Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
Hooryo icon
Sec9

Effortlessly remove Gemini AI watermarks from images using client-side processing.

Setup Requirements

  • ⚠️Requires a local web server (e.g., `python -m http.server`) to avoid CORS issues when running directly from the file system.
  • ⚠️The LaMa AI method requires a one-time ~200MB model download, which is cached in IndexedDB.
Verified SafeView Analysis
The application is entirely client-side, meaning no user image data is uploaded to a server, significantly reducing backend security risks. The core logic runs in the user's browser. It loads ONNX Runtime and the LaMa AI model from external CDNs (cdn.jsdelivr.net, huggingface.co), which are generally reputable sources, but introduce a supply-chain risk if those sources were compromised. The code itself contains no 'eval' or obvious malicious patterns, and no hardcoded secrets.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
AlejandroDiazD icon

mcp-server-real-state

by AlejandroDiazD

Sec8

Facilitate LLM interaction with a real estate database for property data management and SEO content generation.

Setup Requirements

  • ⚠️Docker and Docker Compose v2+ required
  • ⚠️Requires specific Bearer Token ('secret_token_2026') for authentication
  • ⚠️Uses SQLite, limiting scalability for production environments (though portable for challenge)
Verified SafeView Analysis
The server uses a static bearer token ('secret_token_2026') for authentication, which is hardcoded in the Docker Compose file and as a default in the application settings. While explicitly stated as a test secret for the challenge, this pattern is a significant security risk for production environments as it makes the token easily discoverable and non-rotatable. No 'eval' or obvious obfuscation found. Network exposure (0.0.0.0) is typical for Dockerized apps.
Updated: 2026-01-19GitHub→
0
0
High Cost
Tuprott991 icon

VertexAI-MCP

by Tuprott991

Sec2

An AI-powered insurance product inquiry assistant for Prudential Vietnam, utilizing a Model Context Protocol (MCP) server for tool execution and a client for AI orchestration and frontend interaction.

Setup Requirements

  • ⚠️Requires Python 3.13 or newer due to `pyproject.toml` specification.
  • ⚠️Requires paid API keys for LLM access (OpenAI, Gemini/Vertex AI) and for the Linkup web search service.
  • ⚠️PostgreSQL database is required and needs to be initialized (tables created, documents ingested) before full functionality.
  • ⚠️The `run_command` tool poses a significant security risk and should be disabled or removed for production use.
Review RequiredView Analysis
The `run_command` tool in `mcp_server/sse_server.py` and `mcp_client/services.py` allows arbitrary shell command execution with `shell=True`. This is a critical security vulnerability that can lead to Remote Code Execution (RCE) if an attacker (or a misconfigured LLM) can inject malicious commands. Although there's an attempt to set a `DEFAULT_WORKSPACE`, `shell=True` can bypass many restrictions. Additionally, using `GOOGLE_CREDENTIALS_JSON` environment variable for service account keys is less secure than file paths as the raw JSON content might be exposed in process listings or logs.
Updated: 2025-12-22GitHub→
0
0
Low Cost
aiscibe-mcp-deployment icon

mcp-e70738e0-7ce97189-healiora

by aiscibe-mcp-deployment

Sec9

This server acts as a Model Context Protocol (MCP) server, exposing configured external APIs as tools for AI models like Claude.

Setup Requirements

  • ⚠️Requires `OPENAI_API_KEY` environment variable for AI model integration.
  • ⚠️Specifically requires Python version 3.9 as configured for Vercel deployment.
  • ⚠️Relies on an external backend API at `https://healiorabackend.rawcode.online` for tool functionality.
Verified SafeView Analysis
The code uses environment variables for sensitive data (e.g., OPENAI_API_KEY) and hardcodes API connection URLs, preventing common SSRF vulnerabilities. No 'eval' or other highly dangerous patterns are present. External API calls are made using httpx, which is a robust library. Error handling for server initialization is also present.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
Atomic-Germ icon

mcp-bridge

by Atomic-Germ

Sec8

Orchestrates a cyclical creative workflow by logging meditation and critique, suggesting mode switches, and injecting context between generative and analytical AI models.

