Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
kevindupas icon

mcp-server-remote

by kevindupas

Sec7

A remote Model Context Protocol (MCP) server for Claude Desktop and other AI clients to access DQoS data via HTTP/SSE, implementing OAuth 2.0 for secure authentication.

Setup Requirements

  • ⚠️Requires `DQOS_API_URL` environment variable pointing to an external DQoS API.
  • ⚠️For OAuth, in-memory token storage is used, which is not suitable for production multi-instance deployments or restarts; a persistent store like Redis or a database is required for production.
  • ⚠️Requires secure generation and management of `OAUTH_CLIENT_ID`, `OAUTH_CLIENT_SECRET`, and `JWT_SECRET` environment variables for production.
  • ⚠️HTTPS is strongly recommended and practically required for production deployments, especially when using OAuth.
Verified SafeView Analysis
The OAuth 2.0 implementation relies on in-memory storage for authorization codes and access tokens, making it unsuitable for production environments requiring persistence across restarts or horizontal scaling. All secrets (JWT_SECRET, OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET) have default 'change-me-in-production' values, which must be overridden in a production environment. HTTPS is crucial for production deployments.
Updated: 2025-11-26GitHub→
0
0
Low Cost
aszmuda icon

oncp-mcp-server

by aszmuda

Sec8

Hosts an MCP-compatible SSE server for LLM clients to trigger and monitor automated resolution jobs via a downstream FastAPI service.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Requires 'uv' package manager for running and dependency management
  • ⚠️Requires a downstream FastAPI service to be reachable at the configured 'RESOLUTION_SERVICE_URL'
  • ⚠️Requires a '.env' file configured with 'RESOLUTION_SERVICE_URL'
Verified SafeView Analysis
The server binds to '0.0.0.0' by default, making it network-accessible; restrict access if not intended for public exposure. Ensure 'RESOLUTION_SERVICE_URL' points to a trusted downstream service. Error logs (str(exc)) could potentially expose internal exception details, though inputs are validated.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
Sec4

Provides a server to capture and process real-time telemetry data from the game Assetto Corsa Rally.

Setup Requirements

  • ⚠️Requires the game 'Assetto Corsa Rally' to be installed and running.
  • ⚠️Requires a suitable environment for running a server application, potentially including specific port configurations or firewall rules.
  • ⚠️Specific programming language runtime and dependencies are not mentioned in the truncated README and would need to be identified from the full repository.
Review RequiredView Analysis
No code was available for direct analysis of 'eval', obfuscation, or specific network vulnerabilities. As a server application, it will inherently open network ports, which always presents a potential attack surface if not properly secured and configured. Cannot confirm safety without code review.
Updated: 2025-11-17GitHub→
0
0
Low Cost
bioanywhere icon
Sec9

This repository provides Docker deployment configurations and scripts for the gitlab-mcp-server, enabling local development, CI/CD, and GitHub Container Registry integration.

Setup Requirements

  • ⚠️Docker required for building and running containers.
  • ⚠️Specific application-level environment variables for the MCP server are not defined in this configuration and must be supplied by the user.
  • ⚠️Authentication to GitHub Container Registry is required if the image is private.
Verified SafeView Analysis
The provided source code for the Docker deployment is straightforward and uses standard Docker practices. There are no apparent uses of 'eval', code obfuscation, hardcoded secrets, or unusual network configurations. The healthcheck uses 'wget', and environment variables are expected to be supplied externally (via .env or docker-compose.yml), which is good practice. The actual security of the MCP server itself would depend on its internal source code, which is not provided here.
Updated: 2025-12-01GitHub→
0
0
Medium Cost
bharathRathod23 icon

ORACLE-MCP-SERVER

by bharathRathod23

Sec3

A Model Context Protocol (MCP) server that connects to an Oracle Database, allowing LLM models to interact with the database and retrieve data.

Setup Requirements

  • ⚠️Requires Oracle Instant Client: A native dependency that needs to be installed separately and configured (e.g., Homebrew on macOS, LD_LIBRARY_PATH on Linux).
  • ⚠️Requires Oracle Database: Needs Docker Desktop for local setup or access to an existing Oracle Database instance.
  • ⚠️Environment Variables: Requires precise configuration of Oracle connection details (ORACLE_USER, ORACLE_PASSWORD, ORACLE_HOST, ORACLE_PORT, ORACLE_SERVICE_NAME) either in a `.env` file or directly within the MCP client's configuration.
Review RequiredView Analysis
The `execute_query` tool directly passes the LLM-generated `query` string to the `oracledb.execute` function without robust sanitization or specific bind variable usage for the query itself. This creates a critical SQL Injection vulnerability, allowing a malicious or flawed LLM to execute arbitrary SQL commands (including DDL/DML if the database user has permissions). While the README recommends using a read-only database user, the code does not enforce this, making it inherently unsafe for untrusted input. Hardcoded default Oracle password 'Oracle18' exists in the Docker setup script, but is intended for local dev setup and should be overridden by `.env` for runtime.
Updated: 2025-12-06GitHub→
0
0
Low Cost
matthsena icon

my-browser-mcp

by matthsena

Sec2

Programmatic browser control and automation via a Chrome extension and server for web interactions.

