Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
High Cost
eagleisbatman icon

content-mcp-server

by eagleisbatman

Sec8

AI-powered content generation service for Vietnamese farmers, producing weekly podcasts and image articles based on agricultural data.

Setup Requirements

  • ⚠️Requires Google Gemini API Key (Paid service for text, images, and TTS generation)
  • ⚠️Requires Cloudinary API Key and Secret (Paid service for image/audio storage)
  • ⚠️Requires PostgreSQL database connection (Self-hosted or Managed)
  • ⚠️Requires external Backend API URL for trend analysis
Verified SafeView Analysis
No direct 'eval' or obvious command injection vectors found in the provided truncated code. Database interactions leverage parameterized queries, which is good practice against SQL injection. Sensitive API keys and database credentials are expected to be handled via environment variables. Many core AI generation and planning functions are marked as 'TODO', meaning their security will depend heavily on future implementation. The default 'CORS_ORIGIN=*' is broad and should be tightened for production environments.
Updated: 2025-11-30GitHub→
0
0
Low Cost
agentic-forge icon

forge-anvil

by agentic-forge

Sec8

A client tool for testing and interacting with MCP (Microservice Communication Protocol) servers, offering both CLI and web UI interfaces.

Setup Requirements

  • ⚠️Requires Python 3.12 or higher.
  • ⚠️Requires `uv` for dependency management and running (e.g., `uv sync`, `uv run`).
  • ⚠️Primarily designed to test *other* running MCP servers; it does not provide an MCP server itself, but rather a client and a local UI server.
Verified SafeView Analysis
The server is a client tool for interacting with arbitrary, user-specified MCP servers. While the tool itself appears to handle input and internal operations safely (e.g., uses `json.loads` for parsing JSON arguments, not `eval`), the inherent nature of connecting to any user-provided URL means the user could direct it to a malicious remote server. The local web UI server (`SimpleHTTPRequestHandler`) serves static files and injects a default server URL; this particular injection method does not present an immediate XSS risk from user input. No hardcoded secrets were found.
Updated: 2026-01-15GitHub→
0
0
Medium Cost

remote-research

by agentmart

Sec6

A server for remote research collaboration and information retrieval, leveraging a chatbot to interact with scientific and potentially medical papers.

Setup Requirements

  • ⚠️Requires MedGemma model setup (e.g., local download or API key).
  • ⚠️Requires populating the 'papers' directory with research documents.
  • ⚠️Likely needs API keys or service credentials configured in `server_config.json` for external services or LLM access.
Review RequiredView Analysis
As a network-facing server with chatbot functionality, potential risks include unsanitized user inputs leading to prompt injection or RCE, and lack of explicit authentication/authorization mechanisms without code review. `server_config.json` may contain sensitive information.
Updated: 2025-11-17GitHub→
0
0
Low Cost
guilhermetechmakers icon
Sec3

A cross-platform personal sleep coach application generating daily personalized pre-sleep and morning rituals, with sleep tracking and journaling features.

Setup Requirements

  • ⚠️Requires a separate backend API server to be running and accessible at the EXPO_PUBLIC_API_URL environment variable, as this repository only contains the frontend code.
  • ⚠️Full payment processing for subscriptions relies on a Stripe backend integration (including tokenization and webhook handling), which is not part of this frontend codebase and will need significant development.
  • ⚠️Wearable API integrations (Apple Health, Google Fit, Oura, Fitbit, Garmin) are only conceptual in the frontend types and hooks; the actual integration and backend synchronization logic are missing.
Review RequiredView Analysis
CRITICAL SECURITY RISK: The `PaymentForm` component is designed to collect raw credit card information (card number, expiry date, CVV, cardholder name, zip code) directly on the client side. Storing this sensitive, un-tokenized data in client-side state (`paymentMethod` in `Pricing.tsx`) is a severe PCI DSS violation and highly insecure. Real-world applications must use a payment gateway's client-side SDK (e.g., Stripe React Native SDK) to tokenize card data before it ever touches the application's internal state or custom backend. Minor Risk: Authentication tokens are stored using `AsyncStorage` in `src/lib/api.ts`. While common in React Native, `AsyncStorage` is not truly secure storage. `expo-secure-store` is available in the dependencies but not used for tokens, which would provide better protection on rooted/jailbroken devices. No obvious 'eval', obfuscation, or other direct malicious patterns were found.
Updated: 2025-11-26GitHub→
0
0
High Cost
pietro-della-peruta icon

quantum_mcp_server

by pietro-della-peruta

Sec4

An MCP server that provides an interface to IBM Quantum computing services for listing backends and executing quantum circuits.

