Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
dr-basalt icon
Sec2

This server likely acts as a central control plane or management backend for the Coolify self-hosting platform, coordinating various services or deployments.

Review RequiredView Analysis
No source code was provided for analysis, making it impossible to perform a comprehensive security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. The score reflects the inability to verify its safety due to lack of visibility.
Updated: 2025-12-15GitHub→
0
0
Medium Cost
Berucha icon

a11y-mcp

by Berucha

Sec8

Automated WCAG 2.2 AA accessibility code review for GitHub Pull Requests, providing immediate feedback and fix suggestions.

Setup Requirements

  • ⚠️Requires Node.js 18+ runtime environment.
  • ⚠️Requires a GitHub token (`GITHUB_TOKEN`) with appropriate permissions (`pull-requests: write`) for GitHub Actions integration.
  • ⚠️Administrator access to a GitHub repository is needed to configure branch protection rules for mandatory checks.
Verified SafeView Analysis
The server interacts with GitHub API (`@octokit/rest`) to fetch PR content and post comments, requiring `GITHUB_TOKEN` with `pull-requests: write` scope. File system operations (`fs.readFileSync`) are used for local file analysis. The `child_process.spawn` is used internally by `mcp-client.js` to invoke the `mcp-server.js` or `cli-scanner.js` locally, and by `run.sh` to potentially start a Python HTTP server (for artifacts viewer). No direct `eval` or arbitrary external command execution from user input is observed. `LDS_STORYBOOK_URL` could point to an external resource, but its usage is currently for a planned feature (Phase 2) and not actively making network requests from the core analysis. Overall, the approach seems designed with security in mind for its intended purpose, but relies on GitHub's security for fetching PR content.
Updated: 2025-12-12GitHub→
0
0
Medium Cost
wechicken456 icon

CTF-agent

by wechicken456

Sec2

AI assistant for solving Capture-The-Flag (CTF) cybersecurity challenges.

Setup Requirements

  • ⚠️Requires `uv` for dependency management.
  • ⚠️Docker is required to run the associated services (python-sandbox, web, network).
  • ⚠️Requires Python 3.11 or higher.
  • ⚠️Assumes an external 'ghidra' MCP server is also available for full functionality as referenced in prompts.
Review RequiredView Analysis
The server uses `subprocess.run(cmd, shell=True)` for many tools (e.g., `curl`, `xxd`, `exiftool`, `checksec`, `ropgadget`, `binwalk`, `gdb`, `one_gadget`, `libc_database`, `run_shell_command`, `run_ffuf_scan`), which introduces significant command injection risks if user inputs are not perfectly sanitized. The `run_python_script` tool allows arbitrary Python code execution, which is demonstrated as exploitable in `my_first_pwnie.py` with `eval(input())`. Docker containers are granted `NET_ADMIN` and `NET_RAW` capabilities, allowing extensive network manipulation. While these features are intended for a CTF solving agent, they make the server highly insecure for general-purpose use or in untrusted environments, posing a critical risk of host compromise if the underlying MCP communication is compromised or misused.
Updated: 2026-01-12GitHub→
0
0
Medium Cost
Uzmakanwl icon

mcp-server

by Uzmakanwl

Sec5

This project appears to be a generic server implementation, likely intended to provide backend services or handle specific network protocols related to 'MCP', though its exact purpose is unknown without the source code.

Review RequiredView Analysis
A critical security audit cannot be performed as no source code was provided. The score of 5 reflects an unknown state; without code, it's impossible to check for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. Therefore, its safety cannot be guaranteed.
Updated: 2025-11-26GitHub→
0
0
Low Cost
chewlabs icon

n8n-mcp

by chewlabs

Sec1

A server component designed to extend or interact with the n8n workflow automation platform, potentially for multi-cloud or specific integration purposes.

