Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
mouguu icon
Sec9

Provides a production-ready Model Context Protocol (MCP) server on Cloudflare Workers, offering tools to search and retrieve Hono documentation for AI models.

Setup Requirements

  • ⚠️Requires Node.js 18+ to run locally.
  • ⚠️A Cloudflare account is needed for deployment.
Verified SafeView Analysis
The server uses Zod for input validation and fetches documentation from specific, hardcoded Hono.dev and GitHub URLs, limiting arbitrary external resource access. No 'eval' or obvious hardcoded secrets found in the provided source. Deployment on Cloudflare Workers adds platform-level security benefits.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
bvirfollet icon

MCP_server

by bvirfollet

Sec9

The MCP Server enables AI models to securely interact with local system resources through a defined protocol, offering granular control over file access, code execution, resource usage, and various communication transports.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️The default JWT_SECRET_KEY is 'changeme-32-chars-minimum-for-development-only!!!!' and MUST be set via an environment variable or configuration for production environments.
  • ⚠️Aiohttp is required for WebSocket transport and may need to be installed separately.
  • ⚠️For network transports (TCP/WebSocket), specific run methods (e.g., run_with_tcp, run_with_websocket, run_multi_transport) must be called instead of the default `server.run()` which uses Stdio.
Verified SafeView Analysis
The server demonstrates an exceptionally strong focus on security. It implements a multi-layered defense-in-depth architecture covering authentication (JWT, bcrypt), fine-grained authorization (RBAC with explicit permissions and wildcard matching), input validation (JSON Schema), and extensive sandboxing. Code execution is isolated in subprocesses with restricted Python namespaces (blocking dangerous imports/builtins like 'os', 'sys', 'eval'), resource quotas, and dedicated client directories to prevent path traversal and cross-client access. All significant operations are meticulously logged to an append-only audit trail. The use of a default 'changeme' JWT secret is noted as a development fallback but actively encourages environment variable usage for production.
Updated: 2025-11-23GitHub→
0
0
Low Cost
ronibandini icon

HuskyLens2MCP

by ronibandini

Sec8

Provides a command-line interface to interact with a DFRobot HuskyLens 2 MCP Server, leveraging Google Gemini AI for visual reasoning and natural language processing of sensor data.

Setup Requirements

  • ⚠️Requires DFRobot HuskyLens 2 with 1.1.6+ firmware (or later)
  • ⚠️Requires a Google Gemini API Key (available on free tier)
  • ⚠️Requires HuskyLens MCP Server to be enabled and its IP address configured in the script
  • ⚠️Requires `google-genai` Python package (`pip install google-genai`)
Verified SafeView Analysis
The script is a client and connects to a user-specified HuskyLens MCP server. Hardcoded placeholders for `GEMINI_API_KEY` and `SERVER_URL` require manual modification by the user, which is a minor security anti-pattern but acceptable for a local CLI utility. Input for LLM prompts (from HuskyLens sensor data and user queries) introduces inherent prompt injection risks, common in LLM applications. No `eval` or `exec` found. `os.system('cls')` is used for clearing the console, not a security risk.
Updated: 2025-11-29GitHub→
0
0
Low Cost
Incredibuild-RND icon

incredibuild-mcp-server

by Incredibuild-RND

Sec9

An MCP server enabling AI assistants to query IncrediBuild build history from local SQLite databases.

Setup Requirements

  • ⚠️Requires Docker to be installed and running for standard AI client integration.
  • ⚠️The environment variable 'IB_DB_DIR' must be set and point to an existing directory.
  • ⚠️The specified 'IB_DB_DIR' must contain the 'BuildHistoryDB.db' SQLite file.
Verified SafeView Analysis
The server operates using stdio transport, reducing direct network exposure from the application itself. It performs read-only operations on a local SQLite database, and database file path resolution includes basic validation. No 'eval' or hardcoded secrets were found. SQL queries are parameterized for timestamps, reducing injection risk. The primary security concern would be ensuring the integrity of the `BuildHistoryDB.db` file and the `IB_DB_DIR` environment variable.
Updated: 2025-12-10GitHub→
0
0
Low Cost
caitlyn-ai icon

caitlyn-openapi-mcp

by caitlyn-ai

Sec8

Provides a server that exposes OpenAPI specifications as queryable documentation resources and tools for LLMs, including semantic search and Scalar deep links.

