Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
SiddhiBagul icon

MCP-oura

by SiddhiBagul

Sec9

Integrate with the Oura API to retrieve and transform user health data, including sleep, readiness, and resilience metrics, for use by language models.

Setup Requirements

  • ⚠️Requires an Oura API Token, which must be obtained from the Oura developer portal.
  • ⚠️Requires Python 3.12 or newer.
  • ⚠️The primary 'README.md' is generic and provides confusing instructions for downloading a '.zip' file and installing a desktop application, which contradicts the project's actual nature as a Python package described in 'pyproject.toml' and 'README_zh_CN.md'.
Verified SafeView Analysis
The server uses environment variables (OURA_API_TOKEN) for API authentication, which is a good security practice. It makes external HTTP requests to the Oura API over HTTPS. No 'eval', obfuscation, or obvious malicious patterns were found in the provided source code. Error handling is present for API responses.
Updated: 2026-01-19GitHub→
0
0
Low Cost

-sentiment-analyzer-

by claudette-mcp

Sec5

Analyzes and determines the sentiment of textual input.

Review RequiredView Analysis
Cannot perform a thorough security audit as no code content was provided due to 'README Truncated: 404: Not Found'. No immediate risks are apparent from the repository name, but specific code vulnerabilities like 'eval', obfuscation, or network risks cannot be assessed without access to the source code.
Updated: 2025-11-18GitHub→
0
0
Low Cost
ajafry icon
Sec7

A FastAPI backend demonstrating the Azure AD On-Behalf-Of (OBO) token exchange flow to securely call an internal FastMCP server with user context.

Setup Requirements

  • ⚠️Requires significant Azure AD application registration and configuration for at least two applications (one for the FastAPI backend, one for the FastMCP server), including API permissions and scopes.
  • ⚠️A comprehensive set of environment variables (e.g., AUTH_TENANT_ID, API_CLIENT_ID, API_SECRET, MCP_CLIENT_ID, MCP_SECRET, MCP_SERVER_URL, API_SCOPES, MCP_SCOPES) must be correctly configured in `.env` files.
  • ⚠️For the full On-Behalf-Of flow to function, both the `backend.py` (FastAPI client) and `mcp_server.py` (FastMCP server) must be running concurrently, likely on different ports (8000 and 8001 respectively).
Verified SafeView Analysis
The application correctly uses environment variables for sensitive configuration (client IDs, secrets, tenant ID). Authentication via Azure AD (fastapi-azure-auth) and fine-grained authorization (AuthorizationMiddleware) are well-implemented. However, the FastAPI backend uses `CORSMiddleware` with `allow_origins=["*"]`, which is a significant security risk in production environments as it allows cross-origin requests from any domain.
Updated: 2025-11-20GitHub→
0
0
Low Cost
Yousaf-rao icon
Sec6

An API server for managing personal expenses, allowing users to add, list, and summarize expense entries.

Setup Requirements

  • ⚠️The database ('expenses.db') is stored in a temporary directory, meaning all data will be lost on server restart or system temporary file cleanup.
  • ⚠️Requires Python 3.11 or higher.
  • ⚠️Requires 'aiosqlite' and 'fastmcp' Python packages to be installed.
Verified SafeView Analysis
The server uses parameterized SQL queries, effectively preventing SQL injection. There are no hardcoded secrets or 'eval' statements. However, the database is stored in a temporary directory (`tempfile.gettempdir()`), which means data is not persistent across restarts and could potentially be exposed or deleted depending on the host system's temporary directory configuration and cleanup policies. This is a significant data integrity and privacy concern for a financial application. The FastMCP server listens on all network interfaces (`0.0.0.0`), and the provided code does not include explicit authentication or authorization, suggesting the API endpoints are publicly accessible by default.
Updated: 2025-12-11GitHub→
0
0
High Cost
Trigi-Digital icon

mcp-banana-image

by Trigi-Digital

Sec9

AI-powered server to generate, edit, analyze, and process images using Google's Gemini-3-Pro model through a Model Context Protocol interface, offering 16 specialized tools.

