Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

55
1
High Cost
final0920 icon

mcp-worklog

by final0920

Sec9

Automates the generation and management of daily work reports, including collecting content from AI tool sessions for summarization and editing.

Setup Requirements

  • ⚠️Requires a '--storage-path' argument to specify where daily reports are saved.
  • ⚠️AI session collection (Claude Code, Kiro, Cursor) is dependent on the user having these tools installed and their data files existing in standard locations, otherwise, no sessions will be collected.
  • ⚠️Requires Python 3.10 or newer.
Verified SafeView Analysis
The server operates locally using standard I/O and reads/writes files in a user-specified directory. AI session collectors access predefined application data paths (e.g., ~/.claude, %APPDATA%/Kiro, %APPDATA%/Cursor). The CursorCollector uses SQLite with a hardcoded query key, which reduces SQL injection risk. No explicit 'eval' or direct external network calls (beyond standard MCP communication) are apparent from the provided code, nor any hardcoded secrets. File operations are controlled and limited to expected paths for its functionality, and no arbitrary file access based on user input is observed.
Updated: 2025-12-11GitHub→
55
1
Medium Cost

pipe-dream-mcp

by ryanmichaeljames

Sec9

Enables AI agents to securely interact with Microsoft Dataverse for querying, retrieving, and managing data.

Setup Requirements

  • ⚠️.NET 10.0 SDK required
  • ⚠️Azure CLI required
  • ⚠️Azure subscription with Dataverse access required
  • ⚠️Must run `az login` to authenticate
Verified SafeView Analysis
Utilizes Azure CLI for secure token-based authentication to Microsoft Dataverse; no direct 'eval' or obfuscation is indicated. Standard network interaction for data operations.
Updated: 2025-11-19GitHub→
55
1
Low Cost
portertech icon
Sec9

Provides AI assistants with remote control over LM Studio models, enabling management actions like listing, loading, and unloading models through the LM Studio API.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️Requires LM Studio to be running with its local server enabled.
  • ⚠️When running via Docker on macOS/Windows, `LMSTUDIO_HOST` must be set to `host.docker.internal` to connect to LM Studio on the host machine.
Verified SafeView Analysis
The server employs robust practices including input validation via Zod schemas, consistent error handling with a `safeToolHandler` wrapper to prevent unhandled exceptions, and configurable LM Studio connection details through environment variables rather than hardcoded secrets. It utilizes established SDKs (`@lmstudio/sdk`, `@modelcontextprotocol/sdk`). Logs from the LM Studio SDK are correctly routed to stderr to maintain protocol-safe stdout. No direct `eval` or similarly dangerous patterns executing arbitrary user input were identified.
Updated: 2026-01-16GitHub→
54
117
High Cost
browserstack icon

mcp-server

by browserstack

Sec2

This server acts as a comprehensive testing platform, enabling users to manage, execute, debug, and fix tests for web and mobile applications on BrowserStack's cloud infrastructure using natural language prompts and AI integrations.

Setup Requirements

  • ⚠️Requires Node.js version >= 18.0.0 (enforced at startup).
  • ⚠️Requires BrowserStack API credentials (BROWSERSTACK_USERNAME, BROWSERSTACK_ACCESS_KEY) to be set as environment variables.
  • ⚠️For testing local/private URLs, the BrowserStack Local binary may need to be installed and running, or managed by the server.
  • ⚠️Many tools require additional language-specific SDKs (e.g., npm, pip, gem, dotnet) to be installed in the user's project environment.
Review RequiredView Analysis
The `runPercyScan` tool executes a user-provided `percyRunCommand` directly, which is a critical command injection vulnerability if user input is not carefully constrained or sanitized. Additionally, `execSync` is used in `src/lib/local.ts` to manage the BrowserStackLocal binary, which poses a lower but still present risk for code execution. While `sanitizeUrlParam` is used for some URL components and `apiClient` performs URL validation, the direct execution of arbitrary commands in `runPercyScan` is a severe risk.
Updated: 2026-01-14GitHub→
54
59
Low Cost
xakpc icon

anymcp-io

by xakpc

Sec7

A static site catalog for discovering and browsing single-file .NET MCP (Model Context Protocol) servers.

Setup Requirements

  • ⚠️Contributing C# MCP servers requires targeting .NET 10 Preview 4+.
  • ⚠️Contributed C# files must include specific YAML front matter within C# comments.
  • ⚠️Contributed C# servers must use the ModelContextProtocol package version 0.3.0-preview.3 or later.
Verified SafeView Analysis
The project is a static site generator. The primary security considerations are at build-time, particularly related to the processing of contributed C# server files (`mcp/*.cs`). The `servers.js` script reads these files and parses their YAML front matter and extracts C# code as strings. There is no direct execution of the C# code within the Node.js build process, which limits direct code execution vulnerabilities. However, if unvetted malicious C# content (e.g., embedded HTML/JS) is not properly escaped when rendered into the Nunjucks templates (e.g., in `servers.njk`), it could lead to Cross-Site Scripting (XSS) on the generated static website. No explicit use of `eval` or intentional obfuscation was found in the provided JavaScript code. Hardcoded secrets are not present in the catalog's source code; environment variables are specified as requirements for the *contributed MCP servers* themselves.
Updated: 2025-12-10GitHub→
54
115
High Cost
helixml icon

kodit

by helixml

Sec9

Kodit is a code intelligence platform that indexes code repositories to enable enhanced AI code generation, semantic search, and documentation.

