Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
FreeOnlineUser icon

surgical-fs-mcp

by FreeOnlineUser

Sec3

A C# MCP server providing whitespace-tolerant, ACID-compliant file editing tools for Claude Desktop.

Setup Requirements

  • ⚠️Requires .NET 8.0 SDK installed.
  • ⚠️Requires Claude Desktop to be installed and configured to use this server.
  • ⚠️Requires manual code modification of 'SurgicalFsMcp.cs' to configure 'AllowedDirectories' for security, followed by a rebuild.
Review RequiredView Analysis
A critical security audit is not possible as only the README.md was provided as 'source code'. The README *claims* to implement path validation against allowed directories and directory traversal blocking, which are essential for a filesystem-modifying tool. However, these claims cannot be verified without inspecting the actual C# implementation of `SurgicalFsMcp.cs`, `PathValidator`, `UpdateFindReplaceWithResult`, and `BackupManager`. The project involves direct filesystem modification, making a thorough code review essential for ensuring safety against malicious operations or data loss.
Updated: 2025-12-22GitHub→
0
0
Low Cost

TraceVerde-MCP-Server

by Mandark-droid

Sec9

The TraceVerde-MCP-Server likely serves as a backend for an application that needs to interact with an AI model, possibly for processing or generating text related to trace verde, indicated by 'MCP' which could stand for Model Communication Protocol or similar.

Verified SafeView Analysis
The provided code snippets are minimal and do not contain any obvious security vulnerabilities such as 'eval', obfuscation, hardcoded secrets, or suspicious network patterns. The primary security concern would depend on how the server integrates with external services and handles user input, which is not visible in these snippets.
Updated: 2025-11-24GitHub→
0
0
Low Cost
featbit icon
Sec3

This server acts as a Node.js proxy agent for the FeatBit feature flag system, allowing client-side SDKs to evaluate feature flags and send insights without direct communication with the FeatBit backend.

Setup Requirements

  • ⚠️Requires a running Node.js environment.
  • ⚠️Relies on an active FeatBit account and backend for feature flag data and streaming.
  • ⚠️Requires configuration with FeatBit SDK keys/secrets (e.g., `FB_SDK_KEY`, `FB_ENV_SECRET` passed as arguments or environment variables).
Review RequiredView Analysis
The server utilizes `eval()` extensively in its feature flag evaluation logic (`src/utils/index.js`, `src/core/flags_engine.js`) to execute rules and variations received from the FeatBit backend. This poses a critical security risk as it allows arbitrary JavaScript code execution on the server if the FeatBit backend is compromised or if the data stream containing flag rules is tampered with. No obvious sandboxing mechanisms (like Node.js `vm` module) are in place to mitigate this vulnerability, potentially leading to remote code execution.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
laramarcodes icon

plaid-transactions-mcp

by laramarcodes

Sec9

An MCP server enabling Claude to sync, search, and analyze financial transactions securely using Plaid's API.

Setup Requirements

  • ⚠️Requires macOS due to heavy reliance on `security` command for Keychain integration.
  • ⚠️Plaid API Client ID and Secret must be manually set up in macOS Keychain prior to first use.
  • ⚠️Access tokens for linked bank accounts are obtained via an interactive web-based Plaid Link flow using the `plaid_add_account` tool.
  • ⚠️Requires manual JSON configuration in Claude Desktop/CLI config files for the MCP server.
Verified SafeView Analysis
Credentials (Plaid Client ID, Secret, and Access Tokens) are securely managed using macOS Keychain, preventing hardcoding or storage in plain-text files. The server avoids environment variables for sensitive data. A temporary local HTTP server is launched for Plaid Link OAuth callbacks, which is well-contained and shuts down after use. Input validation is performed using Pydantic models. No 'eval' or malicious patterns were identified.
Updated: 2026-01-05GitHub→
0
0
Medium Cost
visusnet icon
Sec8

Provides a Model Context Protocol (MCP) server that interfaces with the Coinbase Advanced Trading API, enabling AI assistants like Claude to perform autonomous crypto trading.

