json`) via external tools like `claude mcp` and `docker mcp`. If these configuration files are tampered with or if malicious MCP definitions (e.g., from an untrusted catalog source) are introduced into the `command` or `args` fields, arbitrary commands could be executed. There is no direct use of 'eval' but shell commands are constructed and executed, which poses an inherent risk if the input source is not fully trusted. The `docker-compose.yml` contains a hardcoded `POSTGRES_PASSWORD` for local development, which is not a risk for the manager itself but could be for projects using that specific configuration.
Updated: 2026-01-03GitHub→
0
0
Medium Cost
Maheshnath09 icon
Sec9

Serves as an AI-powered automation hub to manage tasks, calendars, spreadsheets, and emails across Notion and Google Workspace.

Setup Requirements

  • ⚠️Requires a Google Cloud Project with Sheets, Calendar, and Gmail APIs enabled (manual setup is needed).
  • ⚠️Requires a Notion Integration token and a Notion Database ID (manual setup and sharing is needed).
  • ⚠️Google OAuth requires an initial interactive browser login to generate `token.json`; this file must be pre-generated for non-interactive Docker runs.
Verified SafeView Analysis
The server uses environment variables (NOTION_API_KEY, NOTION_DATABASE_ID) for Notion credentials and Google's OAuth flow with `credentials.json` and `token.json` for Google services, which is a standard and secure practice. All external API calls are made via `httpx` with proper error handling. No 'eval' or obvious obfuscation was found. Sensitive files (`credentials.json`, `token.json`, `.env`) are expected to be managed securely by the user.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
pengfeiJoker icon

mcp-server-chart-bach

by pengfeiJoker

Sec8

A Model Context Protocol server for generating charts and performing data analysis using AntV visualization tools.

Setup Requirements

  • ⚠️Requires access to an external AntV visualization service (default provided, but private deployment requires self-hosting AntV GPT-Vis-SSR, which does not support geographic charts).
  • ⚠️Geographic map generation is limited to data within China and relies on AMap service.
  • ⚠️Recording chart generation requires a service ID obtained via a specific Alipay mini-program, adding a non-standard setup step for full functionality.
Verified SafeView Analysis
The server uses `axios` to make outbound requests to `VIS_REQUEST_SERVER` (defaulting to AntV's service). While the default is trusted, if `VIS_REQUEST_SERVER` is configured via an environment variable to point to an untrusted endpoint, data could be sent to a malicious server. Input validation is performed using Zod, which helps mitigate injection risks for chart arguments. The streamable HTTP transport uses a wide-open CORS policy (`origin: '*'`), common for public APIs, but should be considered if deploying in a sensitive internal network without proper access control.
Updated: 2025-11-20GitHub→
0
0
Low Cost
sasanka0212 icon
Sec8

A Micro-Capability Platform (MCP) server for tracking personal expenses, allowing users to add, list, and summarize expenditures through a defined API.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Expense data is stored in a temporary directory (`tempfile.gettempdir()`) and will be lost on system reboot or cleanup, making it unsuitable for persistent data storage without modification.
  • ⚠️The `pyproject.toml` lists 'aisqlite>=1.1.0' which appears to be a typo and might cause dependency resolution issues or install an unintended package, as 'aiosqlite' is also correctly listed.
Verified SafeView Analysis
The server correctly uses parameterized SQL queries to prevent SQL injection. No 'eval' statements or obvious hardcoded secrets were found. It runs on '0.0.0.0', making it externally accessible; if deployed publicly, proper network security (e.g., firewall, reverse proxy, access control) is recommended. The database path uses a temporary directory, which is safe from overwriting critical system files but means data is ephemeral.
Updated: 2025-12-01GitHub→
0
0
High Cost
Cuse-AI icon
Sec8

An AI-powered music recommendation system that creates emotionally intelligent playlists by mapping songs to a 2D emotional manifold, using human-sourced comments for AI training and analysis.

Setup Requirements

  • ⚠️Requires Anthropic API Key (Paid) for Claude API, which is explicitly noted as 'EXPENSIVE - be careful!'.
  • ⚠️Requires Spotify API Client ID and Secret (free tier available, but usage limits apply).
  • ⚠️Requires Reddit API credentials (Client ID, Client Secret, User Agent).
  • ⚠️Requires Google API Key for YouTube (free tier available, but usage limits apply).
  • ⚠️Local development on Windows may encounter 'node_modules' permissions issues, as noted in internal documentation.
Verified SafeView Analysis
API keys for Spotify, Anthropic, Reddit, and Google (YouTube) are managed via environment variables, which is good practice. Input validation is performed using 'zod' for API endpoints to mitigate common injection risks. Data scraping from external sources (Reddit, YouTube) inherently carries risks related to content quality, but a 'UnifiedQualityFilter' is in place. No 'eval' or obvious malicious patterns found.
Updated: 2026-01-06GitHub→
0
0
Low Cost
sd2k icon

mcp-tokens

by sd2k

Sec9

Analyzes the token usage of Model Context Protocol (MCP) servers to help authors understand, track, and optimize context window consumption for AI models.