Setup Requirements

  • ⚠️Requires Python 3.9+ to run.
  • ⚠️Requires a PostgreSQL or SQLite database for persistent storage.
  • ⚠️Requires API access to an LLM provider (e.g., OpenAI, Anthropic, or a compatible LiteLLM endpoint) for code enrichment and semantic search capabilities. This is a paid service and token usage can be high.
  • ⚠️Using local LLM models for embeddings and enrichment may require significant CPU/GPU resources and disk space for model downloads.
Verified SafeView Analysis
The server processes external Git repositories, which inherently carries some risk. However, it utilizes established and mature Git libraries (Dulwich, GitPython, PyGit2) to perform Git operations, reducing the risk of command injection. API key authentication is supported for the REST API, and environment variables are used for sensitive configurations, following good security practices. No obvious malicious patterns or unsafe `eval()`/`exec()` calls were found outside expected library usage.
Updated: 2026-01-19GitHub→
54
112
Medium Cost
VictoriaMetrics-Community icon

mcp-victoriametrics

by VictoriaMetrics-Community

Sec9

Acts as a Model Context Protocol (MCP) server for VictoriaMetrics, enabling AI integration for monitoring, observability, and debugging tasks through its APIs and embedded documentation.

Setup Requirements

  • ⚠️Requires a running VictoriaMetrics or VictoriaMetrics Cloud instance to connect to.
  • ⚠️Requires an MCP client (e.g., Cursor, Claude Desktop, VS Code, Zed, JetBrains IDEs) to interact with the server.
  • ⚠️Requires Go 1.24+ if building from source, otherwise Docker can be used for easier deployment.
  • ⚠️Authentication to VictoriaMetrics requires either `VM_INSTANCE_ENTRYPOINT` and `VM_INSTANCE_TYPE` (for self-hosted instances) or `VMC_API_KEY` (for VictoriaMetrics Cloud) to be configured.
Verified SafeView Analysis
The server uses environment variables for sensitive credentials like API keys and bearer tokens, which is a good practice. It processes user input for queries, relabeling, and rule testing, but the Go implementation appears to use trusted internal libraries (e.g., `metricsql.Prettify`, `vmalert-tool/unittest`) and standard HTTP client practices with URL encoding, reducing the risk of direct command injection or arbitrary code execution. Temporary files are created for rule testing, which is handled via `os.MkdirTemp` and `os.WriteFile`, followed by an internal library call, minimizing external command execution risks. No obvious obfuscation or highly dangerous patterns like `eval` in the Go runtime were found.
Updated: 2026-01-13GitHub→
54
132
Medium Cost
ai-zerolab icon

mcp-email-server

by ai-zerolab

Sec8

This server allows MCP clients to interact with email accounts via IMAP and SMTP protocols, enabling functionalities like listing, fetching, sending, and deleting emails.

Setup Requirements

  • ⚠️Requires IMAP and SMTP account credentials (host, port, username, password) for configuration.
  • ⚠️Recommended to use `uv` for environment management and installation, as per documentation (`uv sync`, `uv run`).
  • ⚠️The attachment download feature is disabled by default and must be explicitly enabled for security reasons.
Verified SafeView Analysis
The server relies on user-provided IMAP/SMTP credentials. The `download_attachment` tool allows saving attachments to a user-specified path, which could lead to arbitrary file writes if running with elevated privileges and combined with a malicious client providing an unsanitized path. However, this feature is explicitly disabled by default and requires user opt-in. File attachments for outgoing emails are validated to ensure they are actual files and exist. A Codecov token is hardcoded in `codecov.yaml`, which is a minor repository-level information leak but does not directly impact the runtime security of the server itself.
Updated: 2026-01-19GitHub→
54
130
Low Cost
Dicklesworthstone icon

ultimate_mcp_server

by Dicklesworthstone

Sec8

The Ultimate MCP Server acts as a comprehensive AI agent operating system, providing advanced AI agents access to a rich ecosystem of tools, cognitive systems, and specialized services via the Model Context Protocol for cognitive augmentation, tool use, and intelligent orchestration.

