Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
shilloon icon
Sec9

Provides current and hourly weather forecasts for a specified geographic location.

Setup Requirements

  • ⚠️Requires Python 3.11 or higher
Verified SafeView Analysis
No hardcoded secrets, 'eval', or direct shell commands found. Latitude and longitude are directly inserted into the Open-Meteo API URL, which is a public and well-regarded service, mitigating typical URL injection risks.
Updated: 2025-12-11GitHub→
0
0
Low Cost

MCP-SERVER

by sahaniaditya

Sec5

Provides a backend server for a specific application or service using Node.js.

Setup Requirements

  • ⚠️Requires Node.js (LTS recommended) and npm installed locally.
Review RequiredView Analysis
Cannot analyze code for 'eval', obfuscation, or specific network risks as only file names and truncated README are available. A score of 5 reflects this lack of visibility.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
elsanchez icon

mcp-server-fvwm3

by elsanchez

Sec3

Enables LLMs to interact with FVWM3 for configuration generation, debugging, window management, and development assistance.

Setup Requirements

  • ⚠️Requires Node.js 18+, FVWM3 (v1.1.5+), xrandr, and FvwmCommand to be installed and accessible.
  • ⚠️Hardcoded file paths for configuration and documentation resources (e.g., `~/.fvwm/config`, `~/repo/utils/desktop-settings/CLAUDE.md`) mean the user's filesystem structure must match or the code needs modification.
  • ⚠️The server's capabilities inherently pose significant security risks due to direct shell command execution; requires extreme caution and use only in trusted, isolated environments.
Review RequiredView Analysis
The server executes arbitrary shell commands via `fvwm_execute` and other tools use `child_process.execAsync` with user-supplied inputs (e.g., `window_id` in `fvwm_get_window_info` and `smart_tile_state`). While some basic sanitization is present for `fvwm_execute` (double quotes), this does not prevent broader command injection. `window_id` is directly concatenated into commands or file paths (e.g., `rm -f ${stateDir}/${window_id}`), posing path traversal and arbitrary file deletion risks. The README explicitly warns about these risks, stating the server should only be used in trusted environments and that generated commands should be reviewed.
Updated: 2025-12-05GitHub→
0
0
Medium Cost
donvini94 icon
Sec9

This server acts as an MCP (Model Context Protocol) gateway, providing AI assistants with tools to manage Keycloak realms and users via its Admin REST API.

Setup Requirements

  • ⚠️Requires Python 3.13 or higher.
  • ⚠️A running Keycloak instance (local or remote) is mandatory.
  • ⚠️Requires a Keycloak client configured with 'Service Account Enabled' and appropriate admin roles for permissions (e.g., `admin-cli` client and necessary roles).
  • ⚠️Dependency management is recommended with `uv`.
Verified SafeView Analysis
The project follows good security practices for an API client: environment variables are used for sensitive credentials (`.env` file, loaded with `python-dotenv`), `requests` timeouts are implemented, and OAuth2 client credentials flow is correctly utilized with automatic token refresh on expiration or 401 Unauthorized errors. Custom exceptions provide specific error handling. Pydantic models validate API responses, reducing risks from malformed data. There are no clear indications of `eval` or other dangerous patterns.
Updated: 2025-11-18GitHub→
0
0
Low Cost
vicgarcia icon

obsidian-mcp

by vicgarcia

Sec9

Enables Claude Desktop/Code to manage an Obsidian vault for daily journaling, project documentation, and knowledge management.

