Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
Sujoy1 icon
Sec2

An AI-driven multi-agent system for web searching, financial analysis, and stock recommendations, leveraging BrightData for real-time web data.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid)
  • ⚠️Requires BrightData API Token (Paid, requires BrightData account)
  • ⚠️Requires Node.js and npm (`npx`) for BrightData MCP client
Review RequiredView Analysis
A critical security risk is present in 'test_neo4j_connection.py' due to a hardcoded Neo4j database password. The project also relies on external 'npx' commands for the BrightData client, introducing a dependency on an external executable, and uses minified JavaScript libraries that are harder to audit for vulnerabilities.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
mso-docs icon

Docs-Navigator

by mso-docs

Sec9

An AI-powered documentation assistant that provides intelligent Q&A, search, and analysis capabilities across various document types, including text, PDFs, and images via OCR.

Setup Requirements

  • ⚠️Requires an Anthropic API Key (Paid)
  • ⚠️External installation of Tesseract OCR engine and Poppler-utils for full image and scanned PDF processing on certain operating systems.
  • ⚠️Requires Python 3.10 or higher.
Verified SafeView Analysis
The core application (MCP server and Gradio UI) runs locally by default ('127.0.0.1') and is not exposed publicly ('share=False'), which is good for security. Environment variables for API keys are loaded from `.env` files, preventing hardcoded secrets. The `eval` function is present in `tests/test_end_to_end.py` for parsing search results, which is a security risk if this pattern were adopted in production code, but it is contained within a test script.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
gufao icon
Sec5

Provides a server-side component for integrating with and managing WhatsApp messaging.

Setup Requirements

  • ⚠️Requires setup of WhatsApp Business API and associated developer account.
  • ⚠️Requires WhatsApp API credentials (e.g., access token, phone ID, app secret).
  • ⚠️Requires proper configuration for webhooks to receive real-time message events.
Review RequiredView Analysis
No actual source code (only a README content) was provided for analysis. Therefore, a full security audit for specific vulnerabilities like 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns could not be performed. The score is neutral due to the lack of information. Any server interacting with a messaging platform like WhatsApp should be rigorously audited before deployment, especially concerning data handling and API key management.
Updated: 2025-11-26GitHub→
0
0
Medium Cost

mysql-mcp-server

by 54dabang

Sec6

A Spring Boot-based MCP (Managed Custom Provider) server designed to connect to and manage multiple MySQL data sources.

Setup Requirements

  • ⚠️Requires a running MySQL database instance.
  • ⚠️Requires Java Development Kit (JDK) and Maven to build the project.
  • ⚠️Requires explicit configuration of MySQL datasource properties (URL, username, password) at runtime.
Verified SafeView Analysis
The server handles sensitive MySQL database credentials, and the example shows passing them via command-line arguments, which can be a security risk (e.g., visible in process lists). While no direct 'eval' or obfuscation is apparent, the server's network exposure and credential management require careful securing in production.
Updated: 2025-11-18GitHub→
0
0
Low Cost
manelix2000 icon

quickchart-mcp

by manelix2000

Sec8

Generates chart images using QuickChart service, integrated as a tool for Model Context Protocol clients like GitHub Copilot, Cursor, or Claude Desktop.

Setup Requirements

  • ⚠️Requires a Model Context Protocol (MCP) client configured (e.g., GitHub Copilot, Claude Desktop, Cursor).
  • ⚠️Node.js environment is required to run locally (if not using `npx`).
  • ⚠️MCP configuration file (`mcp.json`) needs to be manually edited in VS Code or other clients to add server details.
Verified SafeView Analysis
The server uses `axios` to fetch chart images from `quickchart.io`. The `QUICKCHART_BASE_URL` is configurable via an environment variable. The `download_chart` tool allows saving images to a user-specified path, defaulting to the desktop. While it checks for directory write permissions before writing (`fs.promises.access(dir, fs.constants.W_OK)`), a malicious AI prompt could theoretically instruct the server to write to sensitive but writable locations. No hardcoded secrets or arbitrary code execution vulnerabilities (like `eval`) were identified. Overall, it appears generally safe for its intended use case within a controlled MCP client environment.
Updated: 2025-11-27GitHub→
0
0
Low Cost
riccardotornesello icon

mcp-math

by riccardotornesello

Sec10

Provides a comprehensive set of mathematical operations and functions via a Model Context Protocol (MCP) API.