Setup Requirements

  • ⚠️Requires an active IBM Quantum account and API Token (QISKIT_IBM_TOKEN env var), which may incur costs for running on real quantum hardware or cloud simulators.
  • ⚠️The client example (`shor_example.py`) depends on the `shor_15_7.qasm` file being present. If missing, it requires running `python generate_shor_qasm.py` first.
  • ⚠️Requires specific Qiskit versions: `qiskit>=1.0.0` and `qiskit-ibm-runtime>=0.20.0`.
Review RequiredView Analysis
CRITICAL: The `qiskit_tools.py` file contains a line `print("Using token: ", token, file=sys.stderr)` within the `get_service()` function, which logs the `QISKIT_IBM_TOKEN` to standard error. This is a severe security vulnerability as it exposes a sensitive API key, which could be captured by logging systems or visible in terminal output. This line should be removed or the token should be masked. Additionally, the `run_circuit` tool accepts raw QASM code as a string input, which, while not immediately exploitable for arbitrary code execution (as QASM is a domain-specific language), could potentially be used for denial-of-service attacks if extremely large or malformed circuits are submitted without proper resource limits or validation. However, the primary critical risk is the token leak.
Updated: 2025-12-10GitHub→
0
0
Low Cost
ShreyKamdar0503 icon
Sec4

An AI healthcare receptionist for a dental clinic, handling multi-agent voice conversations for appointment scheduling, patient intake, insurance checks, and call logging.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid) for GPT-4o-mini.
  • ⚠️Requires VAPI platform setup and configuration.
  • ⚠️Requires an n8n instance with configured workflows for CRM, scheduling, etc.
  • ⚠️Requires Google Sheets access for CRM and call logging, and Twilio for telephony.
Review RequiredView Analysis
The provided `andrea-assistant-config-full.json` explicitly states `"isServerUrlSecretSet": false`. This indicates that the VAPI platform is configured to call the MCP server without a shared secret for authentication, making the MCP server's endpoint vulnerable to unauthorized access if exposed publicly. Without the actual MCP server source code, it's impossible to audit for other risks like hardcoded secrets, input validation, or internal vulnerabilities.
Updated: 2025-12-12GitHub→
0
0
Medium Cost
evgenygurin icon

r2r-ultra-mcp-server

by evgenygurin

Sec9

Provides an enterprise-grade Model Context Protocol (MCP) server that integrates with an R2R (Retrieval & RAG) backend, offering tools for hybrid search, RAG queries, multi-turn agent conversations, collection management, document upload, and automated workflows, optimized for client applications like Cursor or Claude Desktop.

Setup Requirements

  • ⚠️Requires an external R2R API instance to be running and accessible.
  • ⚠️Requires an R2R API_KEY for authentication with the R2R backend.
  • ⚠️Requires Python 3.10 or higher.
Verified SafeView Analysis
The server employs good security practices, including loading API keys from environment variables, implementing rate limiting, and using an ErrorHandlingMiddleware to prevent exposure of raw internal exceptions. Input validation is also demonstrated as a best practice. The overall security relies on proper configuration and the underlying R2R instance's security.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
skanga icon