Setup Requirements

  • ⚠️Requires Coinbase API Key Name and Private Key with 'Trading' permissions.
  • ⚠️Private Key must be in PEM format (multiline string) and saved securely.
  • ⚠️Node.js version >=24.12.0 is required.
Verified SafeView Analysis
The server's primary function is real-money cryptocurrency trading, which inherently carries financial risk, explicitly warned about in the README. It requires sensitive Coinbase API credentials (API Key Name and Private Key) which are loaded from environment variables and explicitly excluded from version control (.env). Input validation is performed using 'zod' schemas, reducing the risk of malformed requests. No direct 'eval' or other obvious code vulnerabilities are present. The main security concerns are operational: potential for financial loss due to trading decisions or misconfiguration, which the project mitigates through features like 'dry-run' mode and strong warnings about risk.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
Insight-DevSecOps icon

mcp-api-center-sync

by Insight-DevSecOps

Sec9

GitOps-powered synchronization of Model Context Protocol (MCP) server metadata from a public registry into Azure API Center instances for enterprise governance and discovery.

Setup Requirements

  • ⚠️Requires comprehensive Azure OIDC (OpenID Connect) Workload Identity Federation setup, involving multiple Azure CLI commands and Microsoft Entra ID (Azure AD) App Registration.
  • ⚠️Requires an active Azure Subscription with an existing Azure API Center instance.
  • ⚠️PowerShell 7.0+ is a prerequisite for local script testing and potentially for the GitHub Actions runner environment if a custom runner is used (though GitHub-hosted runners usually have it).
Verified SafeView Analysis
The project exhibits strong security practices through its GitOps design. It leverages Azure OIDC (OpenID Connect) for passwordless authentication to Azure, eliminating hardcoded credentials. GitHub secrets are used for sensitive configuration. The workflow is PR-based, ensuring code reviews and audit trails via Git history. No use of `eval` or similar dangerous functions is visible in the truncated source. The architecture explicitly recommends least privilege for Azure roles and enforces branch protection, indicating a secure-by-design approach. Potential risks would primarily stem from misconfiguration of OIDC, insufficient RBAC, or vulnerabilities in the underlying PowerShell runtime or GitHub Actions runner environment, rather than the application code itself.
Updated: 2025-11-30GitHub→
0
0
Medium Cost

rememberly

by jon-fox

Sec1

This MCP server manages and stores conversational context and chat history, likely to enhance AI model recall and consistency for chat applications.

Review RequiredView Analysis
Source code was not provided for analysis, making a security audit impossible. Cannot check for 'eval', obfuscation, hardcoded secrets, network risks, or malicious patterns. Therefore, a safe assessment cannot be made.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
hegner123 icon

shakespeare

by hegner123

Sec3

Provides Playwright-based browser automation and CSS Object Model (CSSOM) inspection for web development and debugging.

Setup Requirements

  • ⚠️Requires Node.js installed locally.
  • ⚠️Requires Playwright Chromium browser binary installed via `npx playwright install chromium`.
  • ⚠️Potential for high token usage if `evaluate` tool returns large content directly (up to 200,000 characters by default).
Review RequiredView Analysis
The `evaluate` tool allows execution of arbitrary JavaScript within the browser context, which is a significant security risk if the input script is not trusted or properly sanitized. The `newContext` call uses `ignoreHTTPSErrors: true`, bypassing SSL certificate validation and making it vulnerable to man-in-the-middle attacks on untrusted HTTPS sites. The `evaluate` tool can also write arbitrary content to disk, potentially to user-specified paths, which could lead to file overwrites or disk space exhaustion.
Updated: 2026-01-18GitHub→
0
0
Low Cost
rlyeh-dev icon

miskatonic-mcp

by rlyeh-dev

Sec7

Enables LLMs to execute Lua code within a sandboxed environment for tool use and context generation.

