Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
robinmordasiewicz icon

f5xc-auth

by robinmordasiewicz

Sec9

Provides robust authentication and XDG-compliant profile management for Node.js applications interacting with F5 Distributed Cloud MCP (Multi-Cloud Platform) servers.

Setup Requirements

  • ⚠️Requires Node.js >= 18 environment.
  • ⚠️Requires valid F5 Distributed Cloud tenant credentials (API token, P12 certificate, or cert/key pair) for authenticated operations.
  • ⚠️Profile management involves file system access, requiring appropriate user permissions for `~/.config/f5xc/` and `~/.local/state/f5xc/` (or `XDG_CONFIG_HOME`/`XDG_STATE_HOME`).
Verified SafeView Analysis
The library demonstrates strong security practices. It uses XDG-compliant directories for profile storage, enforcing secure file permissions (0o600 for profiles, 0o700 for config directories). Critical path validation is implemented in `src/utils/path-security.ts` to prevent directory traversal attacks, including checks for null bytes and `..` patterns, before reading sensitive files (P12 bundles, certificates, keys). TLS verification is enabled by default, with explicit warnings printed to stderr and logs if `F5XC_TLS_INSECURE` is set. API tokens are masked in logs. Credentials are sourced from environment variables or profiles, avoiding hardcoding. The overall design prioritizes secure handling of sensitive information and file access.
Updated: 2026-01-16GitHub→
0
0
Low Cost
Rajeshk0712 icon

ess-mcp-server

by Rajeshk0712

Sec8

This server provides a Micro-Copilot Protocol (MCP) interface to create mock food orders via "HungerBox" and generate dynamic greetings, intended for integration with conversational AI agents like Microsoft Copilot Studio.

Setup Requirements

  • ⚠️Requires Python 3.13+
  • ⚠️Requires `uv` package manager (installed via curl script)
Verified SafeView Analysis
The `startup.sh` script uses `curl | sh` to install `uv`, which is a common but generally discouraged practice due to potential supply chain risks. The `create_order` function currently mocks responses but notes a future need for 'credentials management' for Playwright automation, which will require careful secure handling if implemented. No hardcoded secrets or arbitrary code execution are present in the provided Python code.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
snirt icon

fzf-mcp

by snirt

Sec8

A high-performance MCP server for fuzzy searching files, content, and Git operations within a codebase.

Setup Requirements

  • ⚠️Requires Go 1.25+ (managed with `mise`)
  • ⚠️Optional: `ripgrep` for faster content search (falls back to native Go search if not found)
  • ⚠️Requires `git` command for Git integration tools
Verified SafeView Analysis
The server uses `exec.Command` to invoke external tools like `git` and `ripgrep`. Arguments are passed as separate strings, which generally mitigates shell injection risks. No `eval` or direct network listeners are present. The primary security consideration would be ensuring the integrity and security of the `git` and `ripgrep` executables themselves, and potential ReDoS vulnerabilities if the user-provided regex patterns are overly complex. No hardcoded secrets were identified.
Updated: 2025-11-19GitHub→
0
0
Low Cost

contexta-cli

by usecontexta

Sec10

Provides local code context to AI assistants via a zero-configuration Model Context Protocol (MCP) server.

Setup Requirements

  • ⚠️Requires Python and pip for installation
Verified SafeView Analysis
Operates fully locally with no data sent to cloud. Starts a local HTTP server (127.0.0.1) for AI assistant communication, not publicly exposed.
Updated: 2025-11-19GitHub→
0
0
Medium Cost
crew-of-one icon

mcp-server--atlassian

by crew-of-one

Sec9

Integrates Jira and Confluence functionalities with the Model Context Protocol (MCP), enabling AI agents to interact with Atlassian services for collaboration, project management, and knowledge base tasks.

