Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
ulasbilgen icon

mcp2rest

by ulasbilgen

Sec4

Manages multiple Model Context Protocol (MCP) servers and exposes their tools via a universal REST API, enabling access from any programming language.

Setup Requirements

  • ⚠️Requires Node.js >= 18.0.0.
  • ⚠️The REST API is unauthenticated; exposing it on a public network interface (e.g., 0.0.0.0) grants full control to anyone.
  • ⚠️Configuration files store API keys and other secrets in plaintext.
  • ⚠️Requires PM2 to be installed for robust service management (auto-installed via `npx pm2` if not present).
Review RequiredView Analysis
The REST API lacks built-in authentication and authorization. If the gateway is configured to listen on a non-localhost address (e.g., 0.0.0.0), it will be publicly accessible, allowing anyone to add/remove servers or execute tools. Configuration files (`~/.mcp2rest/config.yaml`) store API keys and other secrets in plaintext. While `npx` execution of child processes is generally safer than raw shell commands, the potential for a malicious MCP server package or unsanitized arguments passed to a spawned server could lead to vulnerabilities in the child process environment.
Updated: 2025-11-23GitHub→
0
0
High Cost
stringtheoryaccelerator icon

publicmcp

by stringtheoryaccelerator

Sec7

Automates checking fire danger levels and applying for burn permits in Maine using web scraping.

Setup Requirements

  • ⚠️Requires Node.js (v18 or higher recommended) and npm/yarn.
  • ⚠️Requires Chrome/Chromium to be installed locally for Puppeteer to function.
  • ⚠️Web scraping can be fragile and break if target websites change their HTML structure, requiring code updates.
Verified SafeView Analysis
The server uses Puppeteer, which is a powerful web automation tool. It explicitly uses `--no-sandbox` for Puppeteer, which can pose a security risk if the environment is not adequately isolated or if the server were to navigate to a malicious, unvetted URL. However, the tools are hardcoded to interact with specific Maine government websites, reducing the risk of arbitrary malicious navigation. Input validation with Zod is present, which helps mitigate certain classes of input-related vulnerabilities. No hardcoded secrets or 'eval' were identified.
Updated: 2025-11-20GitHub→
0
0
Medium Cost
ValentinTarnovsky icon

MCP-MCP

by ValentinTarnovsky

Sec7

Assists Minecraft Java plugin developers with documentation, dependency management, and project analysis.

Setup Requirements

  • ⚠️Requires Node.js 18+ installed.
  • ⚠️Global installation via `npm link` is recommended, which might require administrative privileges.
Verified SafeView Analysis
The server performs file system operations (read, stat, readdir) on a `project_path` provided by the user. While typically used in a developer's local environment, lack of explicit path sanitization could make it vulnerable to path traversal if the `project_path` input is malicious. Additionally, a hardcoded default `DEFAULT_PLUGINS_PATH` (`C:\Users\tarno\Desktop\OkiMC-Plugins`) specific to the developer's machine exists in `analyzePluginProject.ts`. This is a portability and minor security risk, though it's overridden by user input. External network calls are made to public Maven repositories (Maven Central, JitPack, Paper, GitHub API) to fetch dependency metadata, which is expected functionality and generally safe.
Updated: 2026-01-18GitHub→
0
0
Low Cost
laoyouf icon
Sec9

Provides real-time weather information for specified cities by querying the wttr.in API, primarily for use within agent frameworks like HelloAgents.

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Requires installation of 'hello-agents' and 'requests' Python packages.
  • ⚠️Requires internet connectivity to access the wttr.in weather API.
Verified SafeView Analysis
The server uses the 'requests' library to call the 'wttr.in' public API. User-provided city names are passed directly into the URL for the external API call. While 'wttr.in' is generally robust, passing unsanitized user input directly into a URL path could theoretically pose a minor risk if the external API had specific vulnerabilities, though the 'requests' library usually handles basic URL encoding. There are no direct uses of 'eval', 'exec', or 'os.system' with user input. No hardcoded secrets were found. Network requests include a timeout. Overall, it is quite safe for its intended purpose.
Updated: 2025-11-20GitHub→
0
0
Medium Cost
CharlieAtki icon
Sec7

A multi-tenant cafe ordering platform integrating AI-powered shopping assistance and business analytics through a microservices architecture.