Setup Requirements

  • ⚠️Requires Odin programming language installed to build and run.
  • ⚠️Relies on Lua 5.4 runtime dependency.
  • ⚠️Only supports stdio communication, no HTTP server is provided.
Verified SafeView Analysis
The server's core functionality relies on an 'evaluate' tool that executes arbitrary Lua code within an in-process Lua sandbox. While sandboxing is an explicit mitigation, in-process sandboxes carry inherent risks of sandbox escapes if not perfectly implemented. No immediate network risks from the server itself as it's stdio-based, but a robust Lua sandbox is critical to prevent code from accessing sensitive system resources or performing unauthorized network operations. No hardcoded secrets were identified.
Updated: 2025-11-28GitHub→
0
0
Medium Cost
datablogin icon

PaidSearchNav-MCP

by datablogin

Sec9

Provides comprehensive analysis and recommendations for Google Ads campaign optimization, leveraging Google Ads, BigQuery, and Google Analytics 4 data for performance monitoring and issue detection.

Setup Requirements

  • ⚠️Google Ads API Key setup (Developer Token, OAuth Client ID/Secret, Refresh Token required)
  • ⚠️Google Cloud Project with BigQuery and GA4 API access enabled, requires credentials (Service Account or ADC)
  • ⚠️Redis server required for caching and rate limiting (can be run via Docker Compose)
Verified SafeView Analysis
Strong focus on security with Pydantic SecretStr for sensitive configurations, abstracted token storage (supporting secret managers), explicit input validation, and dedicated SQL injection prevention in BigQuery queries. Extensive security tests are present. Minor risk due to regex-based SQL injection prevention being potentially bypassable by complex queries, though it's a good first line of defense. The presence of rate limiting and circuit breakers also enhances operational security.
Updated: 2025-12-04GitHub→
0
0
Medium Cost
arapodcho icon

mcp_server_fhir

by arapodcho

Sec9

Integrates a Multi-Cloud Platform (MCP) server with a FHIR API to retrieve, manage, and format clinical healthcare data, often for use in AI-powered clinical assistant applications.

Setup Requirements

  • ⚠️Requires access to a FHIR API server (default is hapi.fhir.org/baseR4).
  • ⚠️Requires FHIR API credentials (Client ID, Client Secret, Token Endpoint) if the FHIR server requires authentication.
  • ⚠️Requires Python dependencies: httpx, requests, python-dotenv, and the FastMCP framework.
Verified SafeView Analysis
The server uses environment variables for sensitive configurations like FHIR API keys, which is a good practice. It utilizes standard and well-maintained HTTP clients (httpx, requests) for external API communication. No 'eval' or obvious malicious patterns were detected. Input validation for date formats and allowed enum values is present for tool arguments. Parameters for API calls are generally passed as dictionaries, which prevents URL injection, though one internal path allows string parameters (which is used safely by internal construction). OAuth2 Client Credentials flow is used for authentication.
Updated: 2026-01-19GitHub→
0
0
High Cost
ledgerW icon

gdelt-mcp

by ledgerW

Sec4

Model Context Protocol server providing AI agents with access to GDELT 2.0 (Global Database of Events, Language, and Tone) via Google BigQuery for cost-optimized querying.

Setup Requirements

  • ⚠️Requires a Google Cloud Platform (GCP) project with BigQuery API enabled, which is a paid service.
  • ⚠️Requires setting up a GCP service account with BigQuery Data Viewer and BigQuery Job User roles, and obtaining its JSON key or credentials.
  • ⚠️Python 3.11+ is required, along with the `uv` package manager.
Review RequiredView Analysis
The server directly interpolates user-provided `where_clause` and `select_fields` parameters into BigQuery SQL queries without explicit sanitization or parameterization. This creates a significant SQL Injection vulnerability. While the server is designed to use client-provided BigQuery credentials (limiting direct harm to the server operator's own project if they are not used), if the server falls back to environment variable credentials, a malicious client could exploit this to execute arbitrary BigQuery SQL against the server's configured GCP project. This makes the server unsafe to run in environments with untrusted inputs.
Updated: 2025-11-25GitHub→
PreviousPage 417 of 760Next