Setup Requirements

  • ⚠️Requires an active Atlassian Jira and/or Confluence instance with appropriate API token, Personal Access Token (PAT), or OAuth 2.0 credentials configured.
  • ⚠️The OAuth 2.0 setup requires a local HTTP server callback, which may necessitate specific firewall rules or port availability (default 8000) on the host machine for successful authentication flow.
  • ⚠️Extensive use of environment variables for configuration. While flexible, this requires careful setup and management of many variables for full functionality (e.g., JIRA_URL, CONFLUENCE_API_TOKEN, ATLASSIAN_OAUTH_CLIENT_ID, proxy settings, etc.).
Verified SafeView Analysis
The server correctly leverages environment variables and a Python keyring for sensitive data (API tokens, OAuth credentials), avoiding hardcoded secrets. It supports configurable SSL verification and proxy settings, allowing secure network configurations. The `UserTokenMiddleware` handles authentication headers for incoming requests. Content processing (Markdown/HTML conversion) is performed using established libraries and temporary file cleanup. No direct `eval()` calls or immediately obvious malicious patterns were found. Minor risks related to external libraries or improper input sanitization in specific, less common code paths might theoretically exist, but the core design appears robust.
Updated: 2025-12-14GitHub→
0
0
Low Cost
mikluko icon

mcp-proxy

by mikluko

Sec9

This Go proxy connects Model Context Protocol (MCP) clients to remote MCP servers, providing OAuth 2.0 authentication, flexible transport strategies, and tool filtering capabilities.

Setup Requirements

  • ⚠️Initial OAuth 2.0 authorization requires opening a browser and user interaction for login.
  • ⚠️Requires Go installed if installing from source (`go install`).
  • ⚠️Requires network access to the upstream MCP server.
Verified SafeView Analysis
The project demonstrates robust security practices, including OAuth 2.0 with PKCE, binding OAuth callback to localhost, and origin validation for SSE endpoints. No dynamic code execution or hardcoded secrets were found. A minor theoretical risk exists with `patternToRegex` if untrusted input were to be used for tool ignore patterns, but this is typically controlled by an administrator via CLI arguments.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
kakehashi-inc icon
Sec8

Provides a Model Context Protocol (MCP) server for seamless database access to Laravel applications, automatically parsing .env files and supporting multiple database types.

Setup Requirements

  • ⚠️Requires Node.js >= 22.0.0
  • ⚠️Database credentials are required for connection (e.g., DB_DATABASE is mandatory, others like DB_USERNAME/DB_PASSWORD are usually needed unless using local files like SQLite or specific auth setups)
  • ⚠️SSH key or password required if SSH tunneling is enabled
Verified SafeView Analysis
The server demonstrates strong security awareness with features like a 'read-only' mode to block write operations, SSH tunneling for secure remote connections, and masking of sensitive information in logs. The 'execute_sql' tool allows direct SQL query input, which inherently carries a risk of SQL injection if the input is not carefully controlled by the calling agent or user, especially in non-read-only mode. However, the explicit recommendation to use '--readonly' and minimal database permissions in the documentation significantly mitigates these risks. Introspection queries use proper escaping to prevent injection.
Updated: 2025-11-27GitHub→
0
0
Low Cost
rawe icon
Sec9

An HTTP wrapper for the official Azure DevOps MCP server, enabling remote access to work items via Streamable HTTP transport for local development and integration with agents.

Setup Requirements

  • ⚠️Requires Azure DevOps Personal Access Token (PAT) with specific 'Work Items (Read)' and 'Project and Team (Read)' scopes.
  • ⚠️Requires Docker for recommended multi-server setup and standalone deployment.
  • ⚠️Requires Node.js 20 LTS and TypeScript for local development without Docker.
Verified SafeView Analysis
The server explicitly binds to 127.0.0.1 (localhost) on the host system, significantly limiting network exposure. Secrets (Azure DevOps PAT) are handled via environment variables, not hardcoded. There is no 'eval' or similar dangerous dynamic code execution. It is designed and explicitly stated for local-only use and not for external exposure. Lack of authentication on the /mcp endpoint is acceptable for local use, but would be a critical vulnerability if exposed externally.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
agent-matrix icon

catalog

by agent-matrix

Sec3

A public, versioned registry and catalog for discovering and integrating Model Context Protocol (MCP) servers, acting as an ecosystem for AI agents and tools.

