Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
hdjebar icon

neo4j-yass-mcp

by hdjebar

Sec10

A production-ready, security-enhanced Model Context Protocol (MCP) server that provides natural language querying capabilities for Neo4j graph databases using LLM-powered Cypher generation and performance analysis.

Setup Requirements

  • ⚠️Requires Neo4j 5.x database with APOC plugin installed and enabled (GDS plugin recommended).
  • ⚠️Requires an API key for your chosen LLM provider (e.g., OpenAI, Anthropic, Google Generative AI), which is typically a paid service.
  • ⚠️A strong Neo4j password is required; weak passwords are blocked in production unless ALLOW_WEAK_PASSWORDS=true (for development only).
Verified SafeView Analysis
The server implements a 6-layer defense-in-depth security architecture, including comprehensive query sanitization (Cypher injection, UTF-8 attacks, dangerous patterns), complexity limiting, read-only enforcement, audit logging, response size limiting, and per-client rate limiting. It explicitly blocks weak passwords and debug mode in production environments, enforces TLS for Neo4j connections, and mitigates OWASP Top 10 threats. All security checks occur *before* query execution.
Updated: 2025-11-22GitHub→
0
0
High Cost
dammyboss icon
Sec8

Facilitate natural language interaction and management of Azure DevOps resources via a chat interface, powered by OpenAI function calling.

Setup Requirements

  • ⚠️Requires an Azure DevOps Personal Access Token (PAT) with appropriate read/write permissions for accessing Azure DevOps resources.
  • ⚠️Requires an Azure OpenAI service deployment (endpoint, API key, API version, deployment name) for natural language processing, which incurs costs.
  • ⚠️Node.js version 18+ is a prerequisite for running the application.
Verified SafeView Analysis
Secrets are correctly handled via environment variables (`.env`). No 'eval' or code obfuscation was observed. The project utilizes `axios` for external API calls, which is a standard and generally secure HTTP client. CORS is enabled globally by default (`app.use(cors())`) which is permissive and should be configured for specific origins in a production deployment to mitigate certain web security risks, though it is acceptable for self-hosted development or internal tools. Error messages in tool calls might expose some internal details if not sanitized, but generally, robust `try-catch` blocks are in place.
Updated: 2025-12-13GitHub→
0
0
Medium Cost
shanto12 icon
Sec3

Enables AI assistants to interact with Splunk SOAR instances for security operations and automation via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires a running Splunk SOAR instance.
  • ⚠️Mandatory environment variables: `SPLUNK_SOAR_URL` and `SPLUNK_SOAR_TOKEN`.
  • ⚠️The default SSL configuration (`ssl.create_unverified_context()`) makes it insecure for production use without addressing certificate validation.
  • ⚠️If using `mcp_server_remote.py` for remote clients (e.g., Claude.ai web), the server must be publicly exposed, requiring tools like ngrok or cloud deployment.
Review RequiredView Analysis
The server uses `ssl.create_unverified_context()` which disables SSL certificate validation, making API communication vulnerable to Man-in-the-Middle (MITM) attacks. While noted for self-signed certificates, this is a critical security flaw for production environments handling sensitive security data. Additionally, the `mcp_server_remote.py` listens on `0.0.0.0` and would require careful exposure (e.g., secure reverse proxy with proper SSL and network segmentation) if used publicly, further exacerbating the initial SSL issue. No hardcoded secrets or 'eval' statements were found.
Updated: 2025-12-29GitHub→
0
0
Medium Cost
kp18-cpu icon

Kali_MCP_server

by kp18-cpu

Sec8

Provides an interface for AI assistants to perform web application penetration testing using Kali Linux tools.

