Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost

mcp-server-builder

by rblake2320

Sec8

A web application for building and deploying Model Context Protocol (MCP) servers with AI assistance.

Setup Requirements

  • ⚠️Requires a GitHub OAuth application (Client ID/Secret) for authentication and repository integration.
  • ⚠️Requires a PostgreSQL database with connection details.
  • ⚠️Requires a Google Gemini API key for AI-assisted tool generation (not listed in .env.example, but implied by features).
Verified SafeView Analysis
Uses modern frameworks (React, Express, Drizzle ORM) and TypeScript, which generally promote more secure coding practices. Authentication is handled via GitHub OAuth and Passport.js, explicitly noted as 'secure'. Docker support aids in isolated deployments. Potential risks exist with misconfiguration of environment variables (SESSION_SECRET, GitHub OAuth callbacks) and secure handling of the external Google Gemini API key. No signs of eval or obfuscation.
Updated: 2025-11-16GitHub→
0
0
High Cost
josegarridodigio icon

remembrances

by josegarridodigio

Sec4

Provides long-term memory, knowledge base, and code indexing capabilities to AI agents using multiple memory layers and embedding models.

Setup Requirements

  • ⚠️Requires Go 1.20+ installed.
  • ⚠️Requires SurrealDB, either local or remote. An auto-start command feature is available but requires the 'surreal' executable or a running instance.
  • ⚠️Local embedding models (GGUF, Ollama) require significant local resources (CPU/GPU, RAM) and specific setup (e.cpp compilation, GPU drivers, Docker for Ollama). GGUF models need to be manually downloaded.
  • ⚠️Using the `start-remembrances.sh` wrapper script requires Docker to manage Ollama.
Review RequiredView Analysis
The `surrealdb-start-cmd` configuration option allows execution of arbitrary shell commands (`/bin/sh -c "<cmd>"`) if the server fails to connect to SurrealDB. This presents a critical security risk if the configuration can be manipulated by an untrusted entity, as it effectively provides an 'eval'-like capability. Additionally, default SurrealDB credentials of 'root:root' are provided in the sample configuration, which are insecure if not changed. Network-exposed HTTP and SSE APIs lack explicit mention of authentication/authorization mechanisms.
Updated: 2026-01-14GitHub→
0
0
Low Cost
AcceleratedIndustries icon

planka-mcp

by AcceleratedIndustries

Sec9

Integrates AI clients with Planka kanban boards for task management and automation via a Model Context Protocol (MCP) server.

Setup Requirements

  • ⚠️Requires a running Planka instance to connect to.
  • ⚠️Requires either `PLANKA_TOKEN` or `PLANKA_EMAIL` and `PLANKA_PASSWORD` environment variables for authentication.
  • ⚠️Requires Rust toolchain (`cargo`) to build and run from source.
Verified SafeView Analysis
The server uses environment variables for sensitive data (Planka URL, authentication token/credentials), preventing hardcoding. It explicitly excludes destructive operations (`delete_card`, `delete_list`) from programmatic tool calling, requiring explicit user initiation for safety. Inputs are deserialized and validated for structure/presence of required arguments. The server is designed for local-only execution over stdin/stdout, reducing network exposure.
Updated: 2025-12-03GitHub→
0
0
Low Cost
drdanielbender icon
Sec9

Provides tools to check domain availability and pricing information via the Porkbun API v3.

Setup Requirements

  • ⚠️Requires Node.js v18 or later.
  • ⚠️Requires Porkbun API credentials (API Key and Secret API Key) which must be generated from the Porkbun account.
  • ⚠️Porkbun API credentials must be configured as environment variables (PORKBUN_API_KEY, PORKBUN_SECRET_API_KEY) or in a .env file.
Verified SafeView Analysis
The server correctly uses environment variables for API keys and secrets, preventing hardcoding. It uses Zod for input schema validation, which helps prevent malformed inputs. Domain names are directly interpolated into the API endpoint URL; while standard for domain lookups, it's a general point to consider for URL injection, though domain name formats are restrictive. No 'eval' or other obvious malicious patterns were found. Network requests are made to a specific, hardcoded Porkbun API endpoint. The implementation includes built-in rate limiting and comprehensive error handling.
Updated: 2025-11-27GitHub→
0
0
Medium Cost
TayyabShoukat icon

mcp-servers

by TayyabShoukat

Sec7

Integrates GitHub repositories, pull requests, issues, and workflows directly with Claude Code for AI-powered development assistance.