Setup Requirements

  • ⚠️Requires Docker (for recommended setup)
Verified SafeView Analysis
The server implements standard mathematical functions using Go's `math` package. There are no indications of dangerous functions (e.g., `eval`, `exec`), hardcoded secrets, or unusual network activity. Input validation is present for potential error conditions like division by zero or empty arrays. The scope is limited to pure mathematical computation, significantly reducing the attack surface.
Updated: 2025-11-24GitHub→
0
0
Low Cost
LinusOlofsson-maker icon

mcp-server-host

by LinusOlofsson-maker

Sec3

A simple API and web interface for high school students to view and sign up for extracurricular activities.

Setup Requirements

  • ⚠️Data is not persistent (in-memory only) and will be lost on server restart.
  • ⚠️The `src/README.md` suggests `python app.py` to run the application, but this will not start the FastAPI server. The correct command requires `uvicorn`.
Verified SafeView Analysis
The application lacks authentication and authorization mechanisms. Any user can sign up or unregister any email for any activity, including other students' emails, through direct API calls or the client-side interface. There is no server-side validation of the 'email' format beyond basic existence checks. This makes the system vulnerable to unauthorized data manipulation for its stated purpose.
Updated: 2025-12-15GitHub→
0
0
Low Cost
ivasoom icon

MCP-Server

by ivasoom

Sec3

Facilitate interaction with the Shopify Admin API for product and order management, primarily for AI assistants using Model Context Protocol (MCP) or custom GPT actions.

Setup Requirements

  • ⚠️Requires Shopify Admin API access token with `read_products`, `write_products`, and `read_orders` permissions.
  • ⚠️Requires Node.js 18+ to run.
  • ⚠️The API (when used as `shopify-api-server.js` or `shopify-mcp-server-sse.js` and exposed via HTTP) has no built-in authentication, making it unsafe for public exposure without custom security additions.
Review RequiredView Analysis
The server, when run as a direct API (`shopify-api-server.js`), explicitly lacks any authentication or authorization layer, making it critically vulnerable to unauthorized access and manipulation of Shopify data if exposed publicly. The `README.md` and `CHATGPT_SETUP.md` clearly state this risk, recommending the addition of authentication, rate limits, and HTTPS for production use. While environment variables are used for sensitive credentials (Shopify Access Token), the absence of request-level authentication for the API endpoints is a major security flaw for general deployment. GraphQL queries are structured, which helps prevent direct injection of malicious query structures, but the lack of authentication overrides this mitigation.
Updated: 2025-11-23GitHub→
0
0
Low Cost
ygorkouzak icon

amigo-mcp-server

by ygorkouzak

Sec2

Exposing a set of specific business functions (tools) as an API endpoint, likely for integration with agents or other systems, focused on patient/system management for an 'Amigo' application.

Setup Requirements

  • ⚠️Requires Python 3.x and the 'FastMCP' library.
  • ⚠️Critical security risk: Core tool endpoints (`/sse`) are not authenticated by default.
  • ⚠️Relies on `uvicorn` for asynchronous server execution.
Review RequiredView Analysis
The core MCP endpoint `/sse`, which exposes all registered tools (e.g., `buscar_paciente`, `agendar_compromisso`, `status_sistema`), is explicitly excluded from the `SecurityMiddleware`'s authentication checks in `server.py`. Additionally, `main.py` exposes `/sse` without any middleware. This means the server's tools are accessible without any authentication, making it highly vulnerable if exposed to untrusted networks. While `MCP_AUTH_TOKEN` is used, it only protects routes *other* than `/sse`, `/health`, and `/`. `host="0.0.0.0"` and `forwarded_allow_ips="*"` further highlight the need for external network security.
Updated: 2025-12-21GitHub→
0
0
Medium Cost
NemesisGuy icon

WordPress-MCP

by NemesisGuy

Sec8

Enables local-first LLM agents to create, edit, and organize WordPress content through a Model Context Protocol (MCP) interface.

