Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
High Cost

agentcore-frontend

by henriquelcoelho

Sec7

A comprehensive web-based platform for managing, monitoring, and interacting with AWS Bedrock AgentCore, Knowledge Bases, and AI agents without needing direct AWS console access.

Setup Requirements

  • ⚠️Requires an AWS Account with specific, high-privilege IAM permissions (AmazonBedrockFullAccess, AmazonS3FullAccess, AmazonOpenSearchServiceFullAccess).
  • ⚠️Requires an external MySQL or TiDB database instance to be configured and accessible.
  • ⚠️Requires setting critical environment variables like `CREDENTIAL_ENCRYPTION_KEY` for secure operation and `JWT_SECRET` for session management.
Verified SafeView Analysis
The system handles highly sensitive AWS credentials, encrypting them with AES-256. It uses a Node.js-Python bridge via `child_process` for AWS SDK interactions, which introduces a controlled but present execution risk. Direct interaction with AWS APIs requires careful management of IAM permissions. Integrations with MCP and A2A servers could also present external communication risks if not properly secured.
Updated: 2025-11-17GitHub→
0
0
Low Cost

mcp-servers

by AlexandrosMelis

Sec10

The purpose of this repository is unknown as it contains no functional code or documentation, only a .gitignore file.

Verified SafeView Analysis
The repository contains no executable code (only a .gitignore file), therefore it poses no inherent security risks related to 'eval', obfuscation, or network vulnerabilities.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
zesty-io icon

mcp-local-server

by zesty-io

Sec9

Connects Zesty.io instances with AI tools like Claude, Cursor, and VS Code by implementing the Model Context Protocol, allowing AI agents to interact with Zesty.io content, accounts, and media.

Setup Requirements

  • ⚠️Requires a Zesty.io user account or an active access token.
  • ⚠️Requires Node.js version 20 or higher.
  • ⚠️Mandatory environment variables: ZESTY_SESSION_TOKEN and ZESTY_INSTANCE_ZUID.
  • ⚠️The configuration in AI applications requires providing an absolute path to the server's 'build/index.js' file.
Verified SafeView Analysis
The server primarily acts as a wrapper around the Zesty.io SDK, exposing API functionalities. It correctly uses environment variables for sensitive tokens (ZESTY_SESSION_TOKEN, ZESTY_INSTANCE_ZUID). Error handling involves returning the raw error message, which is acceptable for a local developer tool. Sentry is initialized with `sendDefaultPii: true` and logs the user's ZUID, which is a privacy consideration for users regarding error reporting, but not a direct code execution vulnerability. No 'eval', obfuscation, or other critical malicious patterns were identified in the provided source.
Updated: 2025-12-04GitHub→
0
0
Low Cost
rrbemfica icon

mcp-auth

by rrbemfica

Sec6

Implement and secure an MCP (Model Context Protocol) API server using Keycloak OpenID Connect for authentication and authorization with dynamic client registration and token exchange capabilities.

Setup Requirements

  • ⚠️Docker and Docker Compose are required to run the Keycloak Identity Provider.
  • ⚠️The `KC_HOSTNAME` environment variable in `keycloak-standalone/docker-compose.yml` needs to be manually updated to match the host (e.g., `localhost` or an ngrok tunnel).
  • ⚠️A manual step in the Keycloak Admin Console is required to disable the "Trusted Hosts" client registration policy for dynamic client registration.
  • ⚠️Python 3 and a virtual environment are prerequisites for the Python components.
Verified SafeView Analysis
Hardcoded default admin credentials ('admin'/'admin') are present in `docker-compose.yml` and `setup_keycloak.py` for initial Keycloak setup. Keycloak is configured with `KC_HOSTNAME_STRICT: "false"` and `KC_HTTP_ENABLED: "true"` in `docker-compose.yml`, relaxing hostname validation and enabling HTTP for development, which could pose risks if deployed directly to production. The setup instructions recommend disabling Keycloak's "Trusted Hosts" client registration policy, further relaxing security for dynamic client registration. A hardcoded client secret (`PLOs4j6ti521kb5ZVVVwi5GWi9eDYTwq`) is present in `keycloak-standalone/config.json` for the `echo-mcp-server` client. Test user credentials (`mcp-admin: admin123`, `mcp-user: user123`, `mcp-readonly: readonly123`) are hardcoded in `config.json`. Environment variables for OIDC configuration in `server.py` have hardcoded defaults, requiring explicit override for production.
Updated: 2025-12-16GitHub→
0
0
High Cost
maxvoltage icon

