Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
cnPauLi icon
Sec7

The Trae-OpenSpec MCP server provides a zero-command-line interface for creating, managing, and optimizing OpenSpec projects and code, integrated with Trae AI.

Setup Requirements

  • ⚠️Requires Node.js v18.0.0 or higher.
  • ⚠️Requires the latest version of Trae AI for full integration.
  • ⚠️By default, 'CREATE_REAL_FILES' environment variable is 'false', meaning the server will simulate file creation but not actually write files to disk unless explicitly set to 'true'.
Verified SafeView Analysis
The server performs file system write operations based on user input (projectName) when 'CREATE_REAL_FILES' is true. While limited to the current working directory and using path.join for basic path sanitization, this pattern inherently carries risk if not used in a controlled environment or with proper input validation. No 'eval' or direct network exposure for user input is present.
Updated: 2025-12-11GitHub→
0
0
Medium Cost
kingkillery icon

git-worktree-mcp

by kingkillery

Sec3

Manages Git worktrees and orchestrates parallel development workflows with AI agents using MCP integration.

Setup Requirements

  • ⚠️Requires Node.js 18+
  • ⚠️Must be run within a Git repository
  • ⚠️Requires Par CLI installed for Par features
  • ⚠️Requires tmux for Par features (works via WSL on Windows)
Review RequiredView Analysis
The `ParManager` class utilizes `execSync` to execute shell commands, including `par send` which can send arbitrary commands to a tmux session via the `par_send_command` tool. This poses a significant security risk as it allows for remote code execution if an AI agent (or a malicious actor interacting with it) is permitted to send unverified commands. While other `execSync` calls are used with inputs derived from Zod-validated strings, the direct command injection potential through `par_send_command` is critical. The server interacts with the local file system extensively for worktree management and configuration file copying, requiring high trust in the execution environment.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
RaghadJohani0 icon
Sec9

Provides a sandboxed filesystem server with read, write, and search capabilities via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Node.js and npm to be installed.
  • ⚠️Requires TypeScript for development (handled by 'ts-node' in 'dev' script).
Verified SafeView Analysis
The server implements a robust `safePath` function that effectively prevents path traversal attacks by ensuring all file operations are confined strictly within the `/data` directory. No 'eval' or other inherently dangerous functions are used without explicit justification. There are no hardcoded secrets or obvious network vulnerabilities beyond its intended function as an MCP server. All filesystem access is explicitly sandboxed, enhancing security.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
owayo icon
Sec9

An MCP server for AI assistants to integrate with GitLab, fetching pipeline failure logs, merge request comments, and code changes for automated analysis and feedback.

Setup Requirements

  • ⚠️Requires a GitLab API Key with `read_api` scope.
  • ⚠️Requires `uv` package manager for installation and execution.
  • ⚠️Requires local Git repository path (`GIT_REPO_PATH`) to be correctly configured and accessible.
  • ⚠️Requires GitLab URL (`GITLAB_URL`) and Project Name (`GITLAB_PROJECT_NAME`) to be set in environment variables.
Verified SafeView Analysis
The server uses environment variables for sensitive data (GitLab API key, repository paths), which is a good practice. No 'eval' or obvious command injection vulnerabilities were found. Potential security risks are primarily from misconfiguration of environment variables (e.g., 'GIT_REPO_PATH' pointing to an unintended location) or if underlying third-party libraries (`gitpython`, `python-gitlab`) contain vulnerabilities.
Updated: 2025-11-26GitHub→
0
0
Low Cost
itzuditsharma icon

Agentic-AI

by itzuditsharma

Sec6

An AI agent crew designed to review C/C++ code for MISRA compliance or generate MISRA-compliant code, leveraging a RAG system for MISRA rules.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid) configured in a .env file.
  • ⚠️Requires Python >=3.10 <3.14.
  • ⚠️Requires the `Misra_document.pdf` file to be present for RAG database generation (not provided in the source).
  • ⚠️Uses UV for dependency management (`pip install uv` then `crewai install`).
Review RequiredView Analysis
The project uses `allow_code_execution=True` with `code_execution_mode="safe"` for the 'coder' agent. While 'safe' mode implies sandboxing, any code execution controlled by an LLM carries inherent risks of sandbox escapes or unintended malicious code generation, even if the primary task is code review. External PDF processing for RAG also introduces potential parsing vulnerabilities, though less severe.
Updated: 2025-11-21GitHub→
0
0
High Cost
yehorkardash icon

mcp-server

by yehorkardash

Sec8

Serves as an MCP (Model Context Protocol) server, providing tools for fetching a specific image and demonstrating various JSON schema input types for tool calls.

