Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
anilaahmed1987 icon
Sec9

A Docusaurus-based static website generator primarily used for creating documentation, possibly for an AI/robotics project or a knowledge base for an AI assistant.

Setup Requirements

  • ⚠️Requires Node.js version 20.0 or higher.
  • ⚠️Requires Yarn for package management.
Verified SafeView Analysis
The project is a standard Docusaurus static site. No 'eval' or malicious patterns were found in the provided source code. The 'jwt-decode' dependency is typically used client-side for decoding JWTs (not validating them), which is generally safe for a static site. The `GEMINI.md` file outlines good security practices for an AI agent, which is a positive project philosophy but does not directly impact the security of the website server itself.
Updated: 2025-12-10GitHub→
0
0
Low Cost
Sec7

Serves as a backend management control plane or simple web server, potentially for displaying static content or providing API endpoints.

Setup Requirements

  • ⚠️Requires Node.js environment installed
  • ⚠️Dependencies must be installed via `npm install` or `yarn install`
Verified SafeView Analysis
Standard network risks for an HTTP server. Requires review of application logic and dependencies for specific vulnerabilities (e.g., XSS, RCE, insecure deserialization).
Updated: 2025-11-18GitHub→
0
0
Medium Cost
nikhilfufu icon
Sec8

Automates web application QA testing using Claude and Playwright, generating detailed reports and AI-powered failure analysis.

Setup Requirements

  • ⚠️Requires .NET 8.0 SDK or higher.
  • ⚠️Requires Claude Desktop application, which needs manual configuration by editing a platform-specific JSON file.
  • ⚠️Configuration within Claude Desktop requires an absolute path to the compiled server DLL, which can be error-prone.
Verified SafeView Analysis
No direct code vulnerabilities like 'eval' or hardcoded secrets found in the provided README and summarized source code. The server facilitates web automation, which inherently interacts with external web content. Risks would primarily depend on the security of the target application being tested and the environment in which Playwright runs, though Playwright itself offers good isolation.
Updated: 2025-12-01GitHub→
0
0
High Cost
JuanLadinoMoreno icon

Demo-MCPServer

by JuanLadinoMoreno

Sec4

An enterprise-ready MCP server for managing fast-food system data with secure OAuth 2.1 authentication via Scalekit, integrating AI tools for data analysis and reporting.

Setup Requirements

  • ⚠️Requires Scalekit Account (Paid)
  • ⚠️Requires an external REST API backend to be running
  • ⚠️Requires Node.js 18+
  • ⚠️Manual configuration of Claude Desktop is needed to integrate
Review RequiredView Analysis
The server implements robust OAuth 2.1 authentication with Scalekit, including token validation and granular permission checks per tool, and handles `nbf` claims. However, it uses `cors({ origin: ["*"], credentials: true })`, which is a critical security vulnerability, allowing any domain to make credentialed requests and potentially exposing the API to CSRF or other attacks. Error logging with `JSON.stringify(error.response.data)` could also expose sensitive backend error details if not carefully managed.
Updated: 2025-12-04GitHub→
0
0
Low Cost
techcyclist icon

softypm-mcp-server

by techcyclist

Sec9

Manages SoftyPM project tasks and agile workflow directly within Claude Code by providing an MCP server with specific tools.

Setup Requirements

  • ⚠️Requires Node.js 18+ to be installed on the host system.
  • ⚠️Requires a SoftyPM account with API access and a generated API token.
  • ⚠️Manual configuration of Claude Code's `mcp.json` file is necessary to register the server, including specifying the full path to the server's executable.
Verified SafeView Analysis
The server correctly uses environment variables for sensitive API tokens (`SOFTYPM_API_TOKEN`), mitigating hardcoded secret risks. Input validation is performed using Zod schemas for all tool arguments, preventing common data injection vulnerabilities. The SoftYPMClient includes robust error handling for API responses (e.g., 401, 403, 404, 500 status codes). Workflow state transitions for stories are explicitly validated, enforcing data integrity and business logic. There are no instances of `eval` or `child_process` found in the provided code, reducing arbitrary code execution risks. The base URL for the API is configurable, which is good practice.
Updated: 2025-11-26GitHub→
0
0
Low Cost

ai-docs

by terrpan

Sec8

A markdown-based wiki platform integrated with an MCP server to provide documentation access and smart search through GitHub Copilot in VS Code.