Setup Requirements

  • ⚠️Source code not provided for review (CRITICAL)
  • ⚠️Requires a running n8n instance for integration (likely)
  • ⚠️Node.js runtime environment (likely)
Review RequiredView Analysis
Source code for analysis was not provided. Therefore, a comprehensive security audit could not be performed. Running this without reviewing the actual code is highly risky, as it's impossible to identify 'eval', obfuscation, hardcoded secrets, or malicious patterns.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
namm163 icon
Sec7

A test server for developers building Model Context Protocol (MCP) clients, demonstrating various MCP features like tools, prompts, resources, and sampling.

Setup Requirements

  • ⚠️Requires Node.js and npm/npx
  • ⚠️Requires an MCP client to interact with
Verified SafeView Analysis
The 'printEnv' tool exposes all server-side environment variables, which can lead to information disclosure if sensitive data is stored in environment variables and accessed by an unauthorized client. The 'zip' tool fetches arbitrary URLs, posing a Server-Side Request Forgery (SSRF) risk if a malicious client provides internal or sensitive URLs. CORS is configured with 'origin: "*"' in sse.ts and streamableHttp.ts, which is insecure for production environments. These issues are noted in the context of a test server; no 'eval', child_process execution, or hardcoded secrets were found.
Updated: 2025-11-24GitHub→
0
0
Medium Cost
MCPRUNNER icon

filescrubberMCP

by MCPRUNNER

Sec7

A Model Context Protocol (MCP) server that extends AI assistants with comprehensive file system operations, multi-format data parsing, Scriban template processing, HTTP client operations, and workflow automation.

Setup Requirements

  • ⚠️Requires .NET 10.0 SDK or later.
  • ⚠️The `FILESCRUBBER_FILE_DIRECTORY` environment variable is crucial for sandboxing file operations, especially in Docker or production environments. If not set, it defaults to the current working directory, potentially exposing unintended files.
  • ⚠️The `fscrub_ask_github_copilot` tool requires an active GitHub Copilot context (e.g., within an IDE integrated with Copilot) to function as intended, as the server acts as a proxy to Copilot.
Verified SafeView Analysis
The server provides powerful file system operations and HTTP client capabilities, which inherently carry risks (e.g., path traversal, SSRF) if inputs are not rigorously validated. While the `FILESCRUBBER_FILE_DIRECTORY` environment variable helps restrict file access, its enforcement across all path parameters needs explicit verification. The `fscrub_ask_github_copilot` tool acts as a proxy, shifting prompt injection risks to the GitHub Copilot service rather than server-side code execution. No direct 'eval' or obfuscation found. Standard .NET security practices are followed with dependency injection and structured logging. Overall, reasonable security for an advanced tool, but careful client-side input validation is crucial for an AI assistant scenario.
Updated: 2025-11-27GitHub→
0
0
Low Cost
Aryanjstar icon

fi-mcp-server

by Aryanjstar

Sec10

Provides a mock financial data API for the AURA Financial Platform, simulating the Fi Money MCP API for development and demonstration.

Verified SafeView Analysis
The server is a mock data provider and does not interact with real financial systems. All data is hardcoded or generated synthetically based on predefined profiles. There is no dynamic code execution (like eval) from user input, no direct database interactions, and no external API calls to real financial services. The provided phone numbers are for demo purposes only. The session management is minimal and does not store sensitive user data. Overall, it is very safe to run as a development/demonstration tool.
Updated: 2025-12-06GitHub→
0
0
High Cost
ry-ops icon
Sec8

Manages Microsoft 365 users, licenses, and groups via Microsoft Graph API, enabling automated M365 administration through AI agents.

Setup Requirements

  • ⚠️Requires Python 3.10+ and `uv` package manager.
  • ⚠️Mandatory Microsoft Azure App Registration with specific, broad 'Application' API permissions (User.ReadWrite.All, Directory.ReadWrite.All, Group.ReadWrite.All, Organization.Read.All) and admin consent.
  • ⚠️Manual configuration of Claude Desktop's `claude_desktop_config.json` with an absolute path to the project directory and environment variables.
Verified SafeView Analysis
The server uses `msal` for authentication and `httpx` for API calls, which are standard and secure libraries. Environment variables are correctly used for storing credentials, preventing hardcoding. Broad Azure AD application permissions (User.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All) are required, which is a significant privilege and necessitates careful management of the client secret and adherence to the principle of least privilege. The `install.sh` script uses `curl | sh` for `uv` installation, a common but potentially risky practice. Overall, the code itself follows good security practices, but the security of the deployment relies heavily on proper Azure AD configuration and secret management by the user.
Updated: 2025-12-08GitHub→
0
0
Low Cost
wenjiachengy icon