Setup Requirements

  • ⚠️Requires Docker Desktop with MCP Toolkit enabled.
  • ⚠️Requires Docker MCP CLI plugin (`docker mcp` command).
  • ⚠️Assumes a Kali Linux environment (or an environment with pentesting tools installed) within the Docker container.
Verified SafeView Analysis
The server implements robust input sanitization to prevent command injection and strong target validation, restricting scans by default to localhost and private IP ranges. It also allows configurable allowed targets. Commands are executed with timeouts and the README states it runs as a non-root user in a container. While these measures significantly mitigate risk, the inherent nature of running penetration testing tools means careful usage and adherence to legal authorization are critical.
Updated: 2025-11-30GitHub→
0
0
Medium Cost
gurkanfikretgunak icon

mcp_server

by gurkanfikretgunak

Sec8

Manages Python packages and indexes project codebases for AI-assisted development using the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️`uv` package manager must be installed and available in the system's PATH.
  • ⚠️Full Server-Sent Events (SSE) integration via HTTP/SSE transport requires additional setup with the MCP SDK, as the current implementation includes a placeholder.
Verified SafeView Analysis
The server implements API key-based authentication, a policy engine for package allow/block lists, and audit logging for tool invocations and resource access. It uses `subprocess.run` with lists for arguments, mitigating shell injection risks. Path operations within `ProjectScanner` and resource handlers correctly use `Path.resolve()` and `project_root / file_path` to prevent path traversal. A note in `src/python_package_mcp_server/transports/http.py` indicates that full SSE integration requires additional setup with the MCP SDK, which could be an area for further security hardening if not properly integrated.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
BojanMakivic icon
Sec8

Exposes Strava athlete activity data via a Model Context Protocol (MCP) server for integration with language model tooling.

Setup Requirements

  • ⚠️Requires Python >= 3.10.
  • ⚠️Requires `STRAVA_CLIENT_ID` and `STRAVA_CLIENT_SECRET` environment variables to be set.
  • ⚠️Initial authorization requires opening a browser URL and manually copying an authorization code from a redirect URI.
  • ⚠️Persists tokens to a local file (~/.strava_mcp_tokens.json), requiring local filesystem write permissions.
Verified SafeView Analysis
The server handles Strava OAuth, requesting 'read,activity:read_all' scope. Client ID and Secret are read from environment variables. Access and refresh tokens are persisted to a local JSON file (~/.strava_mcp_tokens.json) after initial authorization, which is a potential local filesystem security risk if the user's machine is compromised. The presence of `print(tokens)` in token handling functions is a minor debug issue that could expose tokens to stdout if logs are not secured.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
jackfioru92 icon

mcp-aruba-email

by jackfioru92

Sec9

Seamlessly integrate Aruba email and calendar with AI assistants for management tasks such as reading, searching, sending emails, and managing calendar events.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️Aruba credentials (IMAP/SMTP/CalDAV username and password) must be manually configured via a .env file or directly in the MCP client's configuration (e.g., Claude Desktop, VS Code mcp.json).
  • ⚠️CalDAV calendar synchronization needs to be explicitly enabled within Aruba Webmail before calendar functions can be used.
Verified SafeView Analysis
The server runs locally, ensuring credentials do not leave the user's machine. Credentials are retrieved from environment variables or securely stored via `keytar` in the VS Code extension. All email and calendar connections use SSL/TLS encryption. The email verification tool's transient connection to external SMTP servers on port 25 is unencrypted, which is a standard method but noted. A public Imgur client ID is hardcoded for optional photo signature uploads, which isn't a direct user data security risk but means uploads are not anonymous on Imgur's side. No obvious remote code execution vulnerabilities or dangerous `eval`-like patterns were found from user input.
Updated: 2026-01-15GitHub→
0
0
Medium Cost
sdesani icon

mcp-fhir

by sdesani

Sec9

The server provides a Model Context Protocol (MCP) interface for securely interacting with Oracle Millennium Platform's FHIR APIs to access patient, clinical, and administrative healthcare data.

