Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
RheaBose icon

ilp-mcp-server

by RheaBose

Sec8

Enables Large Language Models (LLMs) to interact with a drone delivery system through natural language queries, planning deliveries, checking availability, and visualizing routes.

Setup Requirements

  • ⚠️Requires a separately running 'ILP CW2 Service' on http://localhost:8080 or specified by ILP_API_URL.
  • ⚠️Node.js 18+ is required.
  • ⚠️For Claude Desktop integration, `npm link` and specific configuration file editing are needed.
Verified SafeView Analysis
The server connects to a local ILP CW2 API (http://localhost:8080) by default, which limits external network attack surface. It uses `@modelcontextprotocol/sdk` and `zod` for tool schema validation, a good practice for input sanitization. No `eval` or obvious hardcoded secrets. The primary risk would stem from vulnerabilities in the underlying ILP CW2 service or if the `ILP_API_URL` environment variable is misconfigured to point to an untrusted external service.
Updated: 2025-12-01GitHub→
0
0
High Cost
Zehra-code743 icon

Quiz-App

by Zehra-code743

Sec9

Transforms academic PDFs into AI-generated structured study notes and interactive quizzes for learning and exam preparation.

Setup Requirements

  • ⚠️Requires GEMINI_API_KEY (Paid service)
  • ⚠️Python 3.11 or higher is required
Verified SafeView Analysis
The application handles API keys securely using environment variables or Streamlit secrets. It writes user-uploaded PDF files to a temporary directory, which is common practice but always carries a minor risk if not strictly managed, though `os.path.join` is used to mitigate path traversal. Text extraction from PDFs is done with `pypdf`, which is generally safe for its purpose. There are no direct `eval` or command injection vulnerabilities identified. AI model output should always be reviewed by the user.
Updated: 2025-11-24GitHub→
0
0
Low Cost
matiasbattocchia icon

google-mcp

by matiasbattocchia

Sec4

A public Model Context Protocol (MCP) server that enables AI assistants to access Google Calendar and Sheets without requiring users to set up their own Google Cloud project.

Setup Requirements

  • ⚠️Requires a Google Cloud project with Google Calendar and Sheets APIs enabled for self-hosting.
  • ⚠️Requires creating OAuth 2.0 Web application credentials in Google Cloud for self-hosting.
  • ⚠️Requires a Cloudflare account and D1 database setup for self-hosting.
Verified SafeView Analysis
The server stores Google OAuth refresh tokens and the generated API keys directly in the D1 database without application-level encryption or hashing. While Cloudflare D1 provides encryption at rest, a compromise of the database (e.g., through an SQL injection vulnerability or a Cloudflare internal breach) would expose all user API keys and refresh tokens. This contradicts the README's claims of 'Hashed' for API Keys and 'Encrypted' for OAuth Tokens, which are misleading if interpreted as application-level security measures. Refresh tokens grant long-term access to a user's Google account, making their direct storage a critical vulnerability. Other security aspects like input validation (Zod), proper OAuth flow implementation, and use of environment variables for secrets are well-handled. There is no usage of 'eval' or obvious malicious patterns.
Updated: 2026-01-16GitHub→
0
0
Low Cost
BACH-AI-Tools icon

NASA-MCP-server

by BACH-AI-Tools

Sec8

Provides a standardized Model Context Protocol (MCP) interface for AI models to interact with various NASA and JPL APIs.

Setup Requirements

  • ⚠️Requires a NASA API Key (available for free at api.nasa.gov).
  • ⚠️Requires Node.js (>=18 as specified by @modelcontextprotocol/sdk and package.json).
  • ⚠️Manual installation involves TypeScript compilation (`npm install` then `npm run build`).
Verified SafeView Analysis
The server uses `dotenv` for environment variable management and `zod` for robust input validation, which are good security practices. API keys are expected via environment variables or command-line arguments, preventing hardcoding. External API requests include timeouts. Dynamic module imports for handlers are used but appear to be constrained by a predefined set of tool names, reducing the risk of arbitrary code execution. Minor concerns exist regarding the direct manipulation of the global object for registering MCP tools, although the naming convention (`mcp__nasa...`) limits potential collisions. Overall, solid security hygiene for an API proxy.
Updated: 2025-12-04GitHub→
0
0
Low Cost
Sec3

This repository appears to be a placeholder or a test environment for an unknown application, lacking sufficient information to determine its specific function.