Setup Requirements

  • ⚠️Requires `OPENAPI_SPEC_URL` environment variable to be set (a URL to an OpenAPI JSON/YAML spec).
  • ⚠️Downloads a ~80MB `sentence-transformers` model on first run or during installation for semantic search.
  • ⚠️Python 3.11 or higher is required.
  • ⚠️For the recommended development workflow, Node.js (for `npx`) and Docker (for OTEL Collector/Jaeger) are helpful.
Verified SafeView Analysis
The project demonstrates strong security practices including clear documentation on responsible disclosure, use of environment variables for configuration, and avoidance of `eval`/`exec` patterns. It uses `pickle.load` for caching embeddings and resolved OpenAPI specs; this introduces a deserialization vulnerability if an attacker can write malicious files to the cache directory, though this risk is generally low for typical deployments. A critical user responsibility is to ensure the `OPENAPI_SPEC_URL` points to a trusted and secure source, as external references are resolved.
Updated: 2025-11-27GitHub→
0
0
Medium Cost
alexandremahdhaoui icon

forge

by alexandremahdhaoui

Sec7

Forge is a modern, declarative, AI-native build orchestrator that streamlines Go project development by managing builds, tests, and integration environments using the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Go 1.24.1+ for development and building.
  • ⚠️Requires Docker or Podman for container builds and Kind cluster management.
  • ⚠️Requires Kind, kubectl, and Helm (3.8+ for OCI support) for Kubernetes-related test environments.
Verified SafeView Analysis
The system design inherently relies on executing external commands (e.g., `go build`, `docker build`, `kind`, `kubectl`, arbitrary commands via `generic-builder` and `generic-test-runner`). While these operations are fundamental to its purpose as a build and testing tool, executing untrusted `forge.yaml` configurations or external MCP inputs could lead to arbitrary command execution. Environment configuration in `testenv-lcr` includes TLS and authentication for local registries. `SKIP_CLEANUP` can leave resources for debugging. Overall, the tool itself is not malicious but its power requires trusted inputs.
Updated: 2025-12-26GitHub→
0
0
Low Cost

fastapi-mcp-server

by Magical-Bear

Sec5

An API server built with FastAPI, likely for managing or processing data related to an application or system referred to as 'MCP'.

Setup Requirements

  • ⚠️Requires Python 3.7+ installed.
  • ⚠️Requires 'fastapi' and 'uvicorn' Python packages to be installed.
Review RequiredView Analysis
The actual source code is not available for review. Without code, it's impossible to check for specific vulnerabilities like 'eval' usage, obfuscation, or custom code flaws. General security risks of running any API server apply (e.g., potential for unauthenticated access, injection vulnerabilities, or improper data handling) if not robustly implemented within the server's logic.
Updated: 2025-11-18GitHub→
0
0
Low Cost
ringotypowriter icon

mcp-server-toodo

by ringotypowriter

Sec8

Manages personal to-do lists with file-based storage, agent-tooling via MCP, and system tray integration for quick access on macOS.

Setup Requirements

  • ⚠️Requires macOS for system tray functionality (traykit-bindings and SF Symbols)
  • ⚠️Requires Bun runtime (bun v1.2.23+)
  • ⚠️Stores todo data locally in `~/.config/todos/`
Verified SafeView Analysis
The server primarily operates on local files within `~/.config/todos/` and utilizes a native system tray binding (`traykit-bindings`). The todo names are sanitized to prevent path traversal issues (e.g., `../`). No explicit 'eval' or direct network exposure beyond stdio for the MCP protocol is evident. Native bindings can inherently carry risks if the underlying library has vulnerabilities, but the usage appears standard. File system operations are confined to a user-specific configuration directory.
Updated: 2026-01-15GitHub→
0
0
Medium Cost
Atelier-Tech-001 icon

mcp-server-atellier-tech

by Atelier-Tech-001

Sec6

This project implements a custom Minecraft Protocol (MCP) server, allowing players to connect and interact within a simulated game world.

