Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
waqasm86 icon
Sec8

Provides a Model Control Protocol (MCP) interface for local GGUF Large Language Models, enabling tool-based interaction.

Setup Requirements

  • ⚠️Requires a separate llama.cpp server instance running locally with a GGUF model.
  • ⚠️Explicitly references Python 3.11 in configuration, though the README states Python 3.8+.
Verified SafeView Analysis
The primary FastAPI server binds to localhost (127.0.0.1) by default, limiting network exposure. The 'server_stdio.py' component, if run directly as an HTTP server, would bind to all network interfaces (0.0.0.0), potentially exposing it; however, it appears intended for subprocess management via stdio. Both servers make HTTP requests to a configurable LLAMA_COMPLETION_URL; ensuring this URL points to a trusted local llama.cpp instance is crucial to prevent data leakage or external compromise. No 'eval', obfuscation, or hardcoded secrets were found. Basic input validation for numeric parameters is present.
Updated: 2025-12-13GitHub→
0
0
Low Cost
atani icon
Sec1

An MCP server that allows direct manipulation of the standard macOS Reminders app from Claude Code for personal automation and AI-driven task management.

Setup Requirements

  • ⚠️Requires macOS (uses AppleScript, will not work on Windows/Linux).
  • ⚠️Requires manual macOS privacy settings to grant Terminal/Node.js access to Reminders.
  • ⚠️Requires manual JSON configuration in Claude Code's configuration file.
Review RequiredView Analysis
The `ReminderServiceImpl.sanitizeForAppleScript` function, used to sanitize user inputs (like list names and reminder names) before embedding them into AppleScript commands, only escapes double quotes (`"`). This is insufficient. An attacker could inject single quotes (`'`), backslashes (`\`), or newline characters (`\n`, `\r`) into inputs, which would break the AppleScript syntax. This could lead to a denial of service (script failure) or, more critically, allow for AppleScript injection where arbitrary `do shell script` commands could be executed on the user's macOS system. For instance, if a reminder name includes an unescaped single quote, the generated AppleScript will be syntactically invalid.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
jenksed icon

nerve

by jenksed

Sec7

This project acts as an intercepting proxy for Minecraft Protocol (MCP) traffic, allowing for custom logic or modifications between a Minecraft client and server.

Setup Requirements

  • ⚠️Requires Python 3.x environment.
  • ⚠️SSL certificates (key and cert files) are needed for secure proxy operation.
  • ⚠️Requires an existing Minecraft server to proxy connections to.
Verified SafeView Analysis
As an intercepting network proxy, it inherently handles untrusted client input, which requires robust packet validation to prevent vulnerabilities. The 'plugins/' directory suggests an extensible architecture; if plugins can be loaded from untrusted sources, it introduces a significant risk. Proper firewalling and access control are critical for deployment to limit exposure.
Updated: 2026-01-16GitHub→
0
0
Medium Cost
efranlund icon

ep-gql-mcp

by efranlund

Sec9

Enables natural language queries for hockey statistics, players, teams, leagues, and drafts by interfacing with the EliteProspects.com GraphQL API via Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires running `npm run generate-schema` initially and whenever the upstream EliteProspects GraphQL API schema changes, before `npm run build` or running the server.
  • ⚠️Relies on an external EliteProspects GraphQL API endpoint (configured via `EP_GQL_URL`) to be accessible and functional.
Verified SafeView Analysis
The server primarily acts as a proxy for the EliteProspects GraphQL API. It uses a standard GraphQL client (graphql-request) and includes basic input validation for GraphQL query format. File system access is restricted to internal `generated` directories during build and resource loading, which is controlled. No direct use of `eval` or other obvious injection vulnerabilities are present. Security largely depends on the robustness of the underlying EliteProspects GraphQL API.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
jbromfld icon
Sec8

This server acts as a Model Context Protocol (MCP) gateway, exposing internal knowledge base search (RAG) and CI/CD database query (NL2SQL) tools to AI assistants like GitHub Copilot.

Setup Requirements

  • ⚠️Requires Docker and Docker Compose for the full demo system.
  • ⚠️Dependent on external RAG (port 8000) and NL2SQL (port 8088) backend services to be running for full functionality.
  • ⚠️A PostgreSQL database (port 5432) with `pgvector` is needed for the backend services.
  • ⚠️Editor integrations (VS Code, Cursor, IntelliJ) require specific `.mcp.json` configuration or manual setup to connect to the server.
Verified SafeView Analysis
The server itself primarily acts as a proxy, delegating complex or potentially risky operations (like RAG search and SQL execution) to external backend services. It does not contain direct `eval()` or `exec()` calls within its source code. Database credentials for the demo setup are test credentials and are confined to the Docker network, not hardcoded for production. Robust production security practices, such as a reverse proxy with authentication (e.g., client certs, basic auth, API Gateway), are explicitly recommended in the `CLAUDE.md` and are essential given the server's external exposure.
Updated: 2026-01-19GitHub→
0
0
Low Cost
AlexanderChuykin icon

maixpy-mcp-server

by AlexanderChuykin

Sec8

Provides MaixPy v4 documentation to LLM models via GitHub Copilot and other clients using the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires GitHub Copilot Chat for full integration.
  • ⚠️Requires Docker for the recommended setup, or a local Python 3.x environment.
  • ⚠️Manual configuration of VS Code settings.json is necessary, especially for local Python execution where the server.py path must be precisely specified.
Verified SafeView Analysis
The server explicitly implements read-only access to documentation files and includes path validation to prevent directory traversal. The `docker-compose.yml` mounts the documentation directory as read-only, further enhancing container security. No obvious use of `eval` or other dynamic code execution from user input was found.
Updated: 2025-12-11GitHub→
0
0
Medium Cost
charanadi4u icon
Sec8

Provides a Model Context Protocol (MCP) server for AI models to interact with Hugging Face Hub resources (models, datasets, spaces, papers, collections) via a Groq-powered conversational client.