Setup Requirements

  • ⚠️Requires Docker to be installed and running.
  • ⚠️Requires Python 3.12 or newer for local development/execution, though Docker deployment abstracts this.
  • ⚠️Requires an absolute path to your Obsidian vault to be mounted into the Docker container (`-v /path/to/your/vault:/vault`).
  • ⚠️Requires the `TZ` environment variable to be set for accurate date/time calculations (e.g., `America/New_York`).
  • ⚠️Requires configuring Claude Desktop or Claude Code with the server definition.
Verified SafeView Analysis
The server implements robust path validation using `pathlib.Path.is_relative_to()` and Pydantic models to prevent directory traversal attacks and sanitize inputs. It is designed to run in a Docker container with specific user permissions (`--user`) to enforce the principle of least privilege. No direct `eval` or similar dangerous functions were identified. The risk of accessing files outside the mounted vault is effectively mitigated.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
audibleblink icon

tmux-mcp-server

by audibleblink

Sec3

This MCP server enables AI assistants to manage local tmux sessions, including creating, listing, and killing sessions, windows, and panes, as well as interacting with panes by sending commands and capturing output.

Setup Requirements

  • ⚠️Requires Node.js >= 18
  • ⚠️Requires tmux installed and available in PATH
Review RequiredView Analysis
The server uses `child_process.execAsync` to run `tmux` commands, directly interpolating user-provided arguments (e.g., session names, window names, start directories, pane indices) into shell command strings. This design is highly susceptible to command injection vulnerabilities. For example, if a session name input is `my_session"; rm -rf / #`, it could lead to arbitrary command execution on the host system. While `tmux_send_keys` attempts to escape double quotes, this escaping is not consistently applied to all arguments in all tools, and is insufficient to prevent all forms of command injection. There are no other obvious security flaws like hardcoded secrets or 'eval' usage, but the command injection risk is critical.
Updated: 2025-11-22GitHub→
0
0
Medium Cost
acamit icon
Sec9

This server provides weather alerts and forecasts by integrating with the National Weather Service (NWS) API, acting as a tool for an MCP agent.

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Requires Python dependencies (`httpx`, `mcp[cli]`) to be installed.
  • ⚠️Requires an active internet connection to access the NWS API.
  • ⚠️This is an MCP server and is designed to be run as a tool by an MCP host/agent, not as a standalone user-facing application.
Verified SafeView Analysis
The server makes external HTTP requests to a known public API (api.weather.gov) using `httpx`. No 'eval' or other highly dangerous patterns are present. Arguments to `mcp.tool()` functions are directly used in f-strings for URL construction, which could be a minor theoretical risk if a malicious MCP host were to inject arbitrary strings. However, for the NWS API context, this risk is minimal and unlikely to lead to severe vulnerabilities beyond malformed requests. No hardcoded secrets or sensitive credentials were found. Logging is appropriately configured to `sys.stderr`.
Updated: 2025-11-27GitHub→
0
0
Medium Cost
jchoi2x icon

genius-mcp

by jchoi2x

Sec8

Provides a Model Context Protocol (MCP) server for LLMs and AI applications to interact with the Genius API, enabling search for songs, artists, fetching lyrics, and retrieving music metadata.

Setup Requirements

  • ⚠️Requires a Genius API key (Client Access Token).
  • ⚠️Requires a Cloudflare account for deployment.
Verified SafeView Analysis
The server securely manages API keys by retrieving them from environment variables (`env.GENIUS_API_KEY`). It relies on web scraping (`cheerio`) for lyrics, which can be sensitive to website structural changes but is a common approach when direct API access isn't available for that data. No 'eval', obfuscation, or other immediately malicious patterns were found in the provided source code. Network requests explicitly set a 'User-Agent'. Logging of errors might expose some operational details but not credentials.
Updated: 2025-12-04GitHub→
0
0
Low Cost
aaryagodbole icon
Sec9

A Micro-Agent Compute Protocol (MCP) server for tracking and managing personal expenses using a local SQLite database.

