Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
geckod22 icon

FeedFlow

by geckod22

Sec9

Manages and fetches articles from RSS feeds through MCP tool calls, using a persistent SQLite database.

Setup Requirements

  • ⚠️Requires Python 3.13 or higher.
  • ⚠️Relies on 'uv' for dependency management, which users might not have installed or be familiar with over 'pip'.
Verified SafeView Analysis
The server appears well-structured and uses standard, reputable libraries (`httpx`, `aiosqlite`, `langdetect`). There are no `eval` or `exec` calls, nor any hardcoded secrets. Database paths are handled using `platformdirs` and can be customized via an environment variable, which is good practice. Network requests are made with timeouts. As a `stdio`-based server, its attack surface is limited to its inputs and outputs.
Updated: 2026-01-18GitHub→
0
0
Low Cost
rdmpage icon

php-mcp-server

by rdmpage

Sec3

Implements the Model Context Protocol (MCP) to expose SPARQL query capabilities and resource information to an AI client like Claude Desktop.

Setup Requirements

  • ⚠️Requires PHP 7+ installed on the system.
  • ⚠️Requires the PHP cURL extension.
  • ⚠️Requires a running SPARQL endpoint, configured via the `SPARQL_ENDPOINT` environment variable.
Review RequiredView Analysis
The `mcp_sparql_server.php` directly uses user-provided SPARQL queries (via the `sparqlQuery` tool) and URIs (via the `authorsOfWork` tool) without sanitization before passing them to the SPARQL endpoint. This allows for arbitrary SPARQL query injection on the configured `SPARQL_ENDPOINT` if an attacker can control the input arguments. This is a critical vulnerability for the backend SPARQL service. Error reporting is configured to stderr, which is good practice for production servers.
Updated: 2025-12-17GitHub→
0
0
Low Cost
moor-sun icon

git-mcp-server

by moor-sun

Sec8

Provides a FastAPI server to expose local Git repository file system operations and build commands for AI agents or automation systems.

Setup Requirements

  • ⚠️Requires Python 3.9+
  • ⚠️Requires Maven or Gradle (and optionally their wrappers) to be installed and accessible in the system PATH or project directory.
  • ⚠️The `GIT_LOCAL_REPO` environment variable must be set to the desired repository root, otherwise it defaults to a specific Windows path.
Verified SafeView Analysis
The server implements strong path traversal prevention for file access and project paths. Crucially, it validates and whitelists extra arguments passed to build commands, mitigating command injection risks when using `subprocess.run` with `shell=False`. No hardcoded secrets or `eval` usage found. CORS is set to allow all origins, which is acceptable for an internal/local automation tool but would be a vulnerability if exposed publicly without authentication.
Updated: 2025-12-14GitHub→
0
0
Low Cost
ariefalabbasi icon

mcp-audit

by ariefalabbasi

Sec9

Analyzes and tracks token usage, costs, and efficiency of AI coding sessions across multiple CLI platforms (Claude Code, Codex CLI, Gemini CLI, Ollama CLI).

Setup Requirements

  • ⚠️Python 3.11+ is recommended for `tomllib` (otherwise `tomli` package is required for older Python versions to support TOML config files).
  • ⚠️For accurate Gemini CLI token estimation, `sentencepiece` and the Gemma tokenizer model are required. If not installed/downloaded, it falls back to `tiktoken` (approx. 95% accuracy) or character-based estimation.
  • ⚠️Downloading the Gemma tokenizer from HuggingFace requires a HuggingFace account with an accepted Gemma license and an `HF_TOKEN` environment variable or argument. Downloading from GitHub Releases is a preferred, authentication-free alternative.
Verified SafeView Analysis
The tool makes external network requests to LiteLLM's public pricing API and HuggingFace/GitHub for tokenizer downloads. These are standard and widely used public services. Critical security measures like tarball member validation (`_validate_tarball_member`) are implemented to prevent path traversal attacks during asset extraction. `subprocess` calls are used to interact with `git`, `defaults`, and `codex` commands, and appear to be used defensively within the application's intended scope. No hardcoded secrets were found; HuggingFace authentication relies on environment variables or explicit arguments.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
knrerikh icon

eva-mcp-server

by knrerikh

Sec8

Integrate AI assistants with Eva-project API for task, project, and document management via Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️An Eva API access token (`EVA_API_TOKEN`) is mandatory for the server to function.
  • ⚠️The server's default operation (without `EVA_READ_ONLY` explicitly set) allows write operations. Users must explicitly set `EVA_READ_ONLY=true` in their environment or configuration for read-only mode, contradicting some documentation indicating read-only by default.
  • ⚠️When integrating with AI assistants like Cursor, it is crucial to provide an absolute path to the `src/server.py` file in the `mcp.json` configuration.
Verified SafeView Analysis
The server uses environment variables for API tokens, which is a good practice for secrets management. It implements a 'read-only' mode to prevent accidental data modifications. However, the server's default behavior (if `EVA_READ_ONLY` environment variable is not explicitly set) is to allow write operations, which directly contradicts statements in some documentation (e.g., `QUICK_START.md`) that imply read-only mode is enabled by default. Users must explicitly configure `EVA_READ_ONLY=true` to enforce read-only safety. No 'eval' or other directly exploitable malicious patterns were found. Network requests use `httpx` with configurable timeouts. Robust error handling is present for API calls.
Updated: 2025-12-15GitHub→
0
0
Low Cost
zv-louis icon

