Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
Sec1

A server designed to act as an unauthenticated proxy or interface for a Minecraft (MCP) server.

Setup Requirements

  • ⚠️Lacks authentication by design, requiring strict network isolation (e.g., localhost, private VLAN) to prevent unauthorized access.
  • ⚠️Likely requires an existing Minecraft server to proxy for or interact with.
Review RequiredView Analysis
The server is explicitly described as 'authless', meaning it lacks any authentication mechanism. If this server exposes any functionality over a network, this design choice represents an extreme security risk, allowing any client to interact with it without credentials. This is a critical vulnerability by design unless extremely strict network isolation and trust boundaries are enforced.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
Entropy-Is-Software-Development icon

zed-shell-mcp-server

by Entropy-Is-Software-Development

Sec8

Provides a Model Context Protocol (MCP) server for the Zed IDE to securely execute whitelisted shell commands (git, pnpm, npm, yarn, bun, deno) and read workspace files.

Setup Requirements

  • ⚠️Requires manual configuration in Zed IDE's settings.json to specify the absolute path to the compiled server script.
  • ⚠️AI agents using the server MUST include a `cwd` (current working directory) parameter in every tool call for proper operation, as explicitly stated in the agent instructions.
Verified SafeView Analysis
The `execute_command` tool uses `node:child_process.exec` but strictly whitelists commands (`git`, `pnpm`, `npm`, `yarn`, `bun`, `deno`), preventing arbitrary command execution. The `read_many_files` tool uses `node:fs/promises.readFile` and includes a critical path traversal check (`!absolutePath.startsWith(cwd)`) to ensure files are read only within the specified current working directory. No direct `eval` or similar code injection vectors, or hardcoded secrets are present.
Updated: 2025-11-28GitHub→
0
0
Medium Cost
cucinellclark icon

copilot-mcp-server

by cucinellclark

Sec3

This server provides Multi-Modal Command Protocol (MCP) tools for executing Python code and querying RAG databases, primarily for BV-BRC related helpdesk and publication data.

Setup Requirements

  • ⚠️Requires Singularity installed and a pre-built container image specified in `config.json` for Python code execution.
  • ⚠️Requires cloning and installing dependencies for an external `rag_api` repository (`git@github.com:cucinellclark/rag_api.git`).
  • ⚠️Dependency on BV-BRC (PATRIC) authentication service at `https://user.patricbrc.org/authenticate` for user login and token validation.
Review RequiredView Analysis
The `run_python_code` tool allows execution of arbitrary Python code using `subprocess.run` within a Singularity container. While attempts are made to sandbox using `--net --network none --containall`, local directories are explicitly bound (`--bind`), allowing the executed code access to parts of the host filesystem. This is a critical security vulnerability if not extremely well-controlled and audited, as it could lead to host compromise. Additionally, the server acts as an OAuth provider, handling user credentials for BV-BRC authentication, which requires secure implementation.
Updated: 2025-12-04GitHub→
0
0
Medium Cost
michaelkrasa icon

alpha-ess-mcp-server

by michaelkrasa

Sec9

A Model Context Protocol (MCP) server providing access to Alpha ESS solar inverter and battery system data through their official Open API.

Setup Requirements

  • ⚠️Requires Alpha ESS developer account and linked inverter system.
  • ⚠️Requires Python 3.12 or higher.
  • ⚠️Requires `uv` package manager for installation and execution.
Verified SafeView Analysis
The server correctly uses environment variables for API credentials, avoiding hardcoding. It integrates with a third-party Alpha ESS Open API client library. The code itself does not contain obvious malicious patterns, 'eval' calls, or obfuscation. Network communication is outbound to the Alpha ESS API and a local HTTP server for the MCP. The primary security consideration is the secure management of the 'ALPHA_ESS_APP_ID' and 'ALPHA_ESS_APP_SECRET' by the user.
Updated: 2025-12-10GitHub→
0
0
Medium Cost
CorpLynx icon