Setup Requirements

  • ⚠️Requires mcp-creative server to be running for meditation functionalities.
  • ⚠️Requires mcp-consult server to be running for critique functionalities (which may in turn require a local Ollama instance or other LLM access).
  • ⚠️Requires a Node.js (>=18) and TypeScript environment.
Verified SafeView Analysis
The server primarily communicates over standard I/O (StdioServerTransport), limiting direct network attack surface. It stores session data in local JSON files with atomic writes for integrity. Input parsing for meditation/consult text uses regexes and string manipulations, which appear safe. No direct use of 'eval' or hardcoded secrets found. Potential risks exist in parsing complex or malicious outputs from other MCPs, but the current code doesn't execute arbitrary commands based on these inputs.
Updated: 2026-01-02GitHub→
0
0
Medium Cost
bioanywhere icon

manana

by bioanywhere

Sec9

Provides client libraries to access the World News API for retrieving and searching news articles from various sources.

Setup Requirements

  • ⚠️Requires an API key for the World News API, which is a commercial service and may incur costs depending on usage.
  • ⚠️The Python client specifically requires Python 3.7+.
  • ⚠️The C++ client's OAuth implementation may open a local TCP server on port 9999 for authentication redirects.
Verified SafeView Analysis
The repository contains client libraries for the World News API across multiple programming languages, not a standalone server application. The code is largely auto-generated by OpenAPI Generator, suggesting adherence to standard practices. API keys are expected to be provided by the user at runtime and are not hardcoded. The C++ OAuth client includes a local TCP server (`ReplyServer`) that listens on port 9999 (`QHostAddress::Any`) for handling OAuth redirects, which is a common and generally safe pattern for desktop applications. No malicious patterns, obfuscation, or direct network vulnerabilities on the client side were identified. The core functionality relies on secure HTTPS communication with the external World News API.
Updated: 2025-12-13GitHub→
0
0
High Cost
adarshvermaa icon
Sec2

An AI-powered web builder and code assistant that plans project structures, generates UI components, and creates full code files based on natural language prompts, leveraging multiple LLM providers and real-time updates.

Setup Requirements

  • ⚠️Requires API keys for OpenAI, Anthropic, and Gemini LLMs (paid services).
  • ⚠️A hardcoded Gemini API key is present in the source code; replace it with an environment variable for security.
  • ⚠️Requires Kafka, Zookeeper, and Redis infrastructure (typically run via Docker Compose, as indicated in the dev script).
  • ⚠️Requires a Pinecone vector database for RAG (paid service).
Review RequiredView Analysis
CRITICAL: The Gemini API key is hardcoded as a fallback in `backend/src/main/web/services/builder.service.ts` (`AIzaSyAkptd80FbJT8cwKbghiv57ppoDvQPSfHo`). This is a severe vulnerability, as this key could be exposed and abused. Additionally, the system uses `child_process.spawn` and `exec` for command execution (`ChatService.runCommandStream`, `CodeBuilderService.runCommand`), which allows for arbitrary command execution. While `ALLOWED_COMMANDS` are mentioned, their full implementation and robustness against bypasses are not fully visible. Path sanitization is present for file system operations, which is a positive, but overshadowed by the hardcoded secret and command execution capabilities.
Updated: 2025-11-29GitHub→
0
0
Low Cost
Chaos2555 icon

bullet-mcp

by Chaos2555

Sec9

Validating and improving bullet point lists based on cognitive research principles, designed to be integrated as a tool for LLMs or other content generation systems.

Setup Requirements

  • ⚠️Requires Node.js (version 18+ is recommended by project dependencies and `moduleResolution: "NodeNext"`).
  • ⚠️Designed as a Model Context Protocol (MCP) server, meaning it functions as a tool called by an MCP client (e.g., an LLM orchestrator), not as a standalone GUI application for direct user input.
  • ⚠️The provided README.md describes a desktop application with `.exe`, `.dmg`, and `.zip` downloads, which contradicts the actual source code's implementation as a Node.js-based MCP server. This could lead to user confusion if the README is taken literally.
Verified SafeView Analysis
The server primarily communicates via standard I/O (`StdioServerTransport`), which limits direct external network attack surface. It includes input validation to prevent malformed data from reaching core logic. `fs.readFileSync` is used safely for `package.json`. No `eval` or obvious hardcoded secrets were found. The tool relies on the `@modelcontextprotocol/sdk`, assuming its security integrity.
Updated: 2026-01-19GitHub→
0
0
High Cost
Mutahir-15 icon
Sec8

Summarizes uploaded PDF documents and generates multiple-choice or mixed-style quizzes from the content using an AI agent.