Setup Requirements

  • ⚠️Requires an OpenAI API Key for the AI Agent Service (which is a paid service).
  • ⚠️Requires Docker and Docker Compose for easy setup and running of all microservices.
  • ⚠️Multiple `.env` files must be manually created and configured in each service directory with specific environment variables (e.g., MongoDB URI, JWT secrets, Cloudinary URL, OpenAI API Key, service URLs).
Verified SafeView Analysis
The application employs standard security practices such as JWT-based authentication with refresh tokens, password hashing via bcryptjs, and CORS configuration. Environment variables are used for sensitive data, preventing hardcoding. However, storing JWT tokens in localStorage on the frontend (as implied by `api.js`) is vulnerable to XSS attacks, making `httpOnly` cookies a more secure alternative for refresh tokens. The AI agent's interaction with the backend involves forwarding the user's JWT, relying on the LLM's adherence to instructions not to expose this token. No 'eval' or other directly exploitable dangerous patterns were found.
Updated: 2025-12-11GitHub→
0
0
Medium Cost
rabqatab icon

LexLink-ko-mcp

by rabqatab

Sec9

This MCP server provides AI agents and LLM applications with access to the Korean National Law Information API (law.go.kr), enabling search, retrieval, and analysis of Korean laws, case law, administrative rules, and AI-powered semantic search.

Setup Requirements

  • ⚠️Requires a 'law.go.kr OC identifier' obtained from open.law.go.kr, which is a specific API key from a Korean government portal.
  • ⚠️For Kakao PlayMCP deployment, a domain name (not a raw IP address), HTTPS, and serving on port 80/443 (typically via Nginx reverse proxy) are required.
  • ⚠️Python 3.10+ is required.
Verified SafeView Analysis
The server uses standard Python libraries (httpx, Starlette, uvicorn) and follows common web development practices. API keys (OC identifier) are handled with a clear priority system (tool argument > session configuration > environment variable) and can be passed via HTTP headers. Input validation is performed for date ranges and article formats, reducing malformed requests. The citation extractor includes a request delay to prevent rate limiting. Logs capture traffic, including client IP and headers, which is useful for auditing. No direct use of dangerous functions like 'eval' or 'exec' was found. Overall, the security posture appears robust for its intended use case.
Updated: 2026-01-13GitHub→
0
0
Low Cost
jissac icon
Sec9

Provides a Micro-Copilot (MCP) server for AI applications, offering Bible-anchored theological infrastructure with tools for scripture lookup, search, word studies, and contextual interpretation.

Setup Requirements

  • ⚠️Requires manual pre-population of the SQLite database (`data/bible.db`) by running ingestion scripts (e.g., `scripts/ingest_bible.py`, `scripts/ingest_lexicon.py`, etc.) before the server can function.
  • ⚠️Requires 'uv' (a fast Python package manager) to be installed for dependency management and running the server.
  • ⚠️Requires Python version 3.10 or higher.
Verified SafeView Analysis
The server demonstrates strong security practices: all database connections enforce read-only access (`PRAGMA query_only = ON`), all SQL queries use parameterized statements to prevent injection, and search queries are sanitized. Input validation is robust for all tool parameters, mitigating common attack vectors. No hardcoded secrets or 'eval' usage are present in the core logic. Rate limiting is implemented to prevent basic Denial-of-Service attacks. The explicit 'Protestant theological framing' is a content bias, not a security vulnerability.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
IT-Square-Plus icon

Yggdrasil

by IT-Square-Plus

Sec9

Provides a production-ready MCP memory server with persistent semantic memory using Chroma Cloud vector storage, enabling AI agents to store and retrieve contextual information.

Setup Requirements

  • ⚠️Requires Docker (Engine or Desktop) to run the server.
  • ⚠️Requires a Chroma Cloud Account (a paid service, though initial free credits are provided).
  • ⚠️First startup downloads an ~80MB ONNX embedding model from Hugging Face, causing a ~20-120 second delay. During this period, the `/ready` health check endpoint will return 503 (Service Unavailable).
Verified SafeView Analysis
The project uses established frameworks (FastAPI, FastMCP, Pydantic, Uvicorn) and relies on Chroma Cloud for the vector database, offloading significant security concerns. Environment variables are used for sensitive credentials, and required ones are explicitly marked. Input validation is present for settings. Path-based routing input is sanitized using `isalnum` and specific allowed characters. `yaml.safe_load` is used for metadata updates, which is safer than `yaml.load`. No obvious `eval` or obfuscation. Logging levels are configurable. Resource limits are defined in Docker Compose, adhering to 'Context7 Best Practices'. The main risks would come from misconfiguration or vulnerabilities in underlying dependencies (FastAPI, ChromaDB, Uvicorn) which are not directly audited here.
Updated: 2025-11-25GitHub→
0
0
Low Cost
cescroca1976 icon

voicemode-windows

by cescroca1976

Sec7

An MCP server enabling real-time voice interaction (Speech-to-Text and Text-to-Speech) for AI agents, integrating local services like Whisper and Kokoro, with configurable cloud fallback (OpenAI).