Setup Requirements

  • ⚠️Requires a GitHub Personal Access Token (PAT) with appropriate scopes.
  • ⚠️Requires Node.js (v16 or higher) with npm installed.
  • ⚠️Requires Claude Code to be installed and running.
Verified SafeView Analysis
The provided 'source code' is a setup guide (Markdown file) for the `@modelcontextprotocol/server-github` NPM package, not the server's actual source code. The setup requires a highly sensitive GitHub Personal Access Token (PAT). The guide strongly advises security best practices for PATs, including using minimum required permissions, rotating tokens regularly, and never committing them to version control. Running the server involves executing an external npm package via `npx`, which downloads and runs code from NPM, thus requiring trust in the publisher of `@modelcontextprotocol/server-github`. No 'eval' or malicious patterns are observed in the provided setup instructions.
Updated: 2025-12-06GitHub→
0
0
High Cost

reddit-enhanced-mcp

by yigitkonur

Sec9

This MCP server enables researchers and developers to search Reddit discussions via Google and fetch full Reddit posts with their threaded comments.

Setup Requirements

  • ⚠️Requires Serper API Key (Paid service for Google Search)
  • ⚠️Requires Reddit Client ID and Client Secret (manual setup of a 'script' type Reddit OAuth app)
  • ⚠️Requires Node.js version 20.0.0 or higher
Verified SafeView Analysis
API keys (Serper, Reddit Client ID/Secret) are read from environment variables, not hardcoded. The server validates and limits inputs (e.g., max queries/urls, max comments) before passing them to external APIs, reducing risks of excessive resource consumption or malformed requests. No direct use of `eval` or suspicious third-party dependencies. The primary security consideration is the secure management of the required API keys by the user.
Updated: 2025-11-25GitHub→
0
0
Low Cost
maxturazzini icon

claude-viewer

by maxturazzini

Sec8

An administrative web application for multi-user visualization and analytics of Claude Code conversation history, supporting direct querying via MCP.

Setup Requirements

  • ⚠️Requires Node.js v14.0.0 or higher.
  • ⚠️Requires read access to Claude Code's data directories (e.g., `~/.claude/projects/`) for all users, which might pose permission issues on enterprise machines or restrictive OS setups.
  • ⚠️Claude Code's default 30-day session retention (`cleanupPeriodDays`) will limit the historical data available; users must manually configure Claude Code to retain history longer for comprehensive viewing.
Verified SafeView Analysis
The application reads conversation data from local user directories (`~/.claude/`), which inherently requires broad file system access. Input parameters for MCP tools are validated using `zod`. File paths are constructed using `path.join`, mitigating direct path traversal risks. HTML escaping (`escapeHtml()`) is used in the frontend for XSS protection. The `exec` and `spawn` calls in `mcp-server.js` are used for internal commands (e.g., `curl` for health check, `node server.js` for starting web server, browser `open` command) with controlled arguments, reducing direct command injection risk. No `eval` or obvious hardcoded secrets were found.
Updated: 2025-12-13GitHub→
0
0
High Cost
zyntx-lab icon
Sec8

Enables AI assistants to perform Swift code audits and detect unused code in iOS/macOS projects using the Periphery tool.

Setup Requirements

  • ⚠️Requires macOS 13.0+ and Swift 6.0+
  • ⚠️Requires Periphery CLI tool to be pre-installed separately (e.g., `brew install peripheryapp/periphery/periphery`)
  • ⚠️Manual configuration of the MCP client (e.g., Claude Desktop JSON file, VS Code `.mcp.json`) is necessary for integration
Verified SafeView Analysis
The server executes the `periphery` CLI tool with arguments derived from user input. While input paths are validated and arguments are passed as distinct strings to Swift's `Process` API, mitigating common shell injection risks, potential vulnerabilities in the `periphery` tool itself or highly complex, specially crafted inputs could theoretically pose a risk. No `eval` or direct network risks within the server's Swift code were identified. The core logic is transparent.
Updated: 2025-11-22GitHub→
0
0
Low Cost
d3-jon-allen icon

Figma-MUI

by d3-jon-allen

Sec9

A React component library and UI starter kit for building user interfaces with Material-UI, driven by a comprehensive design token system synchronized with Figma, supporting light/dark modes and responsive design.