Review RequiredView Analysis
Cannot perform a comprehensive security audit due to the '404: Not Found' for the README and no access to file contents (src, test.txt). Running unknown code from a 'test-repo' without further inspection is inherently risky as it could contain arbitrary scripts, 'eval' statements, or establish network connections without user knowledge.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
MagedDevOps icon

mcp-server

by MagedDevOps

Sec1

Provides a Model Context Protocol (MCP) server for AlSalam Hospital management operations, including appointment booking, patient services, and WhatsApp integration.

Setup Requirements

  • ⚠️Requires Node.js version 22 or higher.
  • ⚠️Requires a valid WhatsApp Business API bearer token (which MUST replace the hardcoded one for secure operation).
  • ⚠️External API dependency on AlSalam Hospital's UAT API (https://salemuatapi.alsalamhosp.com:446).
Review RequiredView Analysis
CRITICAL: The WhatsApp API bearer token is hardcoded directly in the `send_whatsapp_message` tool's source code (`server.js`). This is a severe security vulnerability as it grants full access to send messages from the linked WhatsApp Business Account to anyone with access to the codebase. It should be stored as an environment variable and loaded securely. CORS is set to `Access-Control-Allow-Origin: *`, which is overly permissive. While the README mentions 'CORS support for browser compatibility', this 'allow all' setting is generally not recommended for APIs handling sensitive patient data unless strict IP-based access controls or other authentication mechanisms are in place upstream. The `REQUEST_TIMEOUT` is defined as an environment variable in the README but is hardcoded as a constant (`50000`ms) within `server.js`, meaning it cannot be configured via environment variables as advertised. Input validation is implemented using Zod schemas for tool arguments, which is a good practice.
Updated: 2025-12-18GitHub→
0
0
Medium Cost
shields icon

lgtmcp

by shields

Sec9

An AI-powered Model Context Protocol (MCP) server that reviews code changes and can automatically commit them or provide detailed feedback.

Setup Requirements

  • ⚠️Requires a Google API Key from Google AI Studio (paid usage applies).
  • ⚠️The `lgtmcp` binary is installed to `~/bin` by default and requires this directory to be in your system's PATH.
  • ⚠️Must be run within a Git repository with staged or unstaged changes.
Verified SafeView Analysis
The server demonstrates robust security practices, particularly in file access and path validation. The `handleFileRetrieval` function in `review.go` includes critical checks for path traversal vulnerabilities (`..`), resolves absolute paths, ensures access is within the repository boundaries, respects `.gitignore` rules using `git check-ignore`, and explicitly handles symlinks to prevent them from pointing outside the repository. Gitleaks is integrated for built-in secret detection on changed code, and the tool uses `exec.CommandContext` for git operations with timeouts. Test secrets are ROT13 encoded to prevent accidental triggers. Authentication to the Gemini API relies on user-provided API keys or Application Default Credentials, preventing hardcoded credentials within the application itself.
Updated: 2026-01-18GitHub→
0
0
Low Cost
nainaasharmaa icon

armoriq-mcp-server

by nainaasharmaa

Sec2

A basic banking server managing accounts, deposits, withdrawals, balances, and transaction history via a RESTful API.

