Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
gomcpgo icon
Sec7

An MCP server that enables LLMs to create and edit HTML documents with embedded styles, images, and videos.

Setup Requirements

  • ⚠️Requires Pandoc for PDF/DOCX export (and Texlive for robust PDF support).
  • ⚠️Requires headless Chrome/Chromium for optimal PDF export (go-rod attempts auto-download if not found, which can be a large download).
Verified SafeView Analysis
The server uses `os/exec` to run external tools like `pandoc` and `go-rod` (headless Chrome) for document export. While the arguments are constructed programmatically, relying on external executables always introduces a potential attack surface if those tools have vulnerabilities or if crafted HTML content can exploit them for command injection. No direct `eval` or obvious shell injection points were found within the application's argument handling. `source_path` for `add_media` copies files without executing them, mitigating direct execution risk for media files. No hardcoded secrets or unexpected network activities beyond Chrome auto-download are present.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
titan77champion icon

titan77champion.github.io

by titan77champion

Sec10

Effortlessly extracts clean, LLM-ready markdown data from any website, including Cloudflare-protected sites, for web scraping purposes.

Setup Requirements

  • ⚠️Requires downloading and installing an executable binary from GitHub releases, necessitating trust in the distributed application.
  • ⚠️An internet connection is required for downloading content.
Verified SafeView Analysis
The provided source code is an `index.md` file, which is documentation for a separate desktop application called 'webustler'. This markdown file itself contains no executable code or inherent security vulnerabilities. The security of the 'webustler' application described is not assessed as its actual source code was not provided.
Updated: 2026-01-19GitHub→
0
0
Low Cost
rimaslogic icon

n8n-monitor-docker

by rimaslogic

Sec8

Facilitates AI (Claude) monitoring and management of n8n workflows through a Docker-based server.

Setup Requirements

  • ⚠️Requires an existing Docker environment on the deployment server.
  • ⚠️Requires SSH access to the deployment server, with the specified user having permissions to execute docker commands.
  • ⚠️Requires an active n8n instance and a specific n8n webhook URL to be configured.
  • ⚠️Requires manual download and import of a pre-built n8n workflow JSON file.
Verified SafeView Analysis
The provided source code (docker-compose.yml, README.md, deploy.sh) does not contain obvious vulnerabilities such as 'eval', code obfuscation, or hardcoded secrets. It leverages standard Docker and SSH for communication. The security of the overall setup heavily relies on the underlying SSH configuration of the host server and Docker environment security. The client-side configuration's use of 'StrictHostKeyChecking=accept-new' for SSH is a convenience for initial setup and might be considered less strict than explicit host key verification for production environments.
Updated: 2025-12-14GitHub→
0
0
Low Cost
rioadel icon

MCP_Servers

by rioadel

Sec4

Building and deploying Model Context Protocol (MCP) servers using C# and .NET for integration with AI assistants like Copilot Chat.

Setup Requirements

  • ⚠️Requires .NET SDK to build the server project.
  • ⚠️Requires a Google Generative AI API Key (potentially a paid service).
  • ⚠️Requires specific IDE configuration (.mcp.json) for VS Code or Visual Studio to integrate with AI assistants.
Review RequiredView Analysis
The `appsettings.json` file contains a hardcoded Google Generative AI API key. While a comment suggests using user secrets in production, its presence in a source-controlled file is a critical security vulnerability as it could expose credentials if the repository is public or handled improperly.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
martinremy icon

orgmode-mcp

by martinremy

Sec9

An MCP server enabling AI clients like Claude Desktop to interact with Org Mode files for task management, note-taking, and structured data workflows.

Setup Requirements

  • ⚠️Requires Node.js 18 or later to run.
  • ⚠️Manual configuration of `config.json` is required to specify Org Mode file paths (supports glob patterns and tilde expansion). Incorrect paths will result in errors or no files being found.
  • ⚠️For integration with Claude Desktop, the absolute path to the server's `dist/index.js` and `config.json` must be manually configured in Claude Desktop's `claude_desktop_config.json`.
Verified SafeView Analysis
The server communicates primarily via standard I/O (stdio) using the Model Context Protocol (MCP), which means it typically runs as a local process and does not expose network ports, significantly reducing the external attack surface. It uses Zod for input validation for tool and prompt arguments, limiting the scope of client-controlled input. The core functionality involves reading local Org Mode files specified in a user-provided `config.json`. The primary security consideration is the user's responsibility in configuring the `orgFiles` array in `config.json`. If sensitive paths are included, the server will expose their content to the connected MCP client. However, the server itself does not perform arbitrary file writes, code execution from file content, or arbitrary path traversal outside of the explicitly configured glob patterns. The file parsing and content retrieval logic (`orgParser.ts`) appears to handle file reading safely without dynamic code execution.
Updated: 2026-01-14GitHub→
0
0
Medium Cost
ericmjl icon
Sec3