Setup Requirements

  • ⚠️Requires Python 3.13 or higher.
  • ⚠️Requires registration with Oracle Cerner Code Console to obtain FHIR_CLIENT_ID and FHIR_CLIENT_SECRET, which is a manual external setup step.
  • ⚠️Specific `uv run --with fastmcp fastmcp run` command and absolute path required for MCP client configuration.
Verified SafeView Analysis
The server correctly implements OAuth 2.0 Client Credentials flow, automatically managing access tokens with refreshing. Client ID and Secret are loaded from environment variables (or .env file), preventing hardcoding. It uses HTTPS for API communication and raises errors for authentication failures. Reliance on external FHIR server security and correct credential management by the user are key considerations.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
aroraavinash icon

automation-agent

by aroraavinash

Sec6

This project demonstrates an LLM agent's ability to reason and execute tasks by interacting with an external server exposing various utility functions as tools.

Setup Requirements

  • ⚠️Requires Python 3.12+
  • ⚠️Requires Google Gemini API Key (paid usage may apply)
  • ⚠️Specific OS recommendation (macOS) with Homebrew dependencies (uv, Node.js, FFmpeg) if following the README setup exactly
Verified SafeView Analysis
The architecture allows an LLM to directly construct and execute tool calls with arguments, which carries inherent risks if the LLM's output is not rigorously sanitized. Specifically, the `create_thumbnail` tool takes an `image_path` string, which if controlled by the LLM, could potentially lead to attempts to access arbitrary files on the server's filesystem. While the current toolset is relatively benign, this pattern could be exploited if more sensitive tools are added or if the LLM can be prompted to provide malicious paths. No direct 'eval' or hardcoded secrets were found; API keys are loaded from environment variables, which is good practice.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
haptic-io icon

biometrics-mcp

by haptic-io

Sec1

A server designed to manage and process biometric data for authentication or identification purposes.

Review RequiredView Analysis
Source code not provided; unable to perform a security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. Safety cannot be determined, assume highest risk until code is thoroughly reviewed.
Updated: 2025-11-27GitHub→
0
0
High Cost
Sec9

Provides an MCP server for accessing Webpublication API features, including resource management, publication settings, and retrieving cover images.

Setup Requirements

  • ⚠️Requires Rust to be installed on the system.
  • ⚠️Critical environment variables (API_URL, DRIVE_URL, CLIENT_ID, WP_TOKEN) must be set for proper functionality.
  • ⚠️The project must be built using `cargo build --release` before it can be executed.
Verified SafeView Analysis
The project is written in Rust, which offers strong memory and type safety, reducing common vulnerability classes. Sensitive credentials (WP_TOKEN, API_URL, DRIVE_URL, CLIENT_ID) are handled via environment variables, which is a good practice. The server's security largely depends on the secure configuration of these external API endpoints and the secure management of the WP_TOKEN. No direct 'eval' or obfuscation is apparent. The server itself listens on a local address (127.0.0.1:6274) for the MCP Inspector, limiting direct external exposure.
Updated: 2025-11-17GitHub→
0
0
Low Cost
andriyshevchenko icon

linkedin-mcp-server-headed

by andriyshevchenko

Sec9

Provides a base Model Context Protocol (MCP) server for interacting with LinkedIn using Playwright, designed to be extended with specific tools and resources.

Setup Requirements

  • ⚠️This is an empty server template; significant development is required to implement actual LinkedIn-specific tools and functionality.
  • ⚠️Requires an MCP-compatible client to interact with it, as it communicates over stdio.
  • ⚠️Playwright requires browser binaries to be downloaded, which might add to initial setup time or present challenges in restricted environments.
Verified SafeView Analysis
The provided source code is a minimal template and does not contain obvious hardcoded secrets, 'eval' statements, or malicious patterns. It utilizes `winston` for logging and adheres to strict Biome code quality standards. The server currently throws an error for all tool calls, mitigating immediate risks. However, as an MCP server wrapping Playwright for web interaction, future extensions to interact with LinkedIn could introduce security risks if not carefully developed, such as potential data exposure or unintended actions.
Updated: 2026-01-19GitHub→
PreviousPage 585 of 760Next