Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
mave007 icon
Sec8

This server controls Philips Hue smart lights via API v2, enabling comprehensive management of lights, rooms, scenes, and sensors.

Setup Requirements

  • ⚠️Requires physical access to the Philips Hue Bridge to press the link button during initial authentication setup.
  • ⚠️Requires Python 3 and dependencies installed via `pip install -r requirements.txt`.
  • ⚠️The Hue Bridge must be on the same local network as the server for discovery and communication.
Verified SafeView Analysis
The server securely authenticates with the Philips Hue Bridge using an application key generated via a physical button press on the bridge. Configuration (including the API key) is stored in a YAML file, not hardcoded. It uses HTTPS for communication with the bridge. A minor security note is the explicit disabling of SSL certificate verification (`verify_ssl: false`), which is a documented requirement for Hue bridges due to their self-signed certificates on the local network. The server itself communicates via stdio, limiting direct network exposure.
Updated: 2025-11-23GitHub→
0
0
High Cost
Amri854 icon
Sec8

A comprehensive Model Context Protocol (MCP) server for Obsidian that provides powerful vault access, knowledge graph analysis, and advanced integration features, often for AI tools and automation.

Setup Requirements

  • ⚠️Requires absolute paths for local vault configuration, environment variables, and Claude Desktop setup.
  • ⚠️For full Obsidian app integration (e.g., opening notes in Obsidian, executing commands), the 'Local REST API' community plugin must be installed and running in Obsidian.
  • ⚠️The 'remote' vault type is designed for self-hosted REST API servers that the user must implement themselves, NOT for Obsidian Sync or other third-party cloud services.
  • ⚠️Requires Node.js version 18 or higher.
Verified SafeView Analysis
The server's core MCP communication happens over standard I/O (stdio), which limits direct network exposure for the protocol itself. Configuration for vault access and Obsidian API can involve sensitive data (API keys, vault paths). These are handled through environment variables or configuration files, which is good practice. Direct file system access by the LocalConnector requires trusted vault paths. RemoteConnector and ObsidianAPI rely on external HTTP endpoints; the security of these endpoints (e.g., Obsidian's 'Local REST API' plugin or custom servers) is outside the scope of this server's control and must be secured independently by the user. No direct 'eval' or obvious malicious patterns were identified in the provided source code snippets for the server's core logic.
Updated: 2026-01-19GitHub→
0
0
Low Cost

calcmcp

by RectangleEquals

Sec7

Provides basic mathematical, file listing, and utility tools for the Claude Desktop AI assistant via a Dockerized MCP server.

Setup Requirements

  • ⚠️Docker Desktop (with WSL Integration) is required.
  • ⚠️Claude Desktop is required.
  • ⚠️Installation relies on 'install.ps1', implying a Windows-centric setup.
Verified SafeView Analysis
The 'List Files' tool, if not properly sandboxed and restricted to specific directories or sanitized inputs, could pose a local file disclosure or path traversal risk. The 'install.ps1' script should be reviewed for unintended side effects during installation. No explicit signs of 'eval' or obfuscation are apparent from the provided information.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
Vid-Juric icon

mcp-servers-test

by Vid-Juric

Sec4

This repository serves as a test suite for validating MCP (Model Context Protocol) configuration discovery and vulnerability scanning tools.

Setup Requirements

  • ⚠️Requires various cloud/service API keys (e.g., AWS, Alibaba Cloud, Firecrawl, Context7) for different server configurations.
  • ⚠️Requires Docker, Node.js/NPM, and Python environments to run the diverse set of configured MCP servers.
  • ⚠️Involves executing external scripts/packages directly from GitHub or other sources, which requires careful security vetting and may introduce additional dependencies.
Review RequiredView Analysis
The repository's configuration files define multiple MCP servers, many of which involve executing third-party npm packages (e.g., '4oimage-mcp', 'abp-io-mcp-server', '@agent-infra/mcp-server-browser', '@upstash/context7-mcp') or a Docker image ('ashgw/s3-mcp:latest'). Crucially, one configuration directly specifies running a package from a GitHub URL ('github:hongsw/aligo-sms-mcp-server'), which is a significant security risk as it allows arbitrary code execution from an unverified source. Furthermore, while API keys and secrets are represented by placeholders (e.g., 'YOUR_API_KEY', 'your_access_key'), the configuration structure encourages direct embedding of sensitive credentials, posing a risk for misconfiguration if not properly managed. The use of 'powershell' to execute a local '.ps1' script also carries risk if the script's content is not fully audited. No obfuscation or 'eval' statements were explicitly found within the truncated source code.
Updated: 2025-12-03GitHub→
0
0
High Cost
kuyaxx icon
Sec3

Provides a Salesforce Model Context Protocol (MCP) server with enhanced UI capabilities for interacting with Salesforce data through queries, DML, and metadata operations.

