Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
bfs icon
Sec9

Provides an MCP server for querying Census American Community Survey (ACS) data, supporting geographic lookups, data discovery, and percentile-based rankings.

Setup Requirements

  • ⚠️Requires Node.js 24+ (LTS).
  • ⚠️Requires pre-generated DuckDB databases (68GB and 75GB) from the `census_acs_duckdb_importer` project, demanding significant disk space.
  • ⚠️Requires creating a symlink to the database directory (e.g., `ln -s /path/to/census_acs_duckdb_importer/output db`).
Verified SafeView Analysis
The server uses parameterized SQL queries via DuckDB, which helps prevent SQL injection vulnerabilities. Database connections are set to READ_ONLY mode, reducing the risk of data modification. No 'eval' or obvious obfuscation found. Environment variables are used for configuration, avoiding hardcoded secrets. JSON parsing of `labels_data` from pre-processed database content is assumed safe given its source.
Updated: 2026-01-19GitHub→
0
0
High Cost
LautaroMartVillalba icon

MCP-Server

by LautaroMartVillalba

Sec3

A Spring Boot REST API for hotel, room, reservation, customer, and address management, designed to be integrated with AI orchestration.

Setup Requirements

  • ⚠️Java 17+ required
  • ⚠️Maven required
  • ⚠️PostgreSQL database required (or adapt `application.yml`)
  • ⚠️Full functionality as an MCP server implies integration with an external LLM (e.g., OpenAI, Anthropic) configured via Spring AI.
Verified SafeView Analysis
The `SecurityConfig` (src/main/java/ar/mcp/server/config/SecurityConfig.java) explicitly disables CSRF protection, allows all origins for CORS, and sets all `/api/**`, `/mcp/**`, and `/sse/**` endpoints to `permitAll()` (no authentication/authorization). JWT authentication is marked as a TODO. This configuration is highly insecure for production deployment but is common for initial development. The `application.yml` contains default local database credentials (hotelms/hotelms) which are not suitable for production.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
graphyte-labs icon

kanbanflow-mcp-server

by graphyte-labs

Sec9

Provides a Model Context Protocol (MCP) interface for read-only access to KanbanFlow boards and tasks.

Setup Requirements

  • ⚠️Requires a KanbanFlow API Key (KANBANFLOW_API_KEY) to function.
  • ⚠️Requires Deno runtime to be installed.
  • ⚠️Authentication (MCP_SERVER_AUTH_TOKEN) is optional and disabled if the environment variable is not set, posing a security risk if deployed publicly without configuration.
Verified SafeView Analysis
The server uses environment variables for sensitive API keys and authentication tokens, preventing hardcoding. It implements optional bearer token authentication for the MCP endpoint. Input validation for tools is performed using Zod schemas. Deno's explicit `--allow-net` and `--allow-env` permissions are used, which are necessary but broad for server operation. No 'eval' or similar dangerous patterns were found. Error handling is present to avoid leaking internal details.
Updated: 2026-01-19GitHub→
0
0
Low Cost
BruceTrevarthen icon

syncaida-mcp-server

by BruceTrevarthen

Sec9

Provides an MCP server to connect AI clients like Claude Code to Syncaida workspace features, enabling AI-powered whiteboard, diagram, task, and workboard management.

Setup Requirements

  • ⚠️Requires Node.js 18 or higher.
  • ⚠️Requires a Syncaida API token, which must be generated in the Syncaida web application (Users & Security > API Tokens).
  • ⚠️Requires an AI client compatible with the Model Context Protocol (MCP), such as Claude Code, configured to use this server.
Verified SafeView Analysis
The source code is transparent, does not use 'eval' or other obfuscation techniques. API tokens are securely loaded from environment variables or a user-specific configuration file, not hardcoded. Network calls are outbound to a well-defined Syncaida API endpoint with standard bearer token authentication. Tool inputs are schema-validated, reducing risk of arbitrary injection. The primary security considerations involve the security of the Syncaida API itself and the user's handling of their API token.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
seanhalberthal icon

supplyscan-mcp

by seanhalberthal

Sec9

A security scanner for JavaScript ecosystem lockfiles, detecting supply chain compromises and known vulnerabilities.

