Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
M0hitMehra icon

mcp-server

by M0hitMehra

Sec1

This server acts as a Model Context Protocol (MCP) provider, exposing MongoDB database operations (CRUD, listing databases/collections, and advanced identifier-aware search) as callable tools for AI agents.

Setup Requirements

  • ⚠️CRITICAL: Hardcoded MongoDB Atlas connection URI (username/password included) in source code; MUST be externalized and secured.
  • ⚠️Requires a running MongoDB Atlas instance (or compatible MongoDB server).
  • ⚠️Client interactions require a Google Gemini API Key (`GEMINI_API_KEY`).
  • ⚠️Requires `tsx` (TypeScript eXecutor) to run directly from source files.
Review RequiredView Analysis
CRITICAL: Hardcoded production MongoDB connection URI with username and password (`finconic-dev:f0WW8QlcQxZwErVq`) is present in both `dserver.js` and `server.ts`. The server exposes an unauthenticated HTTP API (if `TRANSPORT=http` or `HTTP_PORT` is set) with permissive CORS (`*`), allowing any client to invoke MongoDB CRUD and query tools with arbitrary arguments, directly leveraging these hardcoded, high-privileged credentials. The 'query-documents' tool's filter parameter accepts `z.record(z.any())`, enabling arbitrary MongoDB filter objects, which is extremely dangerous without robust authentication and authorization.
Updated: 2025-11-24GitHub→
0
0
Low Cost
Sec9

Implements a retail demand forecasting Model Context Protocol (MCP) server that predicts product demand using sales data, seasonal events, and generates AI-powered explanations.

Setup Requirements

  • ⚠️Requires OpenRouter API Key (Paid service likely)
Verified SafeView Analysis
The API key is loaded securely from environment variables. There is no explicit use of `eval` or direct arbitrary code execution from untrusted user input. Data loading is from local, predefined JSON/CSV files. LLM interaction is through the `openai` library, which is a standard and generally secure way to interact with AI services. The input parameter `category` is used for DataFrame filtering and prompt construction, which is a safe pattern.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
naumanstafona icon

MCP_server_Playwright

by naumanstafona

Sec1

Automated end-to-end UI testing for a web application using Playwright, including multi-factor authentication (OTP via Gmail).

Setup Requirements

  • ⚠️Requires manual intervention for Gmail CAPTCHA or security challenges during OTP retrieval.
  • ⚠️Relies on specific, hardcoded 'nauman@trackstack.app' and 'nauman+autol@trackstack.app' test accounts and their passwords, which will need to be replaced for different environments or users.
  • ⚠️The `@playwright/mcp` package (Managed Continuous Playback) needs to be installed and run to use this as an 'MCP Server'.
Review RequiredView Analysis
CRITICAL: Hardcoded Gmail account credentials (`GMAIL_USER`, `GMAIL_PASS`) and Trackstack login credentials (`TRACKSTACK_EMAIL`) are present directly in the source code (`helpers/login.ts`, `tests/LogintoApplication_New.spec.ts`, `tests/login-to-trackstack-using-gmail-otp.spec.ts`). This is a severe security vulnerability, exposing sensitive information if the repository is publicly accessible or compromised. Credentials must be loaded from secure environment variables or a secrets management system.
Updated: 2025-11-19GitHub→
0
0
Low Cost
Sec6

An expense tracking application designed for personal financial management, featuring both local and potential remote data synchronization capabilities.

Setup Requirements

  • ⚠️Requires a specific Python version as defined in the `.python-version` file.
  • ⚠️Requires Python dependencies to be installed via `uv` or `pip` using the `pyproject.toml` configuration.
Review RequiredView Analysis
As a server application, this project inherently involves network exposure, particularly indicated by `Remote_expense.py`. Without a thorough code review, the implementation of critical security measures such as authentication, authorization, input sanitization, and secure communication protocols cannot be verified. The presence of `validation.json` suggests an awareness of input validation, which is a positive sign.
Updated: 2025-11-17GitHub→
0
0
Medium Cost

mcp-server

by kmo-dev

Sec7

A custom or modified Minecraft server implementation, likely related to the Minecraft Coder Pack (MCP) for mod/plugin development.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) 8+ (or a compatible version) to build and run.
  • ⚠️Maven is required to build the project from source.
  • ⚠️May require specific Minecraft server configuration files (e.g., server.properties) to function correctly after building.
Review RequiredView Analysis
A comprehensive security audit is impossible without access to the source code. The project is identified as a Java/Maven application (due to `pom.xml`). General risks include dependencies declared in `pom.xml`, potential vulnerabilities in custom server logic, and network exposure. No obvious 'eval' or obfuscation indicators are present from the file list alone.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
BACH-AI-Tools icon

mcp-google-maps

by BACH-AI-Tools

Sec7

This MCP server provides an interface for Google Maps functionalities, enabling programmatic access to places search, geocoding, directions, elevation data, and static map generation through the Model Context Protocol.

Setup Requirements

  • ⚠️Requires a paid Google Maps API Key to be configured as `GOOGLE_MAPS_API_KEY` environment variable.
Verified SafeView Analysis
The server uses environment variables for the Google Maps API key, which is good practice. It explicitly includes a caution within the code (`src/services/map-directions.ts`) that static map URLs generated contain the API key and should not be sent directly to clients, indicating developer awareness of a potential exposure vector. No direct 'eval' or malicious patterns were found. DNS rebinding protection is enabled for the HTTP transport. The overall security relies heavily on correct configuration of environment variables and cautious handling of generated URLs by downstream consumers.
Updated: 2025-12-04GitHub→
0
0
Low Cost
marc-shade icon

coral-tpu-mcp

by marc-shade

Sec6

Provides fast, local, hardware-accelerated ML inference (image classification, object detection, pose estimation, semantic segmentation, audio classification, keyword spotting) and text embeddings for AI agentic systems using Google Coral TPUs.