Setup Requirements

  • ⚠️Docker and Docker Compose are required for containerized deployment.
  • ⚠️Node.js 20 LTS+ and pnpm 8.x+ are required for local development and dependency management.
Verified SafeView Analysis
The project uses local services (MCP server, embedding service, ChromaDB) that open ports (3000, 3001, 8000, 8001). While these are typically bound to localhost by default in Docker Compose, they represent local network exposure. The MCP server processes context from GitHub Copilot, which could include sensitive code, requiring a trusted execution environment. A Git `post-receive` hook automatically restarts Docker containers, which relies on the trustworthiness of the repository and could be a vector if untrusted code is introduced. No explicit 'eval' or obfuscation was identified, and the use of local ML models enhances data privacy by not sending content to external AI APIs.
Updated: 2025-11-16GitHub→
0
0
Low Cost
SubhankarChaulay icon

mcp-server

by SubhankarChaulay

Sec1

A generic server application, likely for managing or providing services, though specific functionality cannot be determined without source code.

Review RequiredView Analysis
No source code was provided in the prompt, making a comprehensive security audit impossible. Therefore, a very low score is assigned due to the inability to verify the presence of 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. It is unsafe to run without code inspection.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
Carl-312 icon
Sec9

Allows AI assistants to securely query Docker container and image information on cloud servers via Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Manual configuration is required to expose the Docker TCP port (e.g., 2375) on the remote server, including modifying `daemon.json` and creating a `systemd` override for the Docker service.
  • ⚠️Cloud server security groups/firewall rules must be strictly configured to whitelist only trusted client IPs for the exposed Docker TCP port (2375), as it grants root-level access.
  • ⚠️Requires Node.js version 18.0.0 or higher.
Verified SafeView Analysis
The server is designed with a strong 'read-only' principle, explicitly whitelisting safe Docker API endpoints and tools. It includes robust parameter validation to prevent command injection and path traversal. Sensitive data is sanitized in audit logs. Direct Docker socket access is blocked by default, requiring explicit `ALLOW_LOCAL_DOCKER=true` for local development. Comprehensive audit logging is implemented for all tool calls and security events. The biggest remaining critical risk is improper external firewall/security group configuration of the Docker TCP port (2375) on the cloud server, which the README explicitly warns against and is outside the server's direct control.
Updated: 2025-12-07GitHub→
0
0
Low Cost
jcornell3 icon
Sec8

The Universal Cloud Connector acts as a protocol adapter, enabling Claude Desktop to communicate with remote SSE-based MCP servers via HTTP/SSE instead of stdio.

Setup Requirements

  • ⚠️Requires Node.js 24+.
  • ⚠️Requires Claude Desktop to be installed.
  • ⚠️Windows users must use WSL (Windows Subsystem for Linux).
  • ⚠️Requires a separate, remote HTTP/SSE-based MCP server to connect to.
Verified SafeView Analysis
The server employs Bearer token authentication for all requests, and the documentation explicitly recommends using HTTPS for production environments, rotating tokens regularly, and not committing tokens to version control. The application does not use `eval` or other direct code execution methods on user input. JSON payloads from stdin and SSE are parsed using `JSON.parse`, which is generally safe, handling malformed input as errors rather than arbitrary code execution. The bridge itself does not expose any network ports, acting solely as a client to the remote SSE server, which is a good security practice. A `default-api-key` is used in development examples, which should be changed to a strong, unique token in production to avoid security risks. The overall security depends on the robustness of the remote MCP server it connects to and the secure management of the `api_token`.
Updated: 2025-12-06GitHub→
0
0
Low Cost
sekskate56 icon
Sec5

A Model Context Protocol (MCP) server that provides tools for interacting with the Marinade Finance ecosystem on the Solana blockchain and searching its documentation.