Setup Requirements

  • ⚠️Requires Go 1.23+.
  • ⚠️For 'go install' method, requires $GOPATH/bin to be in system PATH.
  • ⚠️GitHub API rate limits may be encountered during IOC database refreshes without a GITHUB_TOKEN, impacting performance and potentially causing fetch failures.
Verified SafeView Analysis
The server is built in Go, inherently making it immune to typical JavaScript supply chain attacks. It fetches Indicators of Compromise (IOC) from reputable public sources (DataDog, GitHub Advisory Database) and integrates with the npm audit API. There are no indications of 'eval' usage, code obfuscation, or hardcoded sensitive secrets within the provided source. Network calls are made to known security-related APIs and public data sources. File system operations are confined to reading lockfiles and managing a local cache. The custom JSONC parser includes robust handling for comments and strings, preventing misinterpretation of code or data. The dependency on an optional GitHub token for higher API rate limits is appropriately handled.
Updated: 2026-01-08GitHub→
0
0
Low Cost
mircorudolph icon

mcp-tool

by mircorudolph

Sec9

Implements a toy Model Context Protocol (MCP) server providing simple tools for random animal selection and dice rolling, primarily for demonstrating and integrating with LLMs via the MCP SDK.

Setup Requirements

  • ⚠️Python 3.12+ required
  • ⚠️Anthropic MCP SDK (`mcp[cli]`) required
Verified SafeView Analysis
The server is simple and stateless, implementing two basic tools without any direct user input parsing or complex logic that could introduce vulnerabilities. It uses standard Python libraries (`random`, `logging`, `os`) and the official `mcp` SDK. No 'eval' or similar dangerous functions are used. `os.getenv` for `LOG_LEVEL` is handled safely. Given its minimal scope and direct implementation, the risk is very low.
Updated: 2025-11-25GitHub→
0
0
Low Cost
mdlopresti icon

loom-warp

by mdlopresti

Sec8

Provides a distributed agent communication infrastructure using NATS JetStream for features like agent registry, channel-based messaging, direct messaging, and a work queue system.

Setup Requirements

  • ⚠️Requires a running NATS server with JetStream enabled (e.g., `nats-server -js`). A `docker-compose.yml` is provided for local setup of NATS.
  • ⚠️For production deployments, a Kubernetes cluster (v1.28+), `kubectl`, and a storage provisioner for PersistentVolumeClaims are essential.
  • ⚠️Configuration is loaded from `.mcp-config.json` in the project directory (or parent directories) or `~/.nats-mcp/config.json`, with environment variables taking highest precedence.
Verified SafeView Analysis
The codebase appears robust against common application-level vulnerabilities. No 'eval', obfuscation, or hardcoded secrets were found. NATS credentials are sourced from environment variables or URL parsing. The primary security considerations are in the deployment environment, particularly ensuring proper network access controls (e.g., Kubernetes NetworkPolicies, cloud provider security groups) for the NATS server, especially when exposed via a LoadBalancer. Extensive use of JSON.parse is mitigated by validation layers for incoming messages and registry entries.
Updated: 2025-12-12GitHub→
0
0
Low Cost
drkhannah icon
Sec9

This server provides a streamable HTTP API for retrieving real-time cryptocurrency prices using CoinGecko.

Setup Requirements

  • ⚠️Requires Python 3.12 or higher
Verified SafeView Analysis
The code makes external HTTP requests to a known public API (CoinGecko) using standard practices. There are no 'eval' or similar dangerous functions detected. User input (crypto symbol) is used in query parameters, not directly in the URL path, mitigating injection risks. No hardcoded secrets are present in the provided code.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
Flowmatic-AI icon

sherlock-mcp-docs

by Flowmatic-AI

Sec2

This MCP server provides Dutch RVO data for subsidies, meldcodes, and address information, offering structured analysis and reporting capabilities for LLM clients.