Setup Requirements

  • ⚠️Requires dedicated Google Coral Edge TPU hardware (USB or PCIe accelerator) for accelerated inference. Falls back to CPU for text embeddings.
  • ⚠️Requires specific `pycoral` and `tflite-runtime` Python libraries, which often need platform-specific installation steps (e.g., specific wheels or setup procedures for Linux, macOS, or Windows).
  • ⚠️Text embedding functionality requires the `sentence-transformers` library (CPU-based).
  • ⚠️Audio processing (keyword spotting, audio classification) functionality requires the `librosa` library.
Review RequiredView Analysis
The `AGENTIC_SYSTEM_PATH` environment variable is used to dynamically add a directory to `sys.path` for importing the `tpu_monitor` module. If this environment variable is controlled by an untrusted entity, it could lead to arbitrary code execution through Python module injection, posing a Remote Code Execution (RCE) vulnerability. While model file validation (checksums, size, extension) is implemented to mitigate risks during model loading, this does not address the `sys.path` injection vector. The server uses stdio for communication and does not appear to open direct network listeners.
Updated: 2025-12-29GitHub→
0
0
Low Cost
angusforeman icon

simple-MCP-harness

by angusforeman

Sec8

A command-line REPL tool for interactively exploring and testing MCP server capabilities.

Setup Requirements

  • ⚠️Requires Python 3.11 or higher.
  • ⚠️Requires an MCP server executable to be running locally, specified in a '.env' file.
  • ⚠️Initial setup involves copying '.env.example' and configuring the MCP_SERVER_COMMAND.
Verified SafeView Analysis
The harness is designed to execute arbitrary user-defined commands (MCP_SERVER_COMMAND) to connect to a server. This is its core function and inherently powerful. Users must ensure the commands specified in their '.env' file are trusted, as this could lead to arbitrary code execution if compromised. The code itself does not contain obvious malicious patterns like 'eval' or hardcoded secrets, and it includes checks for executable existence. Security depends heavily on the user's management of the '.env' file.
Updated: 2025-12-03GitHub→
0
0
Low Cost
guilhermetechmakers icon
Sec10

A minimal client-side web application template built with React, TypeScript, and Vite, serving as a boilerplate for frontend development.

Verified SafeView Analysis
The provided source code is a standard client-side React + Vite boilerplate. It contains no server-side logic, direct network requests, hardcoded secrets, `eval` statements, or obfuscation. It is very low risk in its current form.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
Honeyfield-Org icon

sevdesk-mcp

by Honeyfield-Org

Sec9

An MCP Server providing comprehensive tools for managing financial data and business operations within the sevDesk Accounting API, including contacts, invoices, credit notes, orders, vouchers, transactions, and inventory parts.

Setup Requirements

  • ⚠️Requires `SEVDESK_API_TOKEN` environment variable to be set for authentication.
  • ⚠️Requires Node.js version 18 or higher.
Verified SafeView Analysis
The server demonstrates good security practices by requiring the API token via an environment variable and using Zod for input validation on tool arguments, which helps prevent common injection vulnerabilities. It utilizes `axios` for HTTP requests, a well-regarded library, and includes error interception for API responses. The server uses StdioServerTransport, limiting its network exposure to standard I/O streams as intended by the MCP specification. There are no obvious signs of 'eval', obfuscation, hardcoded sensitive credentials within the codebase, or direct arbitrary file system access beyond module loading.
Updated: 2026-01-16GitHub→
0
0
Medium Cost
Azteron icon
Sec5

The Codesona MCP Server provides team coding standards via stdio transport to AI assistants in IDEs, fetching rules from the Codesona API and supporting rule suggestion.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️Requires a Codesona workspace API key for operation.
  • ⚠️Running in 'development' mode (`NODE_ENV=development`) disables TLS certificate verification, posing a security risk to API communication.
Verified SafeView Analysis
The server explicitly disables TLS certificate verification (`rejectUnauthorized: false`) when `NODE_ENV` is set to 'development'. This is a critical security risk as it makes the server vulnerable to Man-in-the-Middle (MITM) attacks against the Codesona API in development environments. While conditional, it exposes a significant vulnerability that users should be aware of. No hardcoded secrets or obvious malicious patterns were found, and `CODESONA_API_KEY` is loaded from environment variables.
Updated: 2025-11-22GitHub→
0
0
Low Cost

MCP_Slack_Server

by dadavidtseng

Sec4

Provides a backend server to integrate and interact with the Slack messaging platform, potentially for a project named 'MCP'.

Setup Requirements

  • ⚠️Requires a Slack Bot Token (xoxb-...) for API access.
  • ⚠️Requires a Slack Signing Secret for verifying incoming requests (webhooks).
  • ⚠️If receiving Slack webhooks, it requires a publicly accessible URL or a tunneling solution (e.g., Ngrok) pointing to the server.
Review RequiredView Analysis
Source code not provided. Analysis is based solely on the repository name. As a server interacting with Slack, it inherently involves handling sensitive API tokens/secrets and exposing network endpoints. Without code review, critical risks such as hardcoded secrets, improper input validation, denial-of-service vulnerabilities, or unauthenticated endpoints cannot be assessed. It is considered unsafe to run without a thorough security audit of the actual code.
Updated: 2025-11-25GitHub→
PreviousPage 476 of 760Next