Setup Requirements

  • ⚠️Requires WordPress 5.6+ with Application Passwords enabled and configured for a specific user.
  • ⚠️Requires `npm run build` to compile TypeScript source code to JavaScript before running.
  • ⚠️Requires specific configuration within an MCP-compatible client (e.g., Claude Desktop, VS Code extension) to point to the server executable.
Verified SafeView Analysis
The server uses WordPress Application Passwords for authentication, which is a secure method. Communication is primarily over stdio, reducing direct network exposure. Arguments are type-checked and passed to a robust WordPress REST API client (axios). The `wordpress_upload_media` tool allows specifying `filePath` to read local files, which could pose an information disclosure risk if a malicious prompt could trick the LLM agent into requesting unauthorized files from the server's host system. However, this risk is mitigated by the local-first, agent-driven nature of the server where the user implicitly trusts and controls their agent.
Updated: 2025-12-22GitHub→
0
0
High Cost
gajda-w icon
Sec9

An MCP (Model Context Protocol) Server for the Beltche BJJ gym management platform, enabling AI assistants like ChatGPT to manage students, trainings, and gym data through defined tools.

Setup Requirements

  • ⚠️Requires full OAuth 2.0 application setup with FusionAuth (Client ID, Client Secret, Authorize URL, Token URL, Redirect URI).
  • ⚠️For production, a Redis instance is highly recommended for persistent token storage; otherwise, tokens are lost on server restart.
  • ⚠️Requires public exposure (e.g., via ngrok or a public URL) for external AI assistant integration, especially for the OAuth callback URL.
Verified SafeView Analysis
The server employs robust security practices including Zod for environment variable validation, Pino for structured logging with redaction of sensitive data (like tokens and authorization headers), `asyncHandler` for consistent error handling, and `express-rate-limit` to prevent abuse. OAuth tokens are managed via a `linkToken` and stored securely (in-memory for dev, Redis for prod), and refreshed as needed. No direct `eval` or unsanitized shell execution from user input was identified. Dependencies appear to be standard and well-vetted. A full audit of the MCP SDK and FusionAuth setup would be needed for a perfect score.
Updated: 2025-12-02GitHub→
0
0
Low Cost
Julian-AT icon

datagvat-mcp

by Julian-AT

Sec7

Provides programmatic access, discovery, quality analysis, and management tools for Austrian Open Government Data from the data.gv.at platform via the Piveau Hub API.

Setup Requirements

  • ⚠️Requires Python 3.11 or newer.
  • ⚠️Semantic search functionality relies on a FastMCP-configured LLM backend, which may incur costs if using a commercial LLM API (e.g., OpenAI, Anthropic) in production.
  • ⚠️Write operations (creating, updating, deleting, publishing, hiding datasets) require an 'AUSTRIA_MCP_PIVEAU_API_KEY' which may necessitate registration with data.gv.at.
  • ⚠️The data preview functionality (fetching from arbitrary URLs) presents a potential Server-Side Request Forgery (SSRF) risk, allowing the server to make requests to internal networks if not properly isolated.
Verified SafeView Analysis
The server uses Pydantic's SecretStr for API keys, loads sensitive configuration from environment variables, and utilizes standard HTTP client libraries (httpx). LLM interactions for semantic search are designed to parse responses as strict JSON, mitigating direct LLM code injection risks. The `preview_data` and `preview_schema` tools fetch content from arbitrary URLs based on user input. While `MAX_PREVIEW_BYTES` limits data volume, this represents a potential Server-Side Request Forgery (SSRF) risk if the server's network configuration allows access to internal resources. No 'eval' or obfuscation is present, and the codebase follows generally good security practices for an open-source project, but the SSRF aspect of the preview functionality is a notable concern.
Updated: 2026-01-18GitHub→
PreviousPage 495 of 760Next