Setup Requirements

  • ⚠️Requires Google Gemini API Key (paid service, must be set in a .env file as GEMINI_API_KEY or GOOGLE_API_KEY)
  • ⚠️Requires Python 3.13 or newer (as specified in pyproject.toml, which is a development version of Python and may not be readily available or stable)
Verified SafeView Analysis
The application sends user-uploaded PDF content to Google's Gemini API for processing, which introduces data privacy considerations inherent to its functionality. API keys for Gemini are correctly loaded from environment variables (GEMINI_API_KEY or GOOGLE_API_KEY). No 'eval' or other direct code execution vulnerabilities are present in the provided source code. PyPDF is used for text extraction, a standard library, but processing untrusted PDF files can sometimes pose risks (e.g., malformed content).
Updated: 2025-12-02GitHub→
0
0
Low Cost
Traia-IO icon
Sec7

An MCP server providing a standardized interface for AI agents and LLMs to interact with the Test Nikola 2 API, leveraging the D402 payment protocol.

Setup Requirements

  • ⚠️Requires Docker for recommended deployment or Python 3.12+ for manual installation.
  • ⚠️Requires configuration of D402 payment protocol environment variables (e.g., `SERVER_ADDRESS`, `MCP_OPERATOR_PRIVATE_KEY`, `D402_FACILITATOR_URL`), although a local setup script (`run_local_docker.sh`) attempts to auto-generate some for testing.
  • ⚠️The `run_local_docker.sh` script includes complex logic for referencing and copying the `traia-iatp` library locally, which might introduce friction if the local `IATP` repository structure is not as expected.
Verified SafeView Analysis
The server includes a `D402PaymentMiddleware` for payment verification, enhancing economic security. However, it configures CORS to `allow_origins=['*']`, `allow_methods=['*']`, and `allow_headers=['*']`, which is overly permissive and generally not recommended for production environments as it can expose the API to unauthorized cross-origin requests. Environment variables for sensitive data like `MCP_OPERATOR_PRIVATE_KEY` are used, which is good practice, but the `run_local_docker.sh` script generates *temporary* keys for local testing, requiring users to ensure proper, secure key management for production deployment. No direct use of `eval` or `exec` with untrusted input was found.
Updated: 2025-12-10GitHub→
0
0
High Cost
suvaidkhan icon

code-search-mcp

by suvaidkhan

Sec7

A high-performance semantic code search server that enables intelligent code discovery through natural language queries within a specified codebase.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid Service)
  • ⚠️Requires Go 1.21 or higher
  • ⚠️Requires Git installed (for .gitignore integration)
  • ⚠️Currently only supports OpenAI for embeddings; local models are a roadmap item.
Verified SafeView Analysis
The server is designed to index a user-specified local codebase (`--path` flag or `CODE_SEARCH_WORKSPACE_ROOT` environment variable). Running it in an untrusted environment or pointing it to sensitive directories could lead to unintended data exposure if the server's API (localhost:8080 by default) is externally accessible without proper access controls. The `internal/fs` package executes the `git check-ignore` command, which involves external process execution, though the paths are controlled by the configured workspace. The OpenAI API key (OPENAI_API_KEY) is required and must be kept secure via environment variables.
Updated: 2025-12-15GitHub→
0
0
Medium Cost
jadjhaddad icon

mcp-dotnet-explorer

by jadjhaddad

Sec8

A Model Context Protocol (MCP) server that analyzes .NET assembly DLLs and stores metadata in a SQLite database for efficient querying.

Setup Requirements

  • ⚠️Requires .NET 9.0 SDK
  • ⚠️Requires WSL2 (if running on Windows)
  • ⚠️Requires manual configuration in Claude Code's MCP settings file with an adjusted path
Verified SafeView Analysis
The server's core function is to analyze arbitrary .NET DLLs. It uses `MetadataLoadContext` for reflection-only loading, which significantly mitigates direct code execution risks from potentially malicious DLLs compared to full assembly loading. There are no indications of `eval` usage, obfuscation, hardcoded secrets, or unintended external network communication in the provided code snippets. The primary security consideration for a tool of this nature is resource exhaustion (DoS) when analyzing extremely large or malformed DLLs, and potential information leakage if exposed to untrusted users, though it's designed for local use by a trusted client (Claude Code).
Updated: 2025-11-26GitHub→
PreviousPage 615 of 760Next