Setup Requirements

  • ⚠️Requires a Groq API Key (paid API) for the client component.
  • ⚠️Requires Python 3.11 or higher.
  • ⚠️The client component (gradio_mcp_client.py) expects `MODEL_NAME` and `GROQ_API_KEY` environment variables to be set.
  • ⚠️While `server.py` is the MCP server, the `client.py` provides the Gradio UI and automatically launches `server.py` as a subprocess to connect to it.
Verified SafeView Analysis
The server uses `json.loads` to parse tool call arguments from the Groq model's output. While `json.loads` itself is safe for JSON, the parsed data is then used in API calls to the Hugging Face API. The risk lies in potential malicious data within these arguments (e.g., unexpected values for parameters) that could trigger unforeseen behavior or vulnerabilities in the underlying Hugging Face API or `httpx` client. However, URL encoding is used where applicable (`quote_plus`), and no direct `eval` or command injection points for local execution are apparent. The server operates in a read-only manner for Hugging Face resources, which limits the potential impact of vulnerabilities.
Updated: 2025-11-19GitHub→
0
0
Medium Cost

Task-4

by Zehra-code743

Sec7

Automated analysis and auditing of software projects, including security, efficiency, and setup requirements.

Setup Requirements

  • ⚠️Requires Gemini API Key (Paid)
  • ⚠️Specific Python version required, indicated by .python-version file.
Review RequiredView Analysis
Actual code review of `main.py` and its dependencies is required to assess the full security posture. The presence of `temp_uploads` could pose risks if not properly secured against malicious file uploads or directory traversal. Potential network interaction as a 'server' implies additional security considerations for exposed endpoints.
Updated: 2025-11-23GitHub→
0
0
High Cost
rudxognss icon
Sec8

An AWS Bedrock-based server for video analysis, scene search, and subtitle processing using various AI models.

Setup Requirements

  • ⚠️Requires Python 3.10+.
  • ⚠️Requires AWS CLI installed and configured with appropriate credentials and permissions for Bedrock, S3, S3 Vectors, DynamoDB, and Transcribe.
  • ⚠️Manual creation of AWS S3 Vectors bucket, S3 Vectors index, and DynamoDB table is required before server setup.
  • ⚠️Requires access to specific AWS Bedrock models (Twelve Labs Marengo, Pegasus, Anthropic Claude Sonnet/Haiku) in the configured AWS region.
  • ⚠️The `S3_UPLOAD_BUCKET` environment variable is required if local video files are to be processed.
  • ⚠️Integration is designed for Kiro CLI, requiring a specific `mcp.json` configuration file with an absolute path to the project directory.
Verified SafeView Analysis
The server primarily uses AWS SDK (boto3) for interactions with AWS services (Bedrock, S3, S3 Vectors, DynamoDB, Transcribe). No direct security vulnerabilities like 'eval' or hardcoded sensitive credentials were found. Reliance on AWS CLI configuration or environment variables for credentials is standard practice. The generation of presigned S3 URLs is handled with a limited expiry. Security largely depends on proper AWS IAM role configuration and management of access keys/secrets by the user.
Updated: 2026-01-19GitHub→
0
0
Low Cost
Manaphy310 icon

mcp-server-pr

by Manaphy310

Sec1

A server component likely designed for managing or processing pull requests, potentially within a development workflow or for a specific platform.

Review RequiredView Analysis
CRITICAL: Source code for security analysis was not provided in the prompt. Therefore, a comprehensive security audit is impossible. Cannot verify the absence of 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. Running this server without source code review is extremely risky.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
monkey-di icon
Sec8

Integrate Figma design data and image downloads into a Qwen CLI workflow for development purposes.

Setup Requirements

  • ⚠️Requires a Figma Personal Access Token (FIGMA_API_KEY).
  • ⚠️Requires Node.js and npm/npx to be installed on the system.
  • ⚠️Uses a community MCP server with limited functionality compared to the official Figma MCP server.
Verified SafeView Analysis
The provided source code handles the Figma API key securely via environment variables and does not contain obvious malicious patterns, 'eval', or hardcoded secrets. However, the core functionality relies on the external 'figma-developer-mcp' npm package, which is run via 'npx'. The security of the overall system depends on the trustworthiness of this third-party package, whose source code is not provided for review.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
bugzy-ai icon

teams-mcp-server

by bugzy-ai

Sec9

This server provides AI assistants with standardized access to Microsoft Teams APIs for messaging and channel operations.

Setup Requirements

  • ⚠️Requires a Microsoft Graph OAuth token (TEAMS_ACCESS_TOKEN) to be set in the environment or .env file.
  • ⚠️Requires specific Microsoft Graph API permissions (Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Send, ChannelMessage.Read.All) configured in an Azure AD app registration.
  • ⚠️Requires Node.js version 20.0.0 or higher.
Verified SafeView Analysis
The server follows good security practices. It uses environment variables for sensitive tokens (TEAMS_ACCESS_TOKEN) and performs strict input validation using Zod schemas for all incoming requests. Tool calls are strictly controlled by a switch statement, preventing arbitrary command execution. No direct eval() or child_process calls are observed. Outgoing network requests are to the legitimate Microsoft Graph API. Errors are caught and logged, preventing sensitive information leaks.
Updated: 2025-12-03GitHub→
PreviousPage 591 of 760Next