Setup Requirements

  • ⚠️Requires various external API keys (e.g., for LLMs, SaaS integrations)
  • ⚠️Demands specific runtime environments (Node.js/npm/npx, Python/pypi/uvx, Docker) based on the server's implementation
  • ⚠️Dependency on external package registries (npm, pypi, oci) for server installation and execution.
Review RequiredView Analysis
The repository primarily consists of manifest files that define how to run various MCP servers. Many of these definitions specify `STDIO` transport, instructing the client to execute external commands or packages (e.g., `npx`, `docker`, `uvx`) on the host machine. This design paradigm inherently introduces significant security risks, as executing arbitrary external code (even if from a known package registry) can lead to supply chain attacks, arbitrary code execution, and privilege escalation if the source or the execution environment is not rigorously sandboxed and audited. While the catalog itself is static, the instructions it provides empower clients to run potentially untrusted code. Several manifests also declare API keys as required environment variables, which necessitates careful handling by end-users to prevent exposure.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
Koggitechorg icon
Sec4

An MCP server acting as a proxy for an external RAG engine to understand database schemas and an external API for executing SQL queries based on natural language input.

Setup Requirements

  • ⚠️The README.md describes different tools (`generate_simulator`, `get_info_calculators`, `assign_and_get_last_calculator`) than what is actually implemented in the provided `src/index.ts` (`get_rag_database`, `get_request_database_sql`). This mismatch creates significant confusion about the server's functionality.
  • ⚠️The README mentions 'stdin/stdout (StdioServerTransport)' as the communication method, but the main `src/index.ts` file provided (matching the `package.json` version) implements an HTTP server (`StreamableHTTPServerTransport`) on `/mcp` endpoint.
  • ⚠️Implicitly requires Google Cloud authentication (e.g., via `GOOGLE_APPLICATION_CREDENTIALS` environment variable or default service account) for Vertex AI interaction, as the `keyFilename` option is commented out.
Review RequiredView Analysis
CRITICAL: The `get_request_database_sql` tool takes user-provided `sql_query` and directly forwards it to an external API endpoint (`/api/mcp/run-query-from-rag`). This design makes the server a proxy for a severe SQL injection vulnerability if the downstream API does not rigorously sanitize and validate the incoming SQL. CRITICAL: `src/config/config.ts` includes a hardcoded default `API_TOKEN`. If the `API_TOKEN` environment variable is not explicitly set, this hardcoded secret is used for authentication against an external validation service and subsequent API calls, creating a severe authentication bypass risk. HIGH: The `EXTERNAL_URL` environment variable (configurable by the user) dictates the base URL for all external API calls. If an attacker can manipulate this variable, it could lead to Server-Side Request Forgery (SSRF) by directing the server to make requests to internal or unintended external resources.
Updated: 2025-12-09GitHub→
0
0
Low Cost
dv-team icon

php-mcp-server

by dv-team

Sec8

A simple PHP-based MCP Server (JSON-RPC) for handling immediate requests, adaptable for database, prompt, and filesystem tasks.

Setup Requirements

  • ⚠️Requires PHP 8.2 or higher
  • ⚠️Requires Composer for dependency management
Verified SafeView Analysis
The server demonstrates good practices for JSON-RPC parsing by using JSON_THROW_ON_ERROR and includes explicit checks for property existence and type validation for incoming parameters. It uses a PSR-3 Logger for debugging/error logging, and custom exception handling. The default HTTP binding is to localhost (127.0.0.1), limiting network exposure. No direct 'eval' or 'shell_exec' are present. The primary security consideration for a system like this, not directly visible in the provided code, would be how tools and prompts are registered. If the registration process were exposed to untrusted input, it could lead to arbitrary code execution via the 'handler' callables. However, based on the provided code, registration happens programmatically within the application code, not through user-controlled input.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
hadevelopment icon
Sec7

This server acts as a comprehensive AI agent for managing Jira tasks and interacting with the Jira API, including listing, creating, inspecting, and transitioning issues.

Setup Requirements

  • ⚠️Requires a configured Jira instance and a Jira API token for authentication.
  • ⚠️Requires Python 3.11+ (as indicated by CI configuration, despite pyproject.toml stating >=3.14).
  • ⚠️Requires the `uv` package manager to be installed for running and dependency management.
Verified SafeView Analysis
The project uses environment variables (`.env`) for storing sensitive credentials like Jira API tokens, which is good practice. The `update_config` tool allows the agent to modify its own `.env` file, which is a powerful feature for AI self-configuration but could be a risk if the agent's prompts were compromised. The `mcp-manager.py` script uses `subprocess.run` with `shell=True` for system commands (like `git clone`, `uv sync`), which is generally discouraged but appears to be used with controlled inputs from its internal registry, limiting immediate exploitation risks. Input validation is implemented for issue keys, statuses, and limits.
Updated: 2026-01-16GitHub→
PreviousPage 506 of 760Next