Setup Requirements

  • ⚠️Requires `FIGMA_ACCESS_TOKEN` to export design tokens from Figma using `scripts/exportFigmaTokens.js`.
  • ⚠️Relies heavily on Figma for its design token system; manual token updates or a disconnected Figma workflow might lead to inconsistencies.
  • ⚠️Node.js and npm are required for development and build processes.
Verified SafeView Analysis
The application itself is a frontend React app with client-side routing and theme management, posing minimal server-side security risks. Build scripts (e.g., `exportFigmaTokens.js`) interact with the Figma API using `FIGMA_ACCESS_TOKEN`, which is correctly handled as an environment variable and not hardcoded. There's no evident use of 'eval', obfuscation, or direct malicious patterns in the provided source code. The `FIGMA_ACCESS_TOKEN` is critical for the token generation process but is not used at runtime in the client-side application based on the provided code.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
ctagard icon

dap-mcp

by ctagard

Sec4

Provides AI agents with the ability to debug code by exposing the Debug Adapter Protocol (DAP) over Model Context Protocol (MCP), enabling functionalities like setting breakpoints, inspecting variables, and stepping through code via natural language.

Setup Requirements

  • ⚠️Requires separate installation of language-specific debug adapters (e.g., Delve for Go, debugpy for Python, vscode-js-debug for JavaScript/TypeScript).
  • ⚠️Manual setup for `vscode-js-debug` is more involved, requiring specific paths to be configured in DAP-MCP's settings.
  • ⚠️Correct `PATH` configuration is crucial for debug adapters (especially for Go's Delve and Python's virtual environments).
  • ⚠️Browser debugging (React/Vue/Svelte) requires Chrome/Edge to be running with remote debugging enabled, or DAP-MCP will launch a new instance.
Review RequiredView Analysis
The server's core functionality involves highly privileged operations such as evaluating arbitrary code (`debug_evaluate`) and executing native debugger commands (`debug_execute_command`) within the debugged process. By default, it runs in 'full' mode, enabling all control tools including variable modification and code execution. This means an untrusted or compromised AI agent could execute arbitrary commands on the system where DAP-MCP is running. The `snapcraft.yaml` uses 'classic' confinement, meaning the snap has full system access. While these capabilities are inherent to a debugging tool, they pose a significant security risk if the AI client or operating environment is not fully trusted. Configuration options exist to disable dangerous features (e.g., `readonly` mode, `allowExecute: false`), but the default settings expose maximum functionality.
Updated: 2025-11-30GitHub→
0
0
Low Cost
devakapatel icon

remote-mcp-server

by devakapatel

Sec3

This server provides a Model Context Protocol (MCP) endpoint on Cloudflare Workers, acting as a bridge to expose simple AI tools (like a math 'add' function) to MCP clients such as Claude Desktop, with a mocked OAuth login for demo purposes.

Setup Requirements

  • ⚠️Requires a Cloudflare account and Wrangler CLI for deployment.
  • ⚠️The OAuth login is a mock; it accepts any email/password and is NOT secure for production use. A real authentication system must be implemented before deploying to production.
  • ⚠️Requires a Cloudflare KV Namespace (`OAUTH_KV`) to be created and bound for OAuth state management.
Verified SafeView Analysis
The OAuth login system is explicitly mocked to accept any email and password combination for authorization (as noted by `// We'll allow any values for email and password for this demo` and `if (false)` in `src/app.ts`). This is a critical security vulnerability if used outside of a strictly isolated development or demonstration environment. No obfuscation, 'eval', or other obvious malicious patterns were found. However, the intentional insecurity of the authentication mechanism significantly lowers the security score for any real-world application.
Updated: 2025-12-10GitHub→
0
0
Medium Cost
hsiangjenli icon

mcp-polib

by hsiangjenli

Sec7

This server provides an API for reading, writing, and manipulating GNU Gettext `.po` translation files, designed for integration with language models and AI agents to automate localization workflows.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Requires 'uv' package manager.
  • ⚠️Docker recommended for deployment (requires Docker daemon).
  • ⚠️Operates on absolute file paths, requiring the server to have access to the target filesystem (e.g., via Docker volume mounts).
Verified SafeView Analysis
The server processes absolute file paths provided by the client, which carries an inherent risk of arbitrary file read/write if the server is not deployed with strict file system access controls (e.g., confined Docker volumes, appropriate user permissions). The code includes a safeguard (`_validate_file_path`) to prevent command-line option injection and uses `subprocess.run` with a list of arguments for `powrap`, mitigating command injection risks. No `eval`, hardcoded secrets, or direct network vulnerabilities were found.
Updated: 2025-11-27GitHub→
PreviousPage 467 of 760Next