Setup Requirements

  • ⚠️Requires a Google Gemini API Key (Paid API usage is likely).
  • ⚠️Node.js 20+ must be installed.
  • ⚠️MCP_API_KEY environment variable is required for HTTP transport mode for API authentication.
Verified SafeView Analysis
The server features comprehensive input validation and path sanitization, actively preventing SSRF, path traversal, and null byte injection attacks. Sensitive data is robustly redacted from logs. Explicit error handling for API content safety blocks and rate limits is implemented. The security architecture demonstrates a strong focus on preventing common vulnerabilities.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
ahays248 icon

code-atlas-mcp

by ahays248

Sec8

An MCP server that generates Mermaid diagrams for code visualization (call graphs, control flow, project structure) for TypeScript, JavaScript, and Python codebases.

Setup Requirements

  • ⚠️Requires Node.js version >= 18.0.0.
  • ⚠️Requires the `code-atlas` CLI tool to be installed at a specific relative path. The `code-atlas-mcp` server expects the `code-atlas` CLI's `dist/cli.js` file to be located in a `code` directory that is a sibling to the installed `code-atlas-mcp` package's root directory (e.g., if `code-atlas-mcp` is at `/repo/node_modules/code-atlas-mcp`, it expects the CLI at `/repo/code/dist/cli.js`). This setup is not typically handled by a standard `npm install` and likely requires manual placement of the `code-atlas` CLI or a specific monorepo project structure.
Verified SafeView Analysis
The server uses `child_process.spawn` to invoke an external `code-atlas` CLI tool for analysis. Arguments passed to `spawn` are resolved to absolute paths and handled as an array of strings, which is generally safer against shell injection than direct shell execution (`exec`). Input schemas are validated using `zod`. The server itself uses `StdioServerTransport`, meaning it does not expose network ports directly, reducing the network attack surface. No `eval` or hardcoded sensitive credentials were found. The primary security consideration would be potential vulnerabilities within the external `code-atlas` CLI itself, which is outside the scope of this MCP server's code.
Updated: 2026-01-19GitHub→
0
0
Low Cost
Ekestfa icon
Sec8

This server acts as a Model Context Protocol (MCP) gateway, providing a standardized HTTP interface for AI assistants and language models to interact with various Retrieval-Augmented Generation (RAG) microservices, facilitating query routing and context aggregation.

Setup Requirements

  • ⚠️Requires a .env file to configure `KODABI_BASE_IP` and `KODABI_BASE_PORT`.
  • ⚠️Full functionality, as per documentation, will require `RAG_API_TOKEN` and `RAG_BASE_URL` environment variables for authentication with downstream RAG services.
  • ⚠️Requires the Rust toolchain (Cargo, Rustc) to build and run the application from source.
Verified SafeView Analysis
The provided `src/main.rs` implements a minimal Axum web server with a single `/health` endpoint, using environment variables for configuration (`KODABI_BASE_IP`, `KODABI_BASE_PORT`). No 'eval', obfuscation, or hardcoded secrets are present in the truncated source code. The `rag_config.json` stores internal service configuration, not sensitive data. While the full authentication and complex routing logic described in the MVP documentation (which outlines API token validation and security auditing) is not yet visible in the provided source code, the architectural design principles indicate a strong security posture. The current implementation is safe for its minimal scope.
Updated: 2026-01-19GitHub→
0
0
Low Cost
SamMorrowDrums icon

mcp-kotlin-starter

by SamMorrowDrums

Sec9

A starter template for building Model Context Protocol (MCP) servers in Kotlin, demonstrating core features.

Setup Requirements

  • ⚠️JDK 17+ is required
  • ⚠️Gradle is required
Verified SafeView Analysis
The server uses Ktor with `CORS().anyHost()` in its HTTP transport, which is open by default. While common for development, it requires careful consideration for production deployments to restrict allowed origins. No 'eval' or direct dynamic code execution from user input observed. Input parsing for arguments appears robust, using Kotlin's type-safe JSON deserialization methods.
Updated: 2026-01-19GitHub→
0
0
Low Cost
abhisheksinghbhadouria icon

expense-tracker-mcp-server

by abhisheksinghbhadouria

Sec9

An MCP server designed for tracking, listing, and summarizing personal or small-scale expenses.