updsts

by zv-louis

Sec8

A command-line tool and local MCP server for retrieving and updating AWS STS temporary credentials in local AWS credential files.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Uses uv for package management
  • ⚠️Requires AWS credentials configured in ~/.aws/credentials with MFA device ARN
  • ⚠️When running as an MCP server, an external agent must interact via stdio
Verified SafeView Analysis
The project directly handles AWS credentials files, which are highly sensitive. The implementation includes masking of secret keys and session tokens for output/logging. It runs as a local MCP server using stdio transport, limiting direct network exposure to external agents. The README explicitly warns against sending sensitive information to LLMs when integrating with agents. No 'eval' or obvious shell injection points found. File operations are handled using 'pathlib' and 'os.chmod', which are generally safe but require careful permission management by the user for the credentials file itself (as noted in section 9 of the README).
Updated: 2025-12-19GitHub→
0
0
Low Cost
winniehhy icon

MCP-server

by winniehhy

Sec4

A personal finance tracker for managing income and expenses, with optional synchronization to Notion.

Setup Requirements

  • ⚠️Data persistence relies solely on a local `data.json` file; not suitable for multi-user, production, or serverless deployments without additional storage solutions.
  • ⚠️Requires separate commands to run both the backend API and the frontend application.
  • ⚠️Notion integration (for syncing entries) requires `NOTION_API_KEY` and `NOTION_DB_ID` environment variables, otherwise it will be disabled.
Verified SafeView Analysis
The primary security risk is that all data is stored in a local `data.json` file, and the API has no authentication or authorization. Any client with network access to the API can read, add, or modify financial entries without credentials. While there are no obvious code injection vulnerabilities like `eval` or unsanitized database queries (as it's a JSON file), the lack of access control makes it unsuitable for multi-user environments or exposure beyond localhost. CORS is enabled, likely with default permissive settings, further opening it up.
Updated: 2025-12-02GitHub→
0
0
Low Cost
sumitdotgh icon

ai-examples

by sumitdotgh

Sec9

A basic weather API server built with FastAPI, demonstrating a Microservice Communication Protocol (MCP) server that provides CRUD operations for weather information.

Setup Requirements

  • ⚠️Python 3.12+ required
  • ⚠️Needs 'uvicorn' to run the FastAPI server
Verified SafeView Analysis
The code itself is clean and does not contain obvious malicious patterns, 'eval' calls, or hardcoded secrets. It implements a standard FastAPI application. Security relies on FastAPI's inherent protections and proper deployment practices.
Updated: 2025-11-29GitHub→
0
0
Low Cost
megs-p icon

mcp-py

by megs-p

Sec1

To provide a server implementation for the Minecraft Classic Protocol, allowing clients to connect and interact with a game world or service.

Setup Requirements

  • ⚠️Requires Python installation.
Review RequiredView Analysis
No source code was provided for analysis beyond the README. It is impossible to conduct a security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns without the actual code. Therefore, its safety cannot be guaranteed.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
Sanny1998 icon
Sec1

Provides an API for remote expense tracking and management.

Review RequiredView Analysis
CRITICAL: No source code was provided for analysis. A comprehensive security audit could not be performed. The score of 1 reflects a complete lack of ability to verify safety and assumes maximum risk due to unknown factors. **DO NOT RUN WITHOUT MANUAL CODE REVIEW.**
Updated: 2025-11-23GitHub→
0
0
Medium Cost
underyx icon
Sec8

Allows AI assistants to interact with the Matter read-later app, enabling listing articles, retrieving article details with highlights, and saving new articles.

Setup Requirements

  • ⚠️Relies on Matter's internal API (v11), which is reverse-engineered and undocumented, making it susceptible to breakage if Matter changes its API.
  • ⚠️Local usage requires manually obtaining `MATTER_ACCESS_TOKEN` and `MATTER_REFRESH_TOKEN` via a multi-step process involving the Matter Obsidian plugin and the Matter mobile app.
  • ⚠️Vercel deployment involves an interactive OAuth-style QR code authentication flow requiring the Matter mobile app to connect an AI assistant.
Verified SafeView Analysis
The server utilizes the Model Context Protocol SDK and Zod for input validation, which are good security practices. For Vercel deployments, token handling is stateless, meaning Matter API tokens are passed via request headers after an OAuth flow, reducing server-side storage risks. However, a significant operational risk is the reliance on a reverse-engineered, undocumented internal Matter API (v11). This makes the server vulnerable to breaking changes if Matter updates its API. There are no apparent hardcoded secrets, 'eval' usage, or obfuscation within the provided source code.
Updated: 2026-01-18GitHub→
0
0
Low Cost
slavadubrov icon

mcp-featurestore

by slavadubrov

Sec9

This server provides a lightweight Model Context Protocol (MCP) Feature Store for storing and retrieving machine learning features, designed to integrate with Claude Desktop.

Setup Requirements

  • ⚠️Requires 'uv' for dependency management and execution.
  • ⚠️Requires Python 3.13 or newer (specified in pyproject.toml).
  • ⚠️Requires manual initialization of the local SQLite database via 'uv run python database.py'.
Verified SafeView Analysis
The server uses parameterized SQL queries, preventing common SQL injection vulnerabilities. Inputs like 'vector' are explicitly validated as JSON. No 'eval' or 'exec' calls are present, and no hardcoded secrets or network-exposed critical resources are evident. The local SQLite database access is confined to the application's directory, limiting external exposure.
Updated: 2025-11-27GitHub→
PreviousPage 491 of 760Next