Setup Requirements

  • ⚠️No authentication required or active, leading to public access to all server capabilities and data.
  • ⚠️Requires an MCP-compatible client (e.g., FastMCP Python client, Claude Desktop, VS Code MCP-plugin) to interact with the server.
Review RequiredView Analysis
The server explicitly states 'geen authenticatie actief (iedere client met de URL kan verbinden)'. This means there is no authentication layer, making the server and any data it exposes publicly accessible to anyone with the URL. This is a critical security vulnerability, as sensitive RVO data and tools are unprotected.
Updated: 2025-11-25GitHub→
0
0
Low Cost
Sameernayeema8 icon

MCP-Server

by Sameernayeema8

Sec9

This server exposes an LLM with tools to interact with the PokéAPI, enabling it to fetch Pokémon data, list popular Pokémon, and assemble tournament squads.

Setup Requirements

  • ⚠️Requires Python 3.13+ as specified in `pyproject.toml`, which contradicts the `README.md`'s mention of Python 3.8+.
  • ⚠️Node.js may be required for certain LLM hosts, though not explicitly for the Python server itself.
Verified SafeView Analysis
The server uses `httpx` to interact with `pokeapi.co`. User input for Pokémon names is directly inserted into the API URL after being lowercased. There are no obvious `eval`, `exec`, or similar dangerous patterns. No hardcoded secrets or sensitive credentials are present in the provided source code. The main risk, if any, would be the robustness of the external PokéAPI to malformed inputs, which is outside this server's control.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
1olegshev icon

mcp-servers

by 1olegshev

Sec9

Synthesizes comprehensive release status reports by coordinating data from Jira and Slack servers, often for daily release readiness checks.

Setup Requirements

  • ⚠️Requires manual update of project paths in `.vscode/mcp.json`.
  • ⚠️API access tokens for Slack (XOXC/XOXD session tokens require browser extraction), Jira, and Confluence must be manually obtained and configured in the root `.env` file.
  • ⚠️For advanced Slack analysis features (issue detection, test classification), a local Ollama server must be running (e.g., `ollama serve`) with the specified Qwen3 model, requiring local LLM setup and suitable hardware.
Verified SafeView Analysis
The server correctly isolates sensitive API tokens by loading them from environment variables via a shared `env-loader.ts` utility, with explicit warnings in `MCP_SETUP.md` against hardcoding. Its primary mode of operation involves making internal MCP calls to other local Slack and Jira servers via `stdio` transport, which is a secure communication pattern. The Slack MCP server, a dependency, implements a critical security feature: it restricts the `send_message` tool to only the `#qa-release-status` channel, preventing arbitrary message posting. The Slack server also uses a local Ollama instance for LLM-based analysis, keeping data localized. The primary security concern lies with the powerful Slack `XOXC`/`XOXD` session tokens, which grant full user-level access and are equivalent to user credentials. Operators must ensure these tokens, along with Jira/Confluence API tokens, are managed with extreme care and never committed to version control. While the server's code handles these tokens securely, their inherent high privilege poses an operational risk if compromised externally.
Updated: 2026-01-19GitHub→
0
0
Low Cost
chidamodu icon

MCP_server_knowhow

by chidamodu

Sec10

To practice and experiment with different implementations using a Minecraft Coder Pack (MCP) server.

Setup Requirements

  • ⚠️Requires a pre-existing or separately set up Minecraft Coder Pack (MCP) server environment to be useful for its stated goal.
Verified SafeView Analysis
The provided 'SOURCE CODE' only contains a README.md file. No executable code was available for security analysis. Thus, no 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns were found within the provided content.
Updated: 2026-01-17GitHub→
PreviousPage 489 of 760Next