Setup Requirements

  • ⚠️Requires `ANTHROPIC_API_KEY` for accurate (non-estimated) token counts via Anthropic's free token counting API; otherwise, it defaults to the approximate `tiktoken` counter.
  • ⚠️Requires a running or runnable Model Context Protocol (MCP) server command as input for analysis (e.g., `npx @modelcontextprotocol/server-everything` or a local executable).
Verified SafeView Analysis
The tool is designed to execute user-provided commands to start target MCP servers, which inherently carries a risk if a malicious command is supplied by the user. However, this is part of its intended functionality to analyze local or remote MCP servers. External network requests are made to the Anthropic API for accurate token counting, using an API key managed via environment variables or CLI arguments. The source code does not contain 'eval' or similar dynamic code execution patterns, nor any hardcoded secrets. The `mcp-tokens` tool itself does not expose any network services.
Updated: 2025-12-12GitHub→
0
0
Low Cost
nelsonjingusc icon

goose-mcp-escrow-server

by nelsonjingusc

Sec9

A minimal MCP server for escrow-style intent verification, deterministic planning, and reversible execution for Goose agents.

Verified SafeView Analysis
The server primarily operates as a command-line tool, processing single JSON requests from files or stdin. It utilizes standard Python library functions for JSON parsing, file I/O (for local plans.json and executions.json), and UUID generation. No 'eval' or dynamic code execution is present. Input validation is performed for actions, risk levels, and amounts. The file I/O is localized to fixed filenames, reducing path traversal risks. Overall, the design appears robust for its intended minimal scope with no apparent critical vulnerabilities.
Updated: 2025-11-27GitHub→
0
0
High Cost
swethasalunke-tech icon

postgres-dynamodb-mcp-server

by swethasalunke-tech

Sec8

Enable PostgreSQL-familiar developers to interact with Amazon DynamoDB via an MCP server, translating SQL-style operations into DynamoDB API calls.

Setup Requirements

  • ⚠️Requires AWS credentials configured (e.g., via `aws configure` or environment variables).
  • ⚠️Requires appropriate AWS IAM permissions for DynamoDB (create, read, write, describe).
  • ⚠️Requires Python 3 and dependencies from `requirements.txt`.
Verified SafeView Analysis
The server uses `boto3` for AWS interactions, which generally handles credentials securely via standard AWS configuration (`aws configure` or environment variables). No hardcoded secrets or `eval`/`exec` statements were found. A minor potential risk exists in dynamically constructing DynamoDB `FilterExpression` and `UpdateExpression` parameters where attribute names are derived directly from user input. While `ExpressionAttributeValues` secures the actual data values, malformed or unexpected attribute names from input could theoretically lead to less optimal queries or unexpected behavior, though DynamoDB's API is generally robust against such injections in attribute names. The server itself runs via stdio and does not expose direct network interfaces.
Updated: 2025-11-20GitHub→
0
0
Low Cost

MCP_Server_and_Agents-Fat-Earth

by niccolo-redantlergroup

Sec1

A system designed for managing and orchestrating distributed agents from a central server.

Review RequiredView Analysis
No source code was provided for analysis. Therefore, a comprehensive security audit could not be performed. Assuming lowest safety due to lack of visibility, as potential risks cannot be assessed.
Updated: 2025-11-25GitHub→
0
0
Low Cost
aryanduntley icon

AIFP

by aryanduntley

Sec8

A modular Python server component designed to manage and track project metadata, code entities (files, functions, types), tasks, and functional programming compliance within a SQLite database for AI-driven development.

Setup Requirements

  • ⚠️Requires an initialized SQLite 'project.db' (and 'aifp_core.db' for some helpers) to function, as the core logic is database-centric.
  • ⚠️Requires Git CLI installed and accessible in the system's PATH for features like file change detection and Git hash tracking.
  • ⚠️The Python helper files assume a specific internal module structure for imports (e.g., 'sys.path.insert'), which might require specific setup if run outside the AIFP project context.
Verified SafeView Analysis
The source code demonstrates good security practices for database interactions by consistently using parameterized queries, effectively preventing SQL injection vulnerabilities. Path manipulation is also handled with explicit validation, such as checking for absolute paths and directory traversal ('..') to mitigate path injection risks. Reliance on 'subprocess.run' for Git commands is a necessary external dependency and potential attack surface, but is constrained to known Git commands. No direct 'eval' or obvious hardcoded secrets are present within the provided helper functions. Network risks, if any, would stem from external integrations defined in directives, not directly from these core helper files.
Updated: 2026-01-19GitHub→
0
0
Low Cost
beepmedia icon

mcp-telegram

by beepmedia

Sec7

Enables AI agents to send and manage Telegram messages using the Telegram Bot API.

Setup Requirements

  • ⚠️Requires Telegram Bot Token for API access (free to obtain from @BotFather)
  • ⚠️Requires Bun runtime for execution
  • ⚠️HTTP and SSE transports run without authentication if `MCP_TELEGRAM_API_KEY` is not set, posing a security risk if exposed.
Verified SafeView Analysis
The server uses environment variables for sensitive data like `TELEGRAM_BOT_TOKEN`. HTTP and SSE transports offer API key authentication via `MCP_TELEGRAM_API_KEY`, but this key is optional. If not configured, these endpoints will run without authentication, posing a significant security risk if exposed externally. Input validation is performed using `zod` in tool definitions and HTTP handlers. Webhook verification relies on an optional `TELEGRAM_WEBHOOK_SECRET`. No direct code injection or `eval` usage found.
Updated: 2025-12-11GitHub→
PreviousPage 416 of 760Next