A personal productivity MCP server designed to assist developers with tasks such as task prioritization, work logging, Git workflows, code reviews, debugging, and Obsidian knowledge management.

Setup Requirements

  • ⚠️Requires `pixi` for dependency management and command execution.
  • ⚠️Relies heavily on `gh cli` for GitHub-related tasks (e.g., debugging, dev digest, code review).
  • ⚠️Requires a local Obsidian vault for knowledge management prompts (MOCs).
  • ⚠️Specifically pins `fastmcp==2.0.0` and `pydantic>=2.0.0,<3.0.0` due to compatibility issues with newer versions.
  • ⚠️HTTP transport is not yet implemented, only stdio transport is supported.
Review RequiredView Analysis
The server uses prompts that instruct the LLM to generate and execute shell commands (e.g., `git checkout -b <branch-name>`) and perform file system operations (e.g., creating/updating Obsidian notes based on `topic` or `note_name`). There is no explicit sanitization of LLM-generated strings before they are used in these contexts. This creates a significant risk of command injection (if a malicious branch name is generated) or path traversal (if a malicious note name/topic is generated), potentially allowing the LLM to execute arbitrary commands or write files to unintended locations. Additionally, the `upgrade_repo_to_template` prompt instructs cloning external repositories, which carries a supply chain risk, even though the current URL is benign. While the LLM is instructed with rules, these are not programmatic safeguards.
Updated: 2025-12-17GitHub→
0
0
Medium Cost
junzzhu icon
Sec6

A Model Context Protocol (MCP) server for OpenShift diagnostics and troubleshooting.

Setup Requirements

  • ⚠️Requires 'oc' command line tool installed and in PATH.
  • ⚠️Requires 'oc' to be authenticated to the target OpenShift cluster.
  • ⚠️GPU monitoring tools require NVIDIA GPU Operator and DCGM exporter installed.
  • ⚠️Monitoring tools rely on OpenShift Monitoring (Prometheus Metrics API) being available.
  • ⚠️Requires Python 3.10 or higher.
Verified SafeView Analysis
The server executes `oc` commands using `asyncio.create_subprocess_exec`, which is generally safe as arguments are passed as a list, mitigating shell injection risks. However, the `_query_via_route` function uses `curl -k` (insecure) to query Prometheus, disabling TLS certificate validation. This is a security vulnerability that could allow man-in-the-middle attacks if the network path to Prometheus is not fully trusted. Additionally, the `run_oc_debug_node` function allows running arbitrary shell scripts (`bash -c '...'`) on a node, a powerful primitive. While currently only used with hardcoded scripts within `inspect_node_storage_forensics` (making it safe in this context), this function could be a high-risk vector if ever exposed to unsanitized user input.
Updated: 2025-12-15GitHub→
0
0
High Cost
pgaud icon
Sec8

Provides real-time and historical Indian stock market data and financial analysis tools to AI assistants via Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires an API Key from IndianAPI.in (free tier limited to 500 requests/month).
  • ⚠️Requires Node.js and npm installed.
  • ⚠️AI client needs to be configured to connect to http://localhost:3001 (or specified PORT).
Verified SafeView Analysis
The server uses environment variables for API keys, which is good practice. It connects to a third-party API (IndianAPI.in) which introduces an external dependency risk. The server runs locally, limiting direct external exposure. No 'eval' or obvious malicious patterns found.
Updated: 2025-11-24GitHub→
0
0
High Cost
IrisMu01 icon

midi-gen-mcp

by IrisMu01

Sec6

An MCP server that provides low-level MIDI manipulation tools for AI-assisted music composition by an LLM.