mc-mcp

by CorpLynx

Sec7

Enables Large Language Models (LLMs) to interact with and control Minecraft servers through a WebSocket-based Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Node.js 18+ and Java 17+ installed.
  • ⚠️Requires a Minecraft Server with NeoForge 1.20.1+ installed.
  • ⚠️Involves configuring and starting three separate components (Bridge Server, MCP Server, Minecraft Mod) in a specific order.
  • ⚠️The Gradle wrapper for the Minecraft mod is missing and needs to be initialized before building (./gradlew build).
  • ⚠️Requires careful manual configuration of multiple .env and .toml files with secure tokens and command whitelists.
Verified SafeView Analysis
The system implements token-based authentication between components and command whitelisting on the Minecraft mod. The 'execute_command' tool allows arbitrary command execution, which is mitigated by regex-based whitelisting, but this remains a critical point requiring careful user configuration to prevent abuse. A default 'secret' authentication token in the Minecraft mod's example config is a minor risk if not changed by users, although the documentation explicitly advises using strong, unique tokens for production.
Updated: 2025-11-30GitHub→
0
0
Medium Cost
RajwardhanMali icon

MDBQS

by RajwardhanMali

Sec3

A multi-database query system enabling natural language querying of heterogeneous databases (SQL, NoSQL, Graph, Vector) via LLM-assisted planning and parallel execution with result fusion and provenance tracking.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires Docker and Docker Compose to run the multiple database services (PostgreSQL, MongoDB, Neo4j, Milvus).
  • ⚠️Requires a Google Gemini API Key for intelligent LLM planning; otherwise, it defaults to a very basic heuristic planner. This key needs to be set in a '.env' file.
  • ⚠️The main FastAPI backend (`app.main:app`) is designed to interact with four *separate* FastAPI MCP (Model Context Protocol) plugin servers (e.g., `mcp_sql_sample`, `mcp_nosql_sample`, etc.) typically running on ports 8001-8004. These plugin servers are not automatically started by the provided `run-all-servers.sh` script or the main backend, requiring manual orchestration to run the full system.
Review RequiredView Analysis
The system utilizes an LLM (Google Gemini) to directly generate database query strings (SQL, NoSQL filters, Cypher components) which are then executed without robust semantic validation or sanitization. This presents a high risk of prompt injection and subsequent database injection (SQL injection in PostgreSQL, potential NoSQL injection for MongoDB via '$where'/'$eval', Milvus query injection in `get_metadata` via f-string for `cust_id`). Although the SQL adapter claims 'ONLY SELECT allowed', this is an LLM instruction and not technically enforced, making it vulnerable to malicious query chains. Hardcoded database credentials (e.g., 'postgrespassword', 'neo4jpassword', 'minioadmin') are present in `docker-compose.yml` for development, which is a severe risk if used in production.
Updated: 2025-12-06GitHub→
0
0
Medium Cost
Sadiqraza2003 icon

KM-remote-mcp-server

by Sadiqraza2003

Sec9

AI-powered expense management assistant that helps users track, summarize, and manage their personal expenses through natural language interactions.

Setup Requirements

  • ⚠️Requires Python 3.13+
  • ⚠️Requires MySQL database accessible via DATABASE_URL environment variable
  • ⚠️Requires 'categories.json' file to be present in the same directory as 'main.py' for expense categorization
Verified SafeView Analysis
Robust user isolation implemented across all CRUD operations (add, list, summarize, edit, delete) prevents users from accessing or modifying others' data. Sensitive database connection details are loaded from environment variables. No 'eval' or obvious malicious patterns found in the provided code.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
TianyiPeng icon

dedalus-mcp-server

by TianyiPeng

Sec10

An MCP server that provides general utility tools for text and math operations, and functions as a documentation server, enabling AI agents to query documentation, answer questions, and perform multi-stage analysis based on the served content.