Setup Requirements

  • ⚠️Requires Node.js and npm for installation and execution.
  • ⚠️Requires Salesforce CLI to be installed and an authenticated org for 'Salesforce_CLI' authentication method.
  • ⚠️Requires Salesforce API credentials (e.g., username/password/token, or client ID/secret) configured as environment variables depending on the chosen authentication method.
Review RequiredView Analysis
The server's implementation of `salesforce_query_records` and `salesforce_aggregate_query` tools directly concatenates user-provided string arguments (`whereClause`, `orderBy`, `havingClause`) into SOQL queries without explicit sanitization by the server itself. This creates a significant SOQL injection vulnerability, contradicting the claim in `SECURITY.md` that all SOQL inputs are sanitized. A malicious or poorly designed AI agent could exploit this to perform unauthorized data access or manipulation. While `execAsync` is used for Salesforce CLI authentication, the command itself is hardcoded, limiting the immediate risk from arbitrary command execution, but its presence signals a need for caution. Hardcoded secrets are avoided by requiring environment variables for authentication.
Updated: 2026-01-19GitHub→
0
0
Low Cost
oscarmarina icon

mcp-knowledge-mind

by oscarmarina

Sec9

Provides a local RAG server for AI tools to index and search Markdown and PDF files from local folders and GitHub repositories using a hybrid search engine.

Setup Requirements

  • ⚠️Requires Ollama with `nomic-embed-text` model downloaded, or will download `nomic-ai/nomic-embed-text-v1.5` locally via `transformers.js` for embedding, which can be a large download.
  • ⚠️Requires Node.js 18+ and SQLite installed on the system.
  • ⚠️GitHub repository indexing requires `GITHUB_CLASSIC_TOKEN` environment variable configured.
Verified SafeView Analysis
The server is designed for local-first operation. It accesses local file paths provided by the user and uses `process.env.GITHUB_CLASSIC_TOKEN` for GitHub integration. There are no direct 'eval' calls or clear malicious patterns. The primary security considerations revolve around how the user secures their `GITHUB_CLASSIC_TOKEN` and ensures the server is not exposed to untrusted external input given its local file access capabilities. Logging to files in `SERVER_DIR` could potentially expose sensitive information if not properly managed, but for a personal knowledge server, this is usually acceptable.
Updated: 2026-01-18GitHub→
0
0
Low Cost
MidwestMountaineer icon

Unifi-MCP-Server

by MidwestMountaineer

Sec8

Provides an MCP server that exposes UniFi Network Controller capabilities to AI agents through a well-designed tool interface for natural language network management.

Setup Requirements

  • ⚠️Requires a UniFi Network Controller to connect to.
  • ⚠️Requires UniFi controller API key (read-only recommended) or username/password for authentication.
  • ⚠️Python 3.11+ is required.
  • ⚠️Default `UNIFI_VERIFY_SSL=false` in configuration allows connections to controllers with self-signed SSL certificates without verification, posing a potential MITM security risk if not explicitly set to `true` in production environments.
Verified SafeView Analysis
The server code demonstrates robust security practices such as sensitive data redaction in logs, explicit confirmation for write operations, and input validation. However, the default configuration `UNIFI_VERIFY_SSL=false` presents a potential Man-in-the-Middle (MITM) risk if not explicitly changed by the user, and the inherent nature of AI agent execution of tools requires careful trust in prompts.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
Akungapaul icon

wp-settings-mcp

by Akungapaul

Sec4

Manages and configures WordPress site settings, users, and cache through a Model Context Protocol (MCP) server.

Setup Requirements

  • ⚠️Requires a running WordPress instance with REST API enabled and an Application Password for authentication.
  • ⚠️WP-CLI features (permalink structure, site health, cache flushing, user create/delete) are enabled conditionally and require WP-CLI to be installed and accessible on the WordPress server.
  • ⚠️WP-CLI features can optionally require SSH access configuration (host, port, user, key path) if WordPress is remote or WP-CLI needs to be executed via SSH.
Verified SafeView Analysis
The server provides powerful administrative capabilities over a WordPress site, including updating critical site settings, managing users (list, create, delete), and flushing cache. It relies on WordPress REST API and WP-CLI, which can grant extensive control if configured with administrator credentials. The security of this server heavily depends on the secure management of sensitive environment variables such as WORDPRESS_APP_PASSWORD and SSH_KEY_PATH, and the secure deployment of the MCP server itself (e.g., strong authentication, network access controls). A compromise of this server could lead to full control over the connected WordPress instance and potentially the underlying server if WP-CLI is enabled with SSH access. Input validation with Zod helps with schema adherence but does not mitigate the risk of authorized users performing sensitive actions or a compromised server being misused.
Updated: 2025-11-28GitHub→
0
0
Low Cost
vrahulblr icon

attempt-chartjs

by vrahulblr

Sec1

This project likely serves as an attempt or example of using Chart.js for data visualization within a web application.