mysql_mcp_server

by wenjiachengy

Sec4

A Model Context Protocol (MCP) server that enables AI assistants to securely interact with MySQL databases for listing tables, reading data, and executing SQL queries.

Setup Requirements

  • ⚠️Requires a running MySQL database instance.
  • ⚠️Requires manual creation and configuration of a highly restricted MySQL user with specific permissions for secure operation (as detailed in SECURITY.md).
Review RequiredView Analysis
The `call_tool` function directly executes arbitrary SQL queries provided by the AI assistant (`cursor.execute(query)`). This is a critical SQL injection vulnerability if the AI's output is not strictly controlled or whitelisted. While the documentation explicitly warns about this and recommends 'query whitelisting for production use' and using a 'database user with minimal required permissions', the server itself exposes this high-risk functionality. The `read_resource` function dynamically constructs table names from the URI (`f"SELECT * FROM {table} LIMIT 100"`), which is also a potential, albeit lower, SQL injection risk if URI parsing is insufficient or an attacker can craft malicious URIs. No hardcoded secrets were found, and configuration uses environment variables, which is a good practice.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
ivossos icon

fccs-mcp-server

by ivossos

Sec8

Provides an AI-powered conversational interface for Oracle FCCS (Financial Consolidation and Close Cloud Service) operations, financial planning, analysis, and investment reporting.

Setup Requirements

  • ⚠️FCCS Credentials Required for Live Use: For integration with a real Oracle FCCS instance, the FCCS_URL, FCCS_USERNAME, and FCCS_PASSWORD environment variables must be securely configured. The server defaults to mock mode if these are not provided or FCCS_MOCK_MODE is explicitly set to true.
  • ⚠️Local File System Access for Memo Generation: The generate_investment_memo tool creates a Word document (.docx) and saves it to the local file system (process.cwd()). In serverless or containerized environments, ensuring persistent storage or a mechanism to retrieve this generated file would be necessary.
Verified SafeView Analysis
The server uses dotenv for environment variables, which is good practice for managing secrets. The FccsClient handles sensitive FCCS_URL, FCCS_USERNAME, and FCCS_PASSWORD for external API calls, which is an inherent risk of integrating with financial systems. However, a mock mode (FCCS_MOCK_MODE=true) is provided for safe local development. No 'eval' or other dynamic code execution from user input was identified. The Express.js server with SSE transport exposes the server to the network, requiring standard network security practices in deployment.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
OBEDPoP icon

NinjaCode-MCP

by OBEDPoP

Sec3

NinjaCode is an MCP server designed to help AI agents generate high-quality, secure, and maintainable code by providing real-time code quality and security analysis.

Setup Requirements

  • ⚠️Users must download signed executables exclusively from official NinjaMinds channels (ninjaminds.org or official GitHub releases) due to the risk of malware from unofficial sources.
  • ⚠️The server operates as a local executable (stdio-based) started by the IDE; it cannot be configured to use a remote URL directly from IDEs like VS Code (at least not yet).
  • ⚠️To enable automatic enforcement and guidance from NinjaCode, users must manually copy a `copilot-instructions.md` template into their project's `.github` folder and restart their IDE.
Review RequiredView Analysis
A comprehensive security audit of the server's actual implementation code is not possible as the provided 'source code' is solely the project's README.md file. The README emphasizes downloading signed executables only from official channels, indicating that the primary distribution method is pre-compiled binaries whose internal security cannot be verified without access to their source. Therefore, the security score reflects the inability to audit the underlying code for 'eval', obfuscation, or malicious patterns within the server itself.
Updated: 2026-01-16GitHub→
PreviousPage 534 of 760Next