Setup Requirements

  • ⚠️Requires OpenAI/Anthropic API Key for AI features (paid service).
  • ⚠️Requires `uv` package manager for dependency installation (recommended by Dedalus).
  • ⚠️Requires a specific `pyproject.toml` and root `main.py` structure for Dedalus deployment.
Verified SafeView Analysis
The provided `src/main.py` file implements simple utility tools with no inherent security risks like `eval` or direct network vulnerabilities. It demonstrates safe practices like handling input validation (`factorial`, `convert_temperature`) and includes asynchronous operations for I/O (`get_timestamp`). The project context (README, docs, tests, examples) indicates the server is designed to function as an AI-powered documentation server, which would involve API calls to LLMs (like OpenAI/Anthropic). While the specific `ask_docs` implementation for such AI features is not directly within the provided `src/main.py` block, the project's overall design promotes securing API keys via environment variables and includes rate-limiting mechanisms (as shown in `docs/guides/server/dedalus-deployment.md` and `tests/test_rate_limit.py`) to prevent API abuse. The codebase appears well-designed for security within its broader scope.
Updated: 2025-11-25GitHub→
0
0
Low Cost
opensm icon
Sec10

A boilerplate repository for managing new MCP servers within a GitLab DevOps environment, primarily serving as a project template.

Setup Requirements

  • ⚠️The repository currently contains only a generic GitLab README template and no actual server implementation code.
  • ⚠️Further development is required to implement the 'mcp servers' functionality.
Verified SafeView Analysis
The provided source code is limited to a generic GitLab README.md template. There is no actual server application code to analyze for security risks such as 'eval', obfuscation, network vulnerabilities, hardcoded secrets, or malicious patterns. The README file itself poses no security threat.
Updated: 2025-12-05GitHub→
0
0
High Cost
Habtamu-Dires icon

spring-mcp-stdio

by Habtamu-Dires

Sec10

This server acts as a Model Context Protocol (MCP) tool provider for Spring AI, exposing Spring I/O conference session data.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) 17+.
  • ⚠️Operates over standard input/output (stdio) for MCP communication, not an HTTP endpoint.
  • ⚠️Requires Maven or Gradle for building and running.
Verified SafeView Analysis
The application is minimal, loading static data from a local JSON file. It exposes a single read-only tool function via Spring AI's Model Context Protocol (MCP) over standard I/O. There are no dynamic code executions, external network calls for data, hardcoded secrets, or obvious vulnerabilities. It is considered very safe.
Updated: 2025-12-05GitHub→
0
0
Medium Cost
iflorit icon
Sec8

A Model Context Protocol (MCP) server for Woffu time tracking integration, enabling AI assistants to manage clock-in/out and time tracking operations.

Setup Requirements

  • ⚠️Requires `WOFFU_TOKEN` (JWT Bearer token) which needs to be manually extracted from browser cookies and periodically refreshed.
  • ⚠️Requires `WOFFU_USER_ID` which needs to be manually extracted from the JWT token or Woffu network requests.
  • ⚠️Requires Node.js version 18.0.0 or higher.
Verified SafeView Analysis
The server primarily relies on environment variables (`WOFFU_TOKEN`, `WOFFU_USER_ID`, `WOFFU_BASE_URL`) for configuration, which is a good practice for sensitive data. It uses the `fetch` API to interact with the Woffu service. The primary security risk involves providing a malicious `WOFFU_BASE_URL` or an exposed `WOFFU_TOKEN` by the user, but the server itself does not introduce new vulnerabilities like code execution or direct file system access beyond its intended scope. Input validation for `completeDay` parameters (date and time formats) is present. As an MCP server, it's designed for local integration with an AI agent, limiting its external attack surface.
Updated: 2025-11-24GitHub→
0
0
Low Cost
salimbentounsi icon

proximity

by salimbentounsi

Sec9

A GitHub Learning Lab course repository for learning Git and GitHub, presented as an interactive slideshow.

Setup Requirements

  • ⚠️Requires Ruby and Bundler for Jekyll.
  • ⚠️Requires Node.js and npm/yarn for `reveal.js` dependency (if not vendored or installed via other means).
Verified SafeView Analysis
The provided source code defines a static Jekyll site for a GitHub Learning Lab course, utilizing `reveal.js`. It contains no obvious malicious patterns, `eval` functions, obfuscation, or hardcoded secrets within the Jekyll configuration itself. However, the `README.md` explicitly links to an external ZIP file (`proximity.zip`) as the actual 'open source project' used by the course. The contents of this external ZIP file are not included in the provided source code for analysis, and therefore, its security posture cannot be assessed. Proceeding to download and execute code from this external ZIP without independent verification would introduce unknown risks.
Updated: 2026-01-19GitHub→
PreviousPage 424 of 760Next