Setup Requirements

  • ⚠️Requires 'uv' (a Python package manager/runner) for recommended installation and usage.
  • ⚠️Designed to be used with an MCP client (e.g., Claude Desktop); it does not provide a standalone GUI.
  • ⚠️State is in-memory only and is not persisted between sessions, requiring external management for saving/loading compositions.
Verified SafeView Analysis
The server uses the `eval()` function within `_eval_expression` in `note.py`, `validation.py`, and `midi_export.py` to process mathematical expressions for note timing. While `eval()` is used with `{"__builtins__": {}}` to restrict access to built-in functions, `eval()` still carries inherent risks if malicious input is provided, potentially leading to code execution vulnerabilities if the controlling LLM is compromised or manipulated. The server operates via stdio, which limits direct network exposure, but the internal risk remains.
Updated: 2026-01-19GitHub→
0
0
Low Cost
Felipenor icon

cc-context-stats

by Felipenor

Sec8

Monitors and displays Claude Code session context, token usage, and project status in real-time in the editor's status line, and provides a CLI tool for visualizing this data.

Setup Requirements

  • ⚠️Requires platform-specific dependencies for bash scripts (e.g., `jq` on macOS/Linux). Python/Node.js versions require Python 3.9+ or Node.js 18+ respectively.
  • ⚠️Manual configuration of Claude Code's `settings.json` might be needed to integrate the status line script, although the `install.sh` script attempts to automate this.
  • ⚠️The `context-stats` CLI tool requires `~/.local/bin` to be in the user's PATH to be invoked directly.
Verified SafeView Analysis
The application is designed as a local utility, processing data from the user's Claude Code environment. It uses `subprocess.run` (Python) and `execSync` (Node.js) for git commands, which are generally safe as the commands are hardcoded. File operations for state and configuration are confined to the user's home directory (`~/.claude/statusline`). A minor concern exists in how `session_id` (extracted from JSON input) is directly incorporated into state file paths (`statusline.${session_id}.state`). If a `session_id` were to contain path traversal characters (e.g., `../../../malicious.sh`), it could lead to writing outside the intended state directory. However, given it runs under user privileges for a local tool, the risk of external malicious exploitation is low.
Updated: 2026-01-17GitHub→
0
0
High Cost
useweeknight icon

mcp-server

by useweeknight

Sec8

A Node.js Express backend API server for a dinner planning application, integrating with Supabase for data persistence and OpenAI for advanced features like intent normalization and Realtime API access.

Setup Requirements

  • ⚠️Requires Node.js 20+ runtime.
  • ⚠️Requires Supabase project with `SUPABASE_URL` and `SUPABASE_SERVICE_ROLE_KEY` configured.
  • ⚠️Requires OpenAI API Key (`OPENAI_API_KEY`) for AI-powered features like intent normalization and Realtime API access (paid service).
Verified SafeView Analysis
The server demonstrates good security practices including strict CORS policies, the use of Bearer tokens without 'Allow-Credentials', role-based access control for all admin APIs, and fetching sensitive keys from environment variables. Database interactions leverage Supabase client, mitigating direct SQL injection risks. Input validation is present for key routes. A minor point is the use of `JSON.parse` on data from external services (OpenAI responses, Supabase DB feature flags), which relies on the external service's guarantee of valid JSON output. No 'eval' or malicious patterns were found.
Updated: 2025-12-02GitHub→
0
0
Low Cost
Harsh-Arya-exe icon

fast-mcp-demo-server

by Harsh-Arya-exe

Sec9

A server for tracking and managing personal expenses, offering tools to add, list, and summarize financial data.

Setup Requirements

  • ⚠️Requires Python 3.12 or newer
  • ⚠️Requires write access to the system's temporary directory for database creation and operation
  • ⚠️Dependencies `aiosqlite` and `fastmcp` must be installed (e.g., `pip install -e .` or `pip install aiosqlite fastmcp`)
Verified SafeView Analysis
Uses parameterized SQL queries to prevent injection. Stores the SQLite database in the system's temporary directory, which is generally writable and limits persistence between reboots. No obvious hardcoded secrets or dangerous patterns like `eval`. Error handling provides generic messages, but could be more abstract to avoid revealing implementation details.
Updated: 2025-11-27GitHub→
PreviousPage 589 of 760Next