Setup Requirements

  • ⚠️No User Management/Authentication: Accounts are identified solely by numerical IDs, allowing unrestricted access and manipulation without any security checks.
  • ⚠️Local SQLite Database: The system uses an ephemeral SQLite file (bank.db) for storage, unsuitable for persistent, concurrent, or production-grade financial operations.
  • ⚠️Basic Input Validation: The `amount` parameter for financial transactions lacks checks for non-positive values, potentially enabling unintended deposits/withdrawals or balance exploitation.
Review RequiredView Analysis
The server critically lacks any form of authentication and authorization, allowing any client to access and modify any account by knowing its ID. Input validation for `amount` in deposit/withdraw endpoints is insufficient, as it does not prevent negative values, which can lead to unintended balance manipulation (e.g., a negative deposit becomes a withdrawal). No bounds checking for transaction amounts is present. The use of a local SQLite database (bank.db) implies lack of encryption at rest and is not suitable for high-security or concurrent production environments.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
bgbruno icon
Sec8

MCP server for managing and interacting with long-running shell processes (e.g., dev servers, watch modes) in real-time, providing output streaming and interactive control for AI agents.

Setup Requirements

  • ⚠️Requires Node.js >= 18.17.
  • ⚠️Requires native build tools (like Python, C++ compiler) for 'node-pty' dependency installation during `npm install`.
  • ⚠️Assumes a trusted MCP client and operating environment due to its arbitrary command execution capabilities.
Verified SafeView Analysis
The server's core function is to execute arbitrary shell commands (`cmd`, `args`) provided by the MCP client. This is an intended capability inherent to a 'shell server' and not a vulnerability in itself, but it grants significant power. If the MCP client or the AI agent interacting with it is untrusted or compromised, it can lead to arbitrary code execution on the host system. Communication occurs over standard I/O (stdio), not directly via network ports, meaning the security model relies on the integrity of the process launching and communicating with this server. No 'eval', obfuscation, or hardcoded secrets were found.
Updated: 2026-01-07GitHub→
0
0
Low Cost
kamikaz-e icon

MoonPhasesMCP

by kamikaz-e

Sec3

Provides a server with an API, likely for a game or application related to moon phases, potentially within a Minecraft context (given 'MCP').

Review RequiredView Analysis
CRITICAL: No source code was provided for analysis beyond the README.md file. Therefore, a comprehensive security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns cannot be performed. The assigned score reflects this critical lack of information, not an actual finding of vulnerabilities.
Updated: 2025-11-24GitHub→
0
0
High Cost
devnullvoid icon

mcp-ssh-session

by devnullvoid

Sec8

Enables AI agents to establish and manage persistent SSH sessions for remote command execution and file operations on servers and network devices.

Setup Requirements

  • ⚠️Requires SSH access to target hosts, including valid credentials (username, password, or SSH key).
  • ⚠️Python 3.10 or higher is required.
  • ⚠️When run in Docker, proper mounting of `~/.ssh` directory or individual SSH config/key files is critical for authentication.
Verified SafeView Analysis
The server implements several security measures including running as a non-root user in Docker, read-only mounting of SSH keys/config, output/file size limiting to prevent memory exhaustion, and using base64 for file content during `sudo tee` operations to mitigate shell injection risks. It also explicitly mentions and has fixed a prompt injection vulnerability. However, it uses Paramiko's `AutoAddPolicy` for host keys, which automatically accepts new host keys. While convenient for automation, this bypasses strict host key verification and can be susceptible to MITM attacks if the initial connection is compromised. This is a known trade-off clearly stated in the documentation.
Updated: 2025-12-12GitHub→
0
0
Low Cost

mcp-test

by divyaraju01

Sec7

This repository serves as a testing ground for experiments involving integration with an MCP server.

Setup Requirements

  • ⚠️Requires an operational MCP server environment to integrate with for conducting experiments.
Verified SafeView Analysis
Limited information available (only repo name, file list, and truncated README). No code analysis performed. Based on metadata alone, no immediate signs of 'eval', obfuscation, or obvious network risks were identified. Further code review is required for a conclusive security assessment.
Updated: 2025-11-17GitHub→
PreviousPage 427 of 760Next