Setup Requirements

  • ⚠️Requires Node.js to be installed.
  • ⚠️Requires running 'npm install' to download dependencies.
Review RequiredView Analysis
The server processes untrusted network input (Minecraft packets), which is a common attack surface for DoS or remote code execution vulnerabilities if packet parsing and handling are not rigorously validated. No explicit 'eval', obfuscation, or hardcoded secrets were found. However, building a secure custom network protocol is complex and requires extensive validation beyond what's visible in the truncated source code.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
harche icon

ProDisco

by harche

Sec6

This server acts as a Model-Context-Protocol (MCP) endpoint, enabling AI agents to discover, analyze, and execute TypeScript code against Kubernetes, Prometheus, and Loki APIs within a sandboxed environment.

Setup Requirements

  • ⚠️Requires Node.js (tested with Node 16+).
  • ⚠️Full functionality (Kubernetes, Prometheus, Loki) requires access to respective running services and properly configured credentials (e.g., KUBECONFIG, PROMETHEUS_URL, LOKI_URL environment variables).
  • ⚠️Exposes all process environment variables to sandboxed code, necessitating strict control over the MCP server's runtime environment to prevent credential leakage.
Review RequiredView Analysis
The sandbox utilizes Node.js `vm.createContext` for code execution, which provides process-level isolation but is not a robust security boundary against advanced VM escape techniques. A critical risk is the exposure of `process.env` to sandboxed code; any environment variables present in the MCP server's process (including sensitive API keys like `KUBECONFIG`, `ANTHROPIC_API_KEY`, `PROMETHEUS_URL`, `LOKI_URL`) are directly accessible to executed scripts. Access to external modules is restricted by an allowlist, mitigating arbitrary `require()` calls, but relies heavily on the security of allowlisted packages. The system supports secure transport (TLS/mTLS) for network-based sandbox connections, which is a positive for deployment.
Updated: 2026-01-13GitHub→
0
0
Low Cost
burnashe icon

Terragrunt

by burnashe

Sec2

A Chrome extension that prevents merging 'Work In Progress' (WIP) pull requests on GitHub by disabling the merge button based on the pull request title, assigned tags, incomplete tasks, or specific commit message prefixes.

Setup Requirements

  • ⚠️Requires a Chromium-based browser (e.g., Google Chrome) to install and run as an extension.
  • ⚠️Building from source requires Node.js (>=0.8.0) and Grunt.
  • ⚠️This is a client-side browser extension, not a server application.
Review RequiredView Analysis
The extension contains a Cross-Site Scripting (XSS) vulnerability. User-defined custom messages for the disabled merge button, stored in `localStorage.buttonMessage`, are directly injected into the `innerHTML` of the merge button element in `contentscript.js`. This allows for arbitrary JavaScript code execution on GitHub pages if a malicious or careless user provides a script as their custom button message.
Updated: 2025-12-15GitHub→
0
0
Low Cost
AthenZ icon
Sec3

MCP Oauth Proxy acts as a proxy authorization server to enable enterprise managed authorization for MCP and A2A use cases.

Setup Requirements

  • ⚠️Requires configuration for an enterprise identity provider (IdP).
  • ⚠️Requires OAuth client credentials (client ID, client secret) to be securely provided.
Review RequiredView Analysis
Source code provided is limited to the README.md file only. A comprehensive security audit cannot be performed as no functional code (e.g., JavaScript, Python, Go files) was provided to analyze for vulnerabilities like 'eval' usage, obfuscation, network risks, hardcoded secrets, or malicious patterns. Given its role as an OAuth proxy, its internal security mechanisms are critical but remain unverified, posing a significant risk due to the lack of auditable code.
Updated: 2026-01-18GitHub→
PreviousPage 535 of 760Next