Review RequiredView Analysis
No source code was provided for analysis, only a truncated README.md. Therefore, it is impossible to assess security risks such as 'eval', hardcoded secrets, network vulnerabilities, or malicious patterns. The score reflects an inability to audit.
Updated: 2025-12-01GitHub→
0
0
Medium Cost
OxWorks icon
Sec7

Enables AI assistants to interact with GoodData analytics platforms via natural language queries, retrieve business intelligence data, and manage GoodData resources (metrics, insights, dashboards) through a Model Context Protocol (MCP) server.

Setup Requirements

  • ⚠️Requires a GoodData account with API access, as GoodData is a commercial analytics platform.
  • ⚠️Requires `GOODDATA_HOST` and `GOODDATA_TOKEN` to be set as environment variables (e.g., in a `.env` file), plus an optional `GOODDATA_WORKSPACE`.
  • ⚠️Requires Python 3.10 or higher.
  • ⚠️The discrepancy between the 'Read-Only by Design' claim in the README and the presence of write operations (create, update, delete for metrics, insights, and dashboards) in the `mcp_server.py` code can be misleading. Users must understand and explicitly use the two-phase commit (preview/apply) for all write operations, which inherently creates friction.
  • ⚠️For multi-customer setups or auto-detection of workspaces based on the current working directory, a `~/.config/gooddata/workspaces.yaml` configuration file is required.
Verified SafeView Analysis
The project's README initially states 'Read-Only by Design', which is directly contradicted by the `mcp_server.py` file. The `mcp_server.py` implements significant write operations for metrics, insights, and dashboards (create, update, delete). This discrepancy in documentation is a critical point of concern, as users relying solely on the README might operate under false assumptions of safety. However, the actual implementation of these write operations includes robust safety mechanisms: a two-phase commit pattern (`preview_*` then `apply_*` with a confirmation token), automatic backups before any modification, and detailed audit logging to a local file system (`~/.config/stackless/gooddata/<customer>/audit.jsonl`). Credentials (`GOODDATA_HOST`, `GOODDATA_TOKEN`) are loaded from environment variables (e.g., via `.env` file) and are not hardcoded. No 'eval' or other directly exploitable malicious patterns were found in the provided source.
Updated: 2026-01-16GitHub→
0
0
High Cost
versus1985 icon
Sec9

Serves Home Assistant REST APIs as Model Context Protocol (MCP) tools for AI agents.

Setup Requirements

  • ⚠️Requires a Home Assistant instance to connect to.
  • ⚠️Requires a Home Assistant long-lived access token for authentication.
  • ⚠️Designed to run as a Home Assistant add-on or in a Docker environment, exposing port 8099.
Verified SafeView Analysis
The server employs robust security practices including validation of Home Assistant long-lived tokens, proper handling of Authorization headers (avoiding full token logging), and explicit warnings against direct internet exposure without HTTPS and a reverse proxy. It relies on Home Assistant's API security for templating. No 'eval' or other obvious malicious patterns were found in the provided code.
Updated: 2026-01-16GitHub→
0
0
Low Cost
sjinks icon
Sec9

Provides an MCP interface for querying WordPress vulnerability data via the WPScan API.

Setup Requirements

  • ⚠️Requires a WPScan API token (may require registration/payment for access).
  • ⚠️Requires Node.js (>=18) or Bun runtime environment.
  • ⚠️Designed to be used with an MCP-compatible client (e.g., Claude Desktop, VSCode with MCP extension).
Verified SafeView Analysis
The server correctly retrieves the WPScan API token from environment variables, preventing hardcoded secrets. It acts as a wrapper for the legitimate WPScan API. No 'eval', obfuscation, or unusual network activities beyond the documented API interaction were found. The primary security consideration is trusting the WPScan API itself and ensuring the API token is securely managed by the user.
Updated: 2026-01-19GitHub→
PreviousPage 546 of 760Next