Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
the-sage-group icon

m365cp

by the-sage-group

Sec2

Provides a Model Context Protocol (MCP) server for interacting with Microsoft 365 services, including email and file management, via the Microsoft Graph API.

Setup Requirements

  • ⚠️Requires a valid Microsoft Graph access token for client authentication (implies prior OAuth 2.0 setup).
  • ⚠️Requires Node.js version 18 or higher.
  • ⚠️Puppeteer dependency automatically downloads a Chromium browser instance, which may consume significant disk space and potentially introduce setup complexities in some environments.
Review RequiredView Analysis
CRITICAL VULNERABILITY: The `MicrosoftGraphTokenVerifier` explicitly states it 'doesn't verify the token ourselves - Microsoft Graph API will do that'. This means the MCP server *does not verify the authenticity or integrity* (e.g., signature) of incoming bearer tokens before extracting claims (clientId, scopes, expiresAt) and generating `AuthInfo`. An attacker could forge a JWT with valid-looking claims (if it includes `exp`, `scp`/`scope`, `appid`/`client_id`) and bypass the server's authentication middleware, even if subsequent calls to the Microsoft Graph API would fail. This compromises the server's internal trust model for client authentication. Puppeteer is used for converting HTML emails to PDF, which involves rendering potentially untrusted HTML content in a browser environment. While Puppeteer isolates processes, this adds to the attack surface if not perfectly sandboxed. `sanitize-filename` is used when uploading files, which is a good practice.
Updated: 2025-12-15GitHub→
0
0
Low Cost
PareshKolte1 icon

MCP_Server_v1

by PareshKolte1

Sec3

An API server for integrating with SAP systems, specifically for sales order creation, and provides a generic tool registration and invocation layer.

Setup Requirements

  • ⚠️Requires access to an SAP system (either directly or via SAP BTP Connectivity/Destination services).
  • ⚠️Designed for deployment on SAP BTP Cloud Foundry, requiring `destination` and `connectivity` service bindings.
  • ⚠️Relies on several environment variables for configuration including SAP credentials and Cloud Foundry destination names.
Review RequiredView Analysis
The `SapClientCF` class uses `verify=False` in `requests` calls for both CSRF token fetching and sales order posting, disabling SSL certificate verification and making the application highly vulnerable to Man-in-the-Middle (MITM) attacks. The `/v1/tools/invoke/{tool_name}` endpoint in `main.py` is vulnerable to Server-Side Request Forgery (SSRF) as it allows arbitrary URL invocation based on user-registered tool configurations without validation or restrictions, potentially exposing internal network resources. Error messages might expose sensitive internal details. Hardcoded `sap-client` values are present.
Updated: 2025-11-19GitHub→
0
0
Medium Cost
isakskogstad icon

Riksdag-Regering-LRF

by isakskogstad

Sec8

The server provides real-time access to open data from the Swedish Parliament (Riksdagen) and Government Offices (Regeringskansliet) via an MCP server, enabling LLMs to query and retrieve documents, votes, speeches, and more.

Setup Requirements

  • ⚠️Requires Node.js 20+ runtime environment.
  • ⚠️Requires active internet connectivity to data.riksdagen.se and g0v.se for all data operations.
  • ⚠️When deployed on Render.com's Free tier, the server may experience cold start delays of 30-60 seconds after periods of inactivity.
Verified SafeView Analysis
The server uses public APIs (data.riksdagen.se, g0v.se) for all data fetching. It incorporates Zod for input validation, has explicit response size limits and content sanitization to prevent oversized or malicious responses, and logs without sensitive query parameters. An optional API key can be configured for access control in HTTP mode. There are no indications of 'eval', obfuscation, or hardcoded secrets in the provided code.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
d-ang356 icon
Sec9

Manage Excel and CSV spreadsheets, including data manipulation, formulas, formatting, charts, and file operations via an MCP server.

Setup Requirements

  • ⚠️Docker required
  • ⚠️MCP-compatible client (e.g., Claude Desktop) required
  • ⚠️Manual configuration of Docker volume mounts (e.g., `C:\Users\[YOUR USERNAME]\spreadsheets`) and MCP client settings is complex and requires user-specific path adjustments.
  • ⚠️Requires modification of multiple MCP configuration files (`registry.yaml`, `claude_desktop_config.json`, `spreadsheet-mcp.yaml`).
Verified SafeView Analysis
The Python server code includes robust path traversal prevention (`_resolve_path`). No 'eval', obfuscation, or hardcoded secrets were found within the provided source code. It operates as an stdio server, with external security depending on the MCP gateway configuration.
Updated: 2025-12-06GitHub→
0
0
Medium Cost
alpha-hack-program icon

finance-engine-mcp-rs

by alpha-hack-program

Sec9

Provides sophisticated financial calculation functions for business intelligence and strategic decision-making to AI agents through the Model Context Protocol.