CodeSeek

by skanga

Sec9

Provides semantically-aware, fast code search and context management for AI coding agents, offering ranked file results and code analysis.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) to build using Maven.
  • ⚠️Requires Java Runtime Environment (JRE) to run the compiled JAR.
Verified SafeView Analysis
The application uses `ProcessBuilder` in `GitUtils.java` to execute `git` commands for repository metadata. The arguments passed to `git` appear to be well-controlled and not susceptible to arbitrary command injection directly from user queries. File I/O for caching and sessions is restricted to the `.codeseek` directory within the project root. A potential, but common, risk in AI agent integrations is the `cwd` (current working directory) parameter in tool calls like `search_files`. If an untrusted agent could specify an arbitrary `cwd` outside the intended project, it could theoretically be used to scan unintended file systems. However, this is typically mitigated by running agents within sandboxed or controlled environments and trusting the agent's intent. No hardcoded secrets or 'eval'-like constructs for arbitrary code execution from user input were found in the provided source.
Updated: 2026-01-18GitHub→
0
0
Low Cost
bhakti259 icon
Sec9

Proxy remote FastMCP expense tracker tools to a local stdio interface.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer.
  • ⚠️Dependencies 'mcp' and 'aiohttp' must be installed.
  • ⚠️Relies on the availability and responsiveness of the remote FastMCP server at 'https://chronic-scarlet-urial.fastmcp.app/mcp'.
Verified SafeView Analysis
The server acts as a transparent proxy, forwarding requests to a hardcoded remote FastMCP URL. It utilizes standard Python libraries (aiohttp, json) for network communication and JSON parsing. There are no clear indications of 'eval', obfuscation, or arbitrary code execution from untrusted input within the provided source. The primary security consideration would be the integrity and trustworthiness of the remote FastMCP server it proxies to, as the proxy itself introduces minimal new attack surfaces beyond being a relay.
Updated: 2025-11-28GitHub→
0
0
Medium Cost
birchamp icon

dcs-mcp

by birchamp

Sec9

A React application for navigating translation helps, synchronized with scripture references.

Setup Requirements

  • ⚠️Requires external 'translation-helps-mcp' API backend (https://translation-helps-mcp-945.pages.dev) to be online and accessible for full functionality.
Verified SafeView Analysis
Client-side React application with standard, encoded API calls to a secure HTTPS endpoint. No obvious dangerous functions (like eval or dynamic require/child_process) or hardcoded secrets are present in the provided source code snippets. The `BASE_URL` is either hardcoded to a production endpoint or proxied to it during development, using `encodeURIComponent` for URL parameters which mitigates basic injection risks.
Updated: 2025-11-22GitHub→
0
0
Low Cost
marcinACN icon

mcp-server

by marcinACN

Sec10

Provides a Spring Boot backend server component intended for integration with or serving an AI Core system.

Setup Requirements

  • ⚠️Requires Java Development Kit (JDK) to compile and run.
  • ⚠️Requires Maven or Gradle build tool for project management and execution.
  • ⚠️Implicit dependency or integration with an external 'AI Core' system, whose requirements are not defined in the provided code.
Verified SafeView Analysis
The provided source code is extremely minimal, consisting only of the main Spring Boot application class and a test class. No 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns were found in the truncated code. A comprehensive security audit would require access to the full codebase, including dependencies, configuration, and business logic.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
steveo2023 icon

tealium-mcp-server

by steveo2023

Sec8

Hosts a Model Context Protocol (MCP) server to provide real-time visitor profile lookups from Tealium CDP.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher.
  • ⚠️Requires Tealium API credentials (username, API key) to be provided by the client (e.g., Claude) with each request via headers or query parameters.
  • ⚠️Requires mapping of MCP API keys to specific Tealium account/profile combinations using `API_KEY_<ID>` and `TEALIUM_PROFILE_<ID>` environment variables for server configuration.
Verified SafeView Analysis
The server securely handles Tealium authentication by using client-provided credentials per request and caching tokens, rather than storing them. MCP API keys are configured via environment variables and map to specific Tealium accounts/profiles. There are no evident uses of 'eval' or hardcoded secrets. CORS is enabled by default for all origins, which is common for APIs but could be tightened if stricter access control is desired. The `ADMIN_KEY` is mentioned in the README but not implemented in the provided source code, so there's no administrative API surface to audit.
Updated: 2025-11-23GitHub→
PreviousPage 539 of 760Next