Setup Requirements

  • ⚠️Requires Python 3.14+ as per pyproject.toml (note: Python 3.14 is a future version, this might be a typo and earlier versions like 3.9+ may work with fastmcp).
  • ⚠️Expense data is stored in a temporary directory (tempfile.gettempdir()) which means data might not persist across system reboots or temporary file cleanups.
  • ⚠️Dependencies include fastmcp>=2.14.3 and aiosqlite.
Verified SafeView Analysis
The server appears secure. It uses parameterized SQL queries throughout all database operations (add_expense, list_expenses, summarize), effectively preventing SQL injection vulnerabilities. There is no usage of 'eval' or other highly dangerous functions. File paths are constructed using standard library functions (os.path.join, tempfile.gettempdir(), os.path.dirname(__file__)) and do not appear susceptible to path traversal attacks. No hardcoded secrets or malicious patterns were identified. The database is stored in a temporary directory which, while functional, might not be suitable for persistent storage across system reboots or cleanup routines.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
heqds icon

brew-mcp

by heqds

Sec9

Provides an LM Studio MCP server to manage macOS Homebrew packages as tools.

Setup Requirements

  • ⚠️Homebrew ('brew') must be installed and accessible on the system's PATH.
  • ⚠️Requires the `mcp` Python library to be installed (e.g., `pip install fastmcp`).
  • ⚠️Designed to run within LM Studio's Multi-tool Context Protocol (MCP) framework.
Verified SafeView Analysis
The server executes Homebrew commands via `subprocess.run` with good input validation (`NAME_PATTERN`) to prevent command injection. It carefully constructs command arguments as a list. Timeouts are used for long-running operations. There are no direct uses of `eval` or obvious network risks beyond what Homebrew itself would inherently do.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
a67793581 icon
Sec6

An MCP server for AI agents to query Ethereum balances, token prices, and simulate token swaps.

Setup Requirements

  • ⚠️Requires a valid Infura Project ID (INFURA_PROJECT_ID) for Ethereum RPC access, which may incur costs based on usage.
  • ⚠️Requires a wallet private key (PRIVATE_KEY) for transaction simulation, posing a security risk if not managed carefully (e.g., using a burner wallet with no funds).
Review RequiredView Analysis
The server requires a `PRIVATE_KEY` to be set as an environment variable, which is used to instantiate a `LocalWallet` for transaction simulation in the `swap_tokens` function. While the current implementation only uses this for `estimate_gas` (which performs an `eth_call` and does not execute on-chain), exposing a live private key to a server, especially one designed for AI agents, introduces a significant risk. If the server were compromised or the code accidentally or maliciously modified, this private key could be used to sign and broadcast real transactions, leading to potential fund loss. A safer approach for simulations might involve using a dedicated simulation environment or a burner private key with no real assets.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
Gagan0406 icon
Sec4

An AI assistant leveraging LangGraph and Multi-Server MCP to manage expenses, fetch real-time data like stock prices, and perform general search queries.

Setup Requirements

  • ⚠️Requires Python >= 3.13.
  • ⚠️A local or remote LLM compatible with OpenAI API is needed (either OPENAI_API_KEY set for OpenAI or base_url/api_key configured for a local LLM). The 'langgraph_with_mcp.v1/v2.py' files would use OpenAI by default if OPENAI_API_KEY is available.
  • ⚠️The MultiServerMCPClient in 'langgraph_with_mcp.v1/v2.py' and 'client.demo.py' is configured with external MCP server URLs (fastmcp.app domains) which must be accessible and operational.
  • ⚠️The 'arith' server configuration in 'langgraph_with_mcp.v1/v2.py' uses a hardcoded local path '/Users/nitish/Desktop/mcp-math-server/main.py' which will likely need to be adjusted or removed for other users.
  • ⚠️The hardcoded Alpha Vantage API key in 'get_stock_price' is a major security flaw and needs to be replaced with a secure environment variable or removed.
Review RequiredView Analysis
Critical security risk due to a hardcoded Alpha Vantage API key ('C9PE94QUEW9VWGFM') in 'langgraph_with_mcp.v1.py' and 'langgraph_with_mcp.v2.py'. The 'remote_server.mcp.py' stores its SQLite database in a system-wide temporary directory, which can lead to data exposure or conflicts. The server binds to '0.0.0.0:8000', making it publicly accessible, and lacks explicit authentication or access control mechanisms.
Updated: 2026-01-16GitHub→
PreviousPage 584 of 760Next