Setup Requirements

  • ⚠️Requires Rust 1.70+ and Cargo for native compilation and execution.
  • ⚠️For vector store integration, a running LlamaStack instance is required, and specific environment variables (VECTOR_STORE_NAME, LLAMA_STACK_HOST, LLAMA_STACK_PORT, LLAMA_STACK_SECURE) must be correctly configured.
  • ⚠️There is a discrepancy in the `calculate_company_health_score` function description: the README states '5 dimensions' with specific weights, while the source code implements '3 dimensions' with proportionally adjusted weights. Users should be aware the code uses 3 metrics (revenue growth, SLA compliance, customer satisfaction).
Verified SafeView Analysis
Input parsing includes robust sanitization and validation for length, null bytes, and control characters to prevent injection-like issues. Flexible deserializers (`deserialize_flexible_f64`, `deserialize_bool_flexible_opt`) improve resilience to varied input formats. Environment variables for LlamaStack integration (`VECTOR_STORE_NAME`, `LLAMA_STACK_HOST`, `LLAMA_STACK_PORT`, `LLAMA_STACK_SECURE`) are read dynamically and not hardcoded, mitigating credential exposure. External network calls are made to configurable LlamaStack endpoints, not arbitrary user-controlled URLs. No direct `eval` or similar dynamic code execution patterns are identifiable in the Rust source code. The project highlights security practices such as non-root container users and CI/CD security audits. Potential risks primarily reside in the security posture of the external LlamaStack dependency and its configuration, which is outside the scope of this project's code.
Updated: 2026-01-16GitHub→
0
0
Low Cost

MCP_Chess_Server

by ssanjanapai

Sec5

A Python-based server that implements the Minecraft Client Protocol (MCP) to host a multiplayer chess game, allowing Minecraft clients to connect and play.

Setup Requirements

  • ⚠️Requires a specific Python version, as indicated by the '.python-version' file, likely managed via 'pyenv' or 'asdf'.
  • ⚠️Dependency management likely requires 'uv' (as 'uv.lock' is present) or another compatible tool for 'pyproject.toml' to install dependencies.
  • ⚠️Requires a Minecraft client to connect to and interact with the chess game, as it's an MCP server.
Review RequiredView Analysis
Without access to the source code (main.py, src directory), it's impossible to definitively check for 'eval' usage, code obfuscation, or specific network vulnerabilities. As a network server, it inherently exposes endpoints that could be targeted, requiring proper input validation, authentication, and robust error handling to mitigate risks. Score reflects a neutral stance due to lack of code access.
Updated: 2025-11-18GitHub→
0
0
Low Cost
flexnst icon
Sec7

Sets up a local LLM environment with Ollama, a web UI (Open-WebUI), and integrates Model Context Protocol (MCP) tools for enhanced LLM capabilities, such as web content retrieval.

Setup Requirements

  • ⚠️Docker is required to run the environment.
  • ⚠️NVIDIA GPU is highly recommended/required for optimal Ollama performance, as specified in `compose.yml` for device reservations. Performance will be significantly degraded without it.
  • ⚠️Specific LLM models (e.g., `qwen2.5:7b`) must be manually pulled into Ollama via `ollama pull` command after initial setup.
  • ⚠️The `FETCH_USER_AGENT` environment variable must be set for the `mcp-proxy` service to function correctly.
Verified SafeView Analysis
The project leverages Docker for service isolation. However, several services are configured with broad `*` for CORS origins (`OLLAMA_ORIGINS: '*'`, `CORS_ORIGINS=*`, `--allow-origin=*`). While common for local development, this poses a security risk if the environment is exposed publicly. The `WEBUI_SECRET_KEY` for Open-WebUI is explicitly set to an empty string, which should be configured with a strong secret in a production environment for proper session management and security. No 'eval' or apparent malicious patterns were found in the provided code.
Updated: 2025-12-09GitHub→
0
0
High Cost
alienxs2 icon

zapomni

by alienxs2

Sec9

An intelligent memory processing and knowledge management system that uses LLMs and vector databases to chunk text, generate embeddings, extract entities, and build a knowledge graph for semantic search and retrieval.