Setup Requirements

  • ⚠️Python 3.11+ required
  • ⚠️Requires fastmcp library to be installed
Verified SafeView Analysis
The code uses parameterized SQL queries, effectively preventing SQL injection. No 'eval', 'exec', or hardcoded secrets are present. The database is stored in a temporary directory, which is generally safe for local applications but could be a minor concern on multi-user systems if permissions are not strictly controlled, though sqlite3 usually handles file permissions reasonably. Overall, it demonstrates good security practices for its scope.
Updated: 2025-12-02GitHub→
0
0
Low Cost
JamesANZ icon

bitcoin-mcp

by JamesANZ

Sec9

Integrate real-time Bitcoin blockchain data into AI coding environments for querying addresses, transactions, blocks, and UTXOs.

Setup Requirements

  • ⚠️Requires Node.js 18+ and npm installed
  • ⚠️Manual configuration for Claude Desktop (though `setup.js` script simplifies this for supported OSes)
Verified SafeView Analysis
The server uses `superagent` to interact with the public mempool.space API, and `zod` for input validation on tool arguments, which are good practices. There are no direct uses of `eval`, obfuscated code, or hardcoded sensitive secrets. Setup scripts (setup.js, postinstall.js) modify known configuration files for specific MCP clients (Claude Desktop) but do not perform operations that suggest malicious intent or severe vulnerabilities. The primary security consideration is the reliance on the external `mempool.space` API for data integrity and availability, which is generally a trusted public service.
Updated: 2025-12-10GitHub→
0
0
Low Cost
kevcav1980 icon
Sec9

A read-only server for tracking and analyzing cryptocurrency portfolios across multiple exchanges like Binance, Coinbase, and Kraken.

Setup Requirements

  • ⚠️Requires Python 3.10 or later.
  • ⚠️Requires API keys for Binance, Coinbase, and/or Kraken to be set in a `.env` file for full functionality (not required in mock mode).
  • ⚠️The `README`'s 'Run the Application' step 3 contains a misleading instruction to 'Double-click on `https://raw.githubusercontent.com/kevcav1980/CryptoPortfolioMCPServer/main/hexyne/CryptoPortfolioMCPServer.zip`', which is a download URL, not the actual executable command (`python -m src.server`). Users should refer to `setup.sh` or the project's Python structure for the correct execution command.
  • ⚠️Designed to interface with a Multi-Call Processor (MCP) client, such as Claude Desktop, rather than being a standalone UI application.
Verified SafeView Analysis
The project is explicitly designed for read-only access to exchange accounts, mitigating the most severe financial risks associated with trading bots. API keys are loaded securely from environment variables (`.env` file), preventing hardcoding. It uses the `ccxt` library for exchange interactions, a widely adopted and vetted library. The `CONTRIBUTING.md` strictly prohibits trading or withdrawal functionality, which is a good design principle. No `eval` or obvious obfuscation found. Network requests are handled by standard libraries (`requests`, `ccxt`).
Updated: 2026-01-19GitHub→
0
0
Medium Cost
peterdewit icon
Sec7

A genealogy research memory server for LLM agents to store and manage structured genealogical data.

Setup Requirements

  • ⚠️Docker and Docker Compose are required for installation and deployment.
  • ⚠️Requires setting database credentials (DB_NAME, DB_USER, DB_PASSWORD, DB_HOST, DB_PORT) in a .env file, with the default password needing to be changed for production.
  • ⚠️The `fetch_attachments_for_person` tool performs external HTTP requests and writes files to a `/attachments` path within the container, which should be bind-mounted to a host directory for persistence and access.
Verified SafeView Analysis
The database interactions use parameterized queries with `psycopg2`, which prevents common SQL injection vulnerabilities. No 'eval' or similar dangerous functions are observed. The `docker-compose.yml` and `server.py` use environment variables for database credentials, with a weak default password ('genealogy') in `server.py` and `.env.example`. Users are instructed to adjust this in the `.env` file for secure deployment, but failure to do so would pose a significant risk. The `reset_genealogy_memory.sh` script uses `rm -rf` which is powerful, but it operates within the expected Docker volume context. Overall, generally safe if best practices for environment variable management are followed.
Updated: 2025-11-28GitHub→
PreviousPage 496 of 760Next