Setup Requirements

  • ⚠️Requires Windows 11 (as per README for this fork)
  • ⚠️Requires system-level tools: Git, FFmpeg, Chocolatey (for Windows installation), and `uv` (Python package manager).
  • ⚠️Building local STT/TTS services (Whisper.cpp, Kokoro-fastapi) requires system build tools like `gcc`/`g++`, `cmake`, `make`, and development headers (e.g., `python3-dev`, `libasound2-dev`).
  • ⚠️OpenAI API Key (Paid) is required for cloud STT/TTS fallback if local services are not configured or fail.
Verified SafeView Analysis
The server leverages extensive `subprocess` calls for installing and managing external tools (git, cmake, package managers, whisper.cpp, kokoro-fastapi), which broadens the attack surface. Its security heavily depends on the integrity of these external projects and the user's system configuration. The `whisper-server` is configured to bind to `0.0.0.0` by default, which can expose it externally if not properly firewalled. Sensitive `OPENAI_API_KEY`s are handled well via environment variables and masked in logs/outputs. No direct `eval` or malicious patterns were found, and `shlex.split` is used for parsing rules. The testing suite includes measures to prevent dangerous commands, indicating developer awareness of subprocess risks.
Updated: 2026-01-18GitHub→
0
0
Medium Cost
rotkonetworks icon

continuity-mcp-server

by rotkonetworks

Sec8

A persistence layer for Claude conversations, designed to provide episodic memory, searchable history, depth tracking, and context bootstrapping to mitigate the problem of LLMs losing past insights.

Setup Requirements

  • ⚠️Requires Node.js environment (npm, tsc)
  • ⚠️Requires SQLite database file (path configurable via CONTINUITY_DB_PATH)
  • ⚠️Requires a static bootstrap.md file (path configurable via BOOTSTRAP_PATH, defaults to a placeholder if not found)
  • ⚠️Primarily designed for integration with Claude Desktop via MCP configuration.
Verified SafeView Analysis
The server uses prepared statements (`db.prepare`) to prevent SQL injection vulnerabilities. Input validation is performed using Zod schemas. Communication is via standard I/O (`StdioServerTransport`), reducing direct network attack surface from the server itself. No hardcoded sensitive information or use of `eval` was identified. The use of SQLite for data storage implies the database file itself might need access controls.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
Arshad-13 icon

Market-MCP-Test

by Arshad-13

Sec8

Transforms an LLM into an Autonomous HFT Quant Agent for real-time crypto market surveillance, predictive modeling, and risk assessment.

Setup Requirements

  • ⚠️Requires `mcp` CLI tool to be installed and configured for runtime.
  • ⚠️Requires `CRYPTO_API_KEY` (e.g., CoinGecko Pro, which may be paid) and `ETHERSCAN_API_KEY` for full functionality.
  • ⚠️Requires Python 3.10 or higher and several Python libraries (`ccxt`, `httpx`, `aiosqlite`, `streamlit`, etc.) installed via `requirements.txt`.
Verified SafeView Analysis
The server follows good practices for handling API keys via environment variables and uses parameterized queries for SQLite, mitigating common injection risks. External API calls are directed to known endpoints. Dynamic instantiation of CCXT exchanges uses `getattr`, but is filtered by `ccxt.exchanges`, which generally provides a sufficient whitelist. The 'live trading' functionality is explicitly stated as 'not fully implemented yet' and currently defaults to 'PAPER_TRADING', which is a good safety measure.
Updated: 2026-01-18GitHub→
0
0
Medium Cost
Sec6

This project appears to be a custom server application designed to integrate with or extend GitLab functionalities.

Setup Requirements

  • ⚠️Requires Node.js and npm/yarn for dependency management.
  • ⚠️Configuration likely involves environment variables specified in `.env.example`, potentially including sensitive GitLab API credentials or specific GitLab instance details.
Review RequiredView Analysis
No code or full README provided for analysis, preventing a thorough security audit for 'eval', obfuscation, or network risks. Score is based on the lack of explicit red flags but also the inability to verify safety without content.
Updated: 2025-11-18GitHub→
PreviousPage 490 of 760Next