sourcetap

by maxvoltage

Sec7

SourceTap enables AI assistants to learn and search any library's documentation directly from GitHub repositories or documentation URLs.

Setup Requirements

  • ⚠️Requires Python 3.13 or newer.
  • ⚠️Requires `uv` package manager for dependency handling and running.
  • ⚠️The path `/absolute/path/to/sourcetap` in the run command must be replaced with the actual path to the project directory.
Verified SafeView Analysis
The server downloads content from user-provided URLs (ZIP archives and webpages). While content is processed by internal libraries (zipfile, minsearch) and a proxy (jina.ai), this introduces a dependency on external content and services. A malicious URL could potentially lead to large file downloads (DoS), or exploit vulnerabilities in the parsing libraries, though Python's standard libraries are generally robust. There are no explicit uses of `eval`, `os.system`, or direct shell commands with user input. No hardcoded secrets were found.
Updated: 2026-01-16GitHub→
0
0
Low Cost
ggange icon

mcp-review

by ggange

Sec9

An open-source platform for discovering, rating, and reviewing MCP (Model Context Protocol) servers, empowering developers to share experiences and make informed decisions.

Setup Requirements

  • ⚠️Requires a PostgreSQL database connection string (Neon free tier recommended).
  • ⚠️GitHub OAuth credentials (GITHUB_ID, GITHUB_SECRET) are mandatory for user authentication, which is essential for rating and uploading servers.
  • ⚠️Cloudflare R2 Storage (R2_ACCOUNT_ID, R2_ACCESS_KEY_ID, R2_SECRET_ACCESS_KEY) and Redis (REDIS_URL) are highly recommended for custom server icons, distributed rate limiting, and caching in production environments.
Verified SafeView Analysis
The project demonstrates strong security practices including robust input validation (Zod with custom sanitization for text), CSRF protection for mutation endpoints, and distributed rate limiting for all API endpoints to prevent abuse and DoS attacks. Authentication is handled by NextAuth.js, and authorization checks are in place for sensitive actions (e.g., admin access, server ownership). Secrets are managed via environment variables and Cloudflare R2 is used for secure icon storage with a proxy endpoint that includes basic path traversal prevention. The cron job endpoint uses a timing-safe secret comparison. Prisma ORM helps prevent SQL injection. Overall, a highly security-conscious implementation.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
sschiller089 icon
Sec8

This server demonstrates a custom communication protocol, possibly inspired by Minecraft, handling WebSocket connections and various message types like handshakes, logins, and chat.

Verified SafeView Analysis
The server exposes port 3000 for both HTTP and WebSocket connections. While no explicit authentication mechanisms for protocol messages are mentioned, this is typical for a demo project. The summaries do not indicate 'eval', obfuscation, hardcoded secrets, or other directly malicious patterns. For a production environment, authentication and more robust input validation would be critical, but for a demo, it appears reasonably secure.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
youweichen0208 icon

mcp-ops-server

by youweichen0208

Sec7

The MCP OPS Server provides an AI-driven interface for managing cloud infrastructure, allowing Claude Code to intelligently query, monitor, and analyze cloud instances, logs, and alerts.