Setup Requirements

  • ⚠️Requires Python 3.13+ and configuration of at least one LLM provider API key in a `.env` file.
  • ⚠️Many powerful features (e.g., browser automation with Playwright, OCR with Tesseract, Excel automation with COM objects) require additional system-level dependencies or specific operating system environments.
  • ⚠️Secure and effective use of filesystem and other powerful tools critically depends on strictly defining `FILESYSTEM__ALLOWED_DIRECTORIES` and other access control settings to prevent unintended access.
Verified SafeView Analysis
The server explicitly addresses common security concerns like API key management, network exposure, input validation (preventing directory traversal, SQL injection), and sandboxing for Python execution and browser automation. It emphasizes proper configuration of `FILESYSTEM__ALLOWED_DIRECTORIES` for filesystem tools and recommends external measures for authentication, authorization, and rate limiting. Dynamic API integration and arbitrary Python execution in the sandbox are high-privilege operations that rely on robust isolation and user vigilance but are handled with clear controls. However, any sandbox has inherent complexity, and the ultimate safety relies heavily on correct user configuration and vigilance.
Updated: 2026-01-19GitHub→
54
63
Medium Cost
portel-dev icon

ncp

by portel-dev

Sec9

NCP acts as a universal adapter and orchestrator for Model Context Protocol (MCP) servers and tools. It provides a unified interface for discovery, execution, and management of diverse tools (local CLI, HTTP APIs, internal plugins/Photons, AI skills) through natural language and structured code interaction, enabling AI agents to interact with the broader digital ecosystem.

Setup Requirements

  • ⚠️Requires Node.js runtime environment (v18+ recommended)
  • ⚠️Initial discovery indexing (including downloading embedding models) can be slow on first run and requires internet access
  • ⚠️Enabling global CLI access (symlinking /usr/local/bin/ncp) may require sudo permissions
  • ⚠️Secure credential storage relies on platform-specific keyring services (e.g., macOS Keychain, Windows Credential Manager)
Verified SafeView Analysis
NCP features a robust multi-layered security architecture, including an `CodeAnalyzer` and `SemanticValidator` to detect dangerous patterns in user-provided code, sandboxed execution environments (`IsolatedVMSandbox`, `SubprocessSandbox`), a `NetworkPolicyManager` requiring elicitation for network access, secure credential storage (`SecureCredentialStore`), and input validation against dangerous shell commands. User consent is elicited for potentially sensitive operations.
Updated: 2026-01-17GitHub→
54
61
Low Cost
agntcy icon
Sec8

Provides currency exchange rate and trading tools via an MCP (Multi-Agent Communication Protocol) server, integrating with an identity service for authentication and authorization.

Setup Requirements

  • ⚠️Requires Docker for easy setup alongside other services.
  • ⚠️Relies on external `IDENTITY_SERVICE_GRPC_SERVER_URL` and `IDENTITY_SERVICE_API_KEY` which must be correctly configured.
  • ⚠️Requires an external `CURRENCY_EXCHANGE_API_URL` for fetching exchange rates, which needs to be a trusted source.
Verified SafeView Analysis
The MCP server is built on FastAPI and uses modern HTTP clients (httpx). It delegates authentication and authorization to an external 'AGNTCY Identity Service' via a custom middleware (`IdentityServiceMCPMiddleware`). This middleware ensures that incoming requests are authorized using an API key and are linked to a specific tool or agent. No obvious direct 'eval' or raw system command execution is observed in the truncated sample code for the MCP server itself. Input validation for the `trade_currency_exchange` and `get_currency_exchange_rate` tools is critical but not fully visible in the truncated tool definitions; assuming FastAPI's typing provides some level of validation. A potential risk lies in the `CURRENCY_EXCHANGE_API_URL` environment variable, which, if misconfigured or pointing to a malicious external API, could lead to data integrity issues or SSRF (Server-Side Request Forgery) vulnerabilities. The overall security of this MCP server strongly depends on the robustness and proper configuration of the external Identity Service it relies on, which in development setup uses weak default credentials (e.g., 'postgres' password, 'default' vault token) as noted in the main backend's `env_setup.sh` script.
Updated: 2026-01-19GitHub→
54
135
Medium Cost
nulab icon
Sec9

This MCP server integrates Backlog API with AI agents like Claude to manage projects, issues, and wikis, providing a conversational interface for project management tasks.

Setup Requirements

  • ⚠️Requires a Backlog account with API access.
  • ⚠️Requires a Backlog API key configured via the `BACKLOG_API_KEY` environment variable.
  • ⚠️Requires the Backlog domain configured via the `BACKLOG_DOMAIN` environment variable.
Verified SafeView Analysis
Sensitive API keys and domain are loaded from environment variables, preventing hardcoding. Input validation is extensively used with Zod schemas to mitigate common vulnerabilities. Error handling converts backend API errors into a standardized format, avoiding information leakage. The server operates over stdio, reducing direct network exposure. No 'eval' or other direct malicious patterns were found.
Updated: 2026-01-09GitHub→
PreviousPage 49 of 760Next