Setup Requirements

  • ⚠️Requires Ollama server running locally (default: http://localhost:11434) with `nomic-embed-text` and `qwen2.5:latest` models pulled.
  • ⚠️Requires FalkorDB server running (default: localhost:6381).
  • ⚠️Requires Redis server running for semantic cache (default: localhost:6379) if caching is enabled.
  • ⚠️Requires SpaCy English language model: `python -m spacy download en_core_web_sm` for entity extraction.
  • ⚠️Requires Python 3.11+.
Verified SafeView Analysis
The project demonstrates good security practices including explicit input validation, parameterized database queries (Cypher), and the use of Pydantic's `SecretStr` for sensitive configurations like database passwords. It also implements a `DNSRebindingProtectionMiddleware` to mitigate DNS rebinding attacks on its SSE server. While `subprocess.run` is used for git commands, it's done without `shell=True` and with direct arguments, reducing command injection risk. External dependencies like Ollama, FalkorDB, and Redis are assumed to be locally hosted or trusted network services.
Updated: 2025-12-05GitHub→
0
0
Medium Cost
holger1411 icon

foxess-mcp-server

by holger1411

Sec8

Enables AI assistants to access, analyze, and optimize solar energy data from FoxESS inverters via the Model Context Protocol.

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️FoxESS API Token must be generated from the legacy v1 portal (foxesscloud.com/login).
  • ⚠️Requires the Claude Desktop application to function as an MCP extension.
Verified SafeView Analysis
The server demonstrates strong security practices including comprehensive input validation, thorough log sanitization, and secure error handling. Disk cache encryption is implemented, but its effectiveness depends on the `cryptography` package being installed and the `FOXESS_CACHE_KEY` environment variable being set; otherwise, it defaults to unencrypted storage. MD5 is used for API signature generation, which is a known cryptographic weakness, but this is a requirement of the FoxESS API and its risk is partially mitigated by the inclusion of a timestamp and HTTPS communication. The internal rate limiter state is not persistent across server restarts, potentially allowing a burst of requests upon reboot.
Updated: 2026-01-18GitHub→
0
0
Low Cost
HeathLoganCampbell icon

SQLServer-MCP

by HeathLoganCampbell

Sec9

Exposes safe, read-focused SQL Server database exploration tools via an HTTP-based Model Context Protocol (MCP) server, primarily for consumption by MCP-compatible clients and agents, often for LLM-driven schema prompting.

Setup Requirements

  • ⚠️Requires .NET SDK 9.0 or later.
  • ⚠️Requires access to a Microsoft SQL Server instance.
  • ⚠️Requires an MCP-compatible client to consume the tools.
Verified SafeView Analysis
The server explicitly restricts `SqlRunQuery` to read-only SELECT statements, preventing write/update/delete operations. Connection strings are managed via standard configuration (appsettings.json or environment variables). 'TrustServerCertificate=True' is mentioned for local development, which should be used with caution in production environments. No 'eval' or obvious malicious patterns found in the provided source.
Updated: 2025-11-30GitHub→
0
0
High Cost
martin-prillard icon

llm-as-a-teacher

by martin-prillard

Sec6

An intelligent tool that uses Large Language Models (LLMs) to evaluate student GitHub projects against project descriptions.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid Service)
  • ⚠️Requires `uv` for dependency management (or `pip`)
  • ⚠️Requires `git` installed locally for cloning repositories
Review RequiredView Analysis
The server uses `subprocess.run` to `git clone` arbitrary GitHub repository URLs provided by the user. While `subprocess.run` with a list of arguments is safer than shell injection, cloning and processing code from untrusted external sources (student projects) without a robust sandboxing mechanism poses a moderate security risk to the host system. Malicious repositories could potentially exploit vulnerabilities in the Git client or other tools, or contain harmful files. There are no direct `eval` calls or hardcoded secrets, and API calls are to standard services (GitHub, OpenAI). Input files (project descriptions) are parsed by established libraries, but handling of `description_file.name` in the Gradio app might warrant extra caution depending on Gradio's internal handling of uploaded file paths.
Updated: 2025-12-02GitHub→
0
0
Low Cost
scottsappen icon
Sec7

Deploys a MotherDuck Model Context Protocol (MCP) server on AWS EC2, exposing it over HTTPS using NGINX and Let's Encrypt, for validation with MCP Inspector.

Setup Requirements

  • ⚠️Requires an AWS account with permissions to create EC2 instances and Security Groups.
  • ⚠️Requires a registered domain to create a subdomain (e.g., mcp.<your-domain>) and configure DNS.
  • ⚠️Requires a MotherDuck database and a valid MotherDuck token.
Verified SafeView Analysis
The server architecture employs good practices (local binding of the MCP server, NGINX reverse proxy, HTTPS with Let's Encrypt). However, the setup guide directs passing the MotherDuck token directly as a command-line argument within a tmux session, which can expose the secret in process lists. The 'Real-World Considerations' section acknowledges this is a sanity check setup and recommends proper security (e.g., systemd for secret management) for production.
Updated: 2025-12-12GitHub→
PreviousPage 468 of 760Next