Setup Requirements

  • ⚠️Requires Google Chrome browser installation.
Review RequiredView Analysis
No actual source code provided for analysis, only README.md. The project describes itself as an 'MCP server for programmatic browser control and automation,' which inherently involves executing commands and potentially arbitrary code within a browser context based on server input. This type of functionality poses severe security risks (e.g., Remote Code Execution, Cross-Site Scripting, data exfiltration) if not implemented with robust input validation, authentication, and authorization. Without access to the implementation details, it's impossible to verify any security safeguards against 'eval'-like execution, network vulnerabilities, or hardcoded secrets. The lack of code visibility for a high-risk system leads to a very low security score and a recommendation against running it.
Updated: 2025-11-28GitHub→
0
0
Medium Cost
anandprasad29 icon

ai-finance-app

by anandprasad29

Sec8

An AI-powered personal finance assistant that integrates with Copilot Money and Google Sheets to answer finance-related questions via Claude Code CLI.

Setup Requirements

  • ⚠️Requires macOS for the Copilot Money application and its local data cache.
  • ⚠️Requires manual setup of a Google Cloud Project, enabling specific APIs (Sheets, Drive), and configuring OAuth 2.0 credentials.
  • ⚠️Relies on installing external Node.js (`copilot-money-mcp`) and Python (`google-workspace-mcp` via `uvx`) packages globally.
Verified SafeView Analysis
The project itself is configuration-only, relying on well-established, open-source MCPs. The `copilot-money-mcp` is 100% local and does not make network requests. The `google-workspace-mcp` interacts with Google APIs via standard OAuth 2.0. The setup instructions include `OAUTHLIB_INSECURE_TRANSPORT: "1"` which is generally insecure but noted for local development setup; users should be aware of this for temporary configuration. No 'eval', obfuscation, or hardcoded secrets are found in this repository's source code; sensitive credentials are explicitly handled as environment variables in the user's local Claude configuration.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
omriavigdor2210 icon

kotlin-web-context-mcp

by omriavigdor2210

Sec3

Serves as a backend web application or API server built with Kotlin and Ktor.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK)
  • ⚠️Requires Gradle to build and run
Review RequiredView Analysis
Source code was truncated/summarized, preventing a thorough security audit. Specific checks for 'eval', obfuscation, hardcoded secrets, or malicious patterns could not be performed. Running this project without full code review carries inherent unknown risks.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
yuu-git icon
Sec3

A system for managing public notes, including TODOs, ideas, guidelines, and code samples, likely facilitated by an AI-powered MCP server.

Setup Requirements

  • ⚠️Requires a running instance of 'ateliers-ai-mcpserver' as detailed in the linked repository (https://github.com/yuu-git/ateliers-ai-mcpserver).
Review RequiredView Analysis
No source code for this specific component was provided for analysis. Cannot perform a security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. The README explicitly states it is managed 'via' an MCP server, detailed in a separate, unprovided repository (`ateliers-ai-mcpserver`), which would contain the critical implementation details for security assessment.
Updated: 2025-11-24GitHub→
0
0
Medium Cost

Opus-MCP

by Moenamatics

Sec7

An API-driven platform for orchestrating, managing, and monitoring the execution of workflows or jobs, potentially involving file uploads and status tracking.

Setup Requirements

  • ⚠️Requires Node.js and npm/yarn for dependency management and execution.
  • ⚠️Requires configuration via environment variables (e.g., database connection, API keys, port) as indicated by `.env.example`.
  • ⚠️Likely requires a database and potentially external storage for job artifacts, which are not explicitly specified but implied by 'workflow orchestration' and 'uploading files'.
Review RequiredView Analysis
Cannot inspect code for 'eval' or obfuscation. As an API-driven server for job execution and file handling, it inherently presents network risks. Security depends heavily on implementation details, proper configuration, and access controls for the API endpoints, which cannot be assessed from file names alone. The presence of `.env.example` indicates configurable sensitive parameters.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
andreasklae icon

MCP_server_for_apis

by andreasklae

Sec9

Provides a Model Context Protocol (MCP) server for Norwegian cultural heritage APIs, enabling AI agents to query Wikipedia, Store Norske Leksikon, and Riksantikvaren databases.

Setup Requirements

  • ⚠️Requires OpenAI API Key or Azure OpenAI credentials for chat features (paid services).
  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Session state is in-memory and non-persistent, meaning sessions are lost on server restart and it's not designed for horizontal scaling.
Verified SafeView Analysis
The server implements strong security measures including robust SSRF protection (`src/security/ssrf.py`) to prevent access to private IP ranges and cloud metadata endpoints. Authentication middleware (`src/security/auth.py`) is in place to protect sensitive endpoints with a configurable `MCP_AUTH_TOKEN`. Rate limiting (`src/utils/rate_limit.py`) is also implemented to mitigate abuse. Environment variables are used for sensitive information like API keys, preventing hardcoding. No 'eval' or obvious obfuscation was found.
Updated: 2026-01-19GitHub→
0
0
Low Cost
pdebruin icon
Sec7

Provides sample code for learning about an MCP server, likely focused on development or specific network protocols.

Review RequiredView Analysis
Source code is too truncated (only README content provided) to perform a meaningful security audit. No executable code found to analyze for risks like 'eval', hardcoded secrets, or network vulnerabilities. The score reflects an inability to detect specific issues rather than proven safety.
Updated: 2025-11-26GitHub→
PreviousPage 538 of 760Next