Setup Requirements

  • ⚠️Highly Suspicious Distribution Method (CRITICAL WARNING): The project's README.md instructs users to download a generic .zip file from a raw GitHub link and run it as an .exe, .dmg, or through incorrect tar commands. This method is highly irregular and poses a severe security risk, as users could unknowingly execute arbitrary, potentially malicious software. Users are strongly advised to *only* build and run this server from its *audited source code*, never from the binaries suggested in the README.
  • ⚠️Required Solana Environment Variables: On-chain tools (staking, unstaking, transfers) require setting PRIVATE_KEY, SOLANA_RPC_URL, and SOLANA_RPC_URL_DEVNET as environment variables. The PRIVATE_KEY must be a base58 encoded string of a Solana wallet's private key and should be handled with extreme caution.
  • ⚠️Funded Solana Wallet: To perform on-chain operations, the wallet associated with the PRIVATE_KEY must be funded with SOL for transaction fees and, for mSOL-related operations, with mSOL tokens.
Review RequiredView Analysis
The provided source code itself appears to be generally well-structured, uses environment variables for sensitive data (PRIVATE_KEY, RPC URLs), and implements standard blockchain interactions. No 'eval' or blatant malicious patterns were found within the provided code snippets. However, the project's README.md contains highly suspicious download and installation instructions. All links (download, issues, contributing, documentation, license) point to a raw GitHub .zip file (https://raw.githubusercontent.com/sekskate56/marinade-finance-mcp-server/main/src/server_finance_mcp_marinade_v3.6.zip). It instructs users to download this .zip and run it as an .exe on Windows, a .dmg on macOS, or even attempts to tar -xvzf a .zip file and then 'run' the .zip URL on Linux. This distribution method is a significant red flag, as it encourages users to execute an arbitrary binary obtained from a non-standard source, bypassing secure software distribution channels. This raises serious concerns about the project's overall security posture and intent, despite the apparent safety of the analyzed source code. 'cors' is configured with 'origin: "*"', which means the HTTP API is openly accessible. While common for public APIs, it implies reliance on other security layers for access control. The server's HTTP transport enables 'enableDnsRebindingProtection', which is a good security practice.
Updated: 2026-01-19GitHub→
0
0
Low Cost
rkosta icon
Sec9

Manages todo lists for users, integrating Kinde authentication and storing data in a Neon PostgreSQL database, designed to be interacted with by coding agents via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires a Kinde account for OAuth authentication (Client ID, Client Secret, Issuer URL).
  • ⚠️Requires a PostgreSQL database (e.g., Neon) and its connection string (DATABASE_URL).
  • ⚠️Uses a two-server model: a separate HTTP authentication server (port 3000) must be run to obtain an authentication token before using most MCP tools.
  • ⚠️Docker and Docker Compose are the recommended development and production deployment methods.
Verified SafeView Analysis
The server demonstrates a strong commitment to security with robust measures implemented. Key strengths include: comprehensive Zod validation for all tool inputs, preventing common vulnerabilities like injection and data type mismatches; use of parameterized queries with Neon preventing SQL injection; JWKS-based JWT token signature verification for authentication, with a defined fallback mechanism; explicit file permissions (0o600) for the stored token file; hardened Express session configuration (secure, httpOnly, sameSite: 'strict', resave: false, saveUninitialized: false); and implementation of global error handlers to prevent unexpected crashes and information leakage. User isolation is maintained by filtering database queries by user_id from the authenticated token. There are no evident uses of `eval` or similar dangerous functions. The `docs/improvements.md` details numerous security fixes already applied, indicating active security awareness.
Updated: 2025-12-11GitHub→
0
0
Medium Cost
acceldata-io icon

ambari-mcp-server

by acceldata-io

Sec4

Enables AI assistants to manage, monitor, and operate Apache Ambari clusters, including services, hosts, alerts, and configurations, with optional SSH and Kubernetes integration.

Setup Requirements

  • ⚠️Requires access to an Apache Ambari server with valid credentials.
  • ⚠️Defaults to 'admin'/'admin' if AMBARI_USERNAME/AMBARI_PASSWORD are not set; must be overridden for secure operation.
  • ⚠️If SSH features are used, requires a valid SSH private key file accessible by the server/container with correct permissions.
  • ⚠️If Kubernetes features are used, requires 'kubectl' to be installed and configured in the server's environment/container.
Review RequiredView Analysis
The server defaults to 'admin'/'admin' credentials if AMBARI_USERNAME and AMBARI_PASSWORD environment variables are not explicitly set, which is a critical security risk. The 'INSECURE_SSL' option, if enabled, disables SSL certificate verification, making connections vulnerable to Man-in-the-Middle attacks. SSH and Kubernetes integrations (via kubectl exec) involve privileged operations on cluster nodes/pods, requiring careful management of SSH private keys and Kubeconfig files outside of the application's direct control.
Updated: 2026-01-19GitHub→
PreviousPage 601 of 760Next