Setup Requirements

  • ⚠️Requires Docker and Docker Compose for deployment.
  • ⚠️Requires an existing OPS platform web interface with valid login credentials.
  • ⚠️Requires manual adaptation of Playwright selectors in `src/clients/ops_selectors.py` to match the target OPS platform's HTML structure.
Verified SafeView Analysis
The application uses environment variables for sensitive credentials (OPS_WEB_URL, OPS_USERNAME, OPS_PASSWORD, MCP_SERVER_TOKEN), which is good practice. However, CORS is configured with `allow_origins=["*"]`, which is overly permissive for production and should be restricted to specific domains. Additionally, the `MCP_SERVER_TOKEN` is optional, allowing authentication to be bypassed in development environments; this poses a significant risk if not properly configured in production.
Updated: 2025-11-22GitHub→
0
0
Low Cost
Roony-Pay icon

roony-mcp

by Roony-Pay

Sec9

Provides open-source AI agent payment governance with spending controls, approval workflows, and virtual card issuance.

Setup Requirements

  • ⚠️Requires custom StorageProvider (e.g., a real database) and PaymentProvider (e.g., Stripe Issuing) for production use, as in-memory and mock implementations are provided for development.
  • ⚠️Node.js version >=18.0.0 is required.
  • ⚠️A Stripe Issuing account (which requires approval) is needed if using the StripeIssuingProvider for real virtual cards.
Verified SafeView Analysis
The core library focuses on governance logic and abstracting external systems like payments and storage. Provided implementations for PaymentProvider are either mock or explicitly incomplete (Stripe), requiring users to implement a secure integration. Input validation is present for MCP tool calls. Environment variables for sensitive keys are expected. No obvious 'eval' or command injection vulnerabilities were found in the provided source.
Updated: 2025-12-05GitHub→
0
0
Low Cost
antunjurkovic-collab icon

wp-dual-native

by antunjurkovic-collab

Sec9

Facilitates agentic AI tasks within WordPress by exposing clean Machine Representation (MR) of content for summarization, extraction, and safe block insertion.

Setup Requirements

  • ⚠️Requires WordPress Dual-Native API plugin installed and active.
  • ⚠️Requires a WordPress Application Password for authentication.
  • ⚠️Manual configuration of Claude Desktop's `claude_desktop_config.json` with absolute paths and environment variables is necessary.
  • ⚠️External LLM API keys (e.g., OpenAI) may be required for AI suggestions if enabled in plugin settings.
Verified SafeView Analysis
The plugin employs strong sanitization for input and uses WordPress's built-in capabilities and permissions. The MCP server uses environment variables for sensitive credentials (WP_URL, WP_USER, WP_PASSWORD) which is a secure practice. Optimistic locking prevents stale writes. Outgoing calls to external LLMs are configurable by an administrator, which introduces a potential attack surface if misconfigured or if the API key is compromised.
Updated: 2025-11-30GitHub→
0
0
Low Cost
AstroAadi icon
Sec10

This server provides basic arithmetic (addition) and random number generation functionality accessible via a FastMCP HTTP interface.

Setup Requirements

  • ⚠️Python 3.12+ required
  • ⚠️Requires fastmcp library
Verified SafeView Analysis
The provided source code is simple and does not contain any obvious security vulnerabilities. There are no uses of 'eval', 'exec', or other dangerous functions. No hardcoded secrets or malicious patterns are observed. Operations are well-defined and isolated.
Updated: 2025-11-19GitHub→
0
0
Medium Cost
herrkaefer icon

vibe-narrator

by herrkaefer

Sec8

Vibe Narrator transforms terminal output and AI agent conversations into stylized, narrated speech with distinct character personalities, combining LLM interpretation with text-to-speech generation.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid Service)
  • ⚠️Requires Python 3.11+
  • ⚠️Linux users need `portaudio-dev` and `ffmpeg` packages for audio playback
Verified SafeView Analysis
The server uses `os.getenv` for API keys, which is good practice. User input (`prompt`) is passed to LLMs and TTS services, which is the core functionality and doesn't appear to allow direct system command injection into the server infrastructure. The `configure` tool accepts API keys, which are stored in session state, making proper access control to the MCP endpoint (e.g., via Hugging Face Spaces secrets and private settings) crucial. The `terminal_client/bridge.py` uses `subprocess.Popen` to run arbitrary commands, but this script is designed as a *local client* for the *local user* to run their own agents, not as a remote server component for arbitrary remote execution.
Updated: 2025-12-01GitHub→
PreviousPage 603 of 760Next