Setup Requirements

  • ⚠️Requires Node.js environment (v14+ due to ES module usage).
Verified SafeView Analysis
No 'eval' or obvious obfuscation found. The hardcoded image URL prevents Server-Side Request Forgery (SSRF) for the image fetching tool. Open CORS (`Access-Control-Allow-Origin: *`) is enabled, which is common for public APIs but allows universal access. The server relies on the security and robustness of the `@modelcontextprotocol/sdk` for session handling and message processing. No direct user-controlled code execution or sensitive information leakage found in error handling.
Updated: 2025-11-20GitHub→
0
0
Low Cost
daporun icon
Sec8

A general-purpose Node.js client for the Model Context Protocol (MCP) servers, facilitating robust JSON-RPC 2.0 communication over stdin/stdout and managing child server processes.

Setup Requirements

  • ⚠️Requires a Node.js runtime environment (v18+ recommended as per package.json engines).
  • ⚠️The external MCP server (e.g., 'mcp-server-general') must output valid JSON objects to stdout for the client's parser to function correctly.
  • ⚠️When utilizing built-in profiles with `autoInstall: true` (e.g., 'web-dev'), initial setup may require network access to install the server and its plugins via npm.
Verified SafeView Analysis
The provided source code is for 'mcp-client-general', which acts as a client to an MCP-compatible server, not an MCP server itself. Its primary function involves spawning external MCP servers as child processes and communicating with them via stdio. The client code uses a robust, framing-agnostic JSON parser to handle incoming data, which helps mitigate risks associated with malformed input often seen with 'Content-Length' headers. It does not use 'eval' or other inherently dangerous functions. However, as the client executes arbitrary commands to launch the MCP server, the overall security of the system depends on the trustworthiness of the external server command and its arguments. Users must ensure that any command supplied to `mcp run` or programmatically to `MCPProcess` is from a trusted source.
Updated: 2026-01-07GitHub→
0
0
Low Cost
Sec6

Manages and monitors multi-cloud resources, with a primary focus on Azure, providing a web-based user interface via Streamlit.

Setup Requirements

  • ⚠️Active Azure subscription and appropriate credentials (e.g., Service Principal, Managed Identity) with permissions to manage desired resources.
  • ⚠️Python environment (likely 3.8+) with all dependencies listed in `requirements.txt` installed.
  • ⚠️Potential configuration steps for connecting the Streamlit app to the `mcp_server` backend and specific Azure resources.
Review RequiredView Analysis
The project involves an MCP server and an Azure agent client, implying network communication and interaction with cloud services. This inherently carries security risks related to credential management, data access, and potential API vulnerabilities if not properly secured. No direct indicators of 'eval' or obfuscation from file names, but thorough code review is essential due to cloud access requirements.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
justhappened-corp icon

stock-moves-explained

by justhappened-corp

Sec7

Provides AI-powered analysis explaining significant moves in major US stocks (S&P 500, NASDAQ 100, Dow 30) to AI assistants.

Verified SafeView Analysis
Cannot audit the server's internal source code as it is provided as a remote service. The client-side integration via MCP configuration does not expose immediate security vulnerabilities. Assumes the remote server (api.justhappened.wtf) adheres to standard security practices (e.g., HTTPS, input validation, secure backend). No 'eval', obfuscation, hardcoded secrets, or malicious patterns are visible in the provided interface definitions.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
ambit1977 icon

GTM-MCP

by ambit1977

Sec9

Automate and manage Google Tag Manager (GTM) accounts, containers, workspaces, tags, triggers, variables, and versions through an MCP server.

Setup Requirements

  • ⚠️Requires a Google Cloud Project with OAuth2 Desktop app credentials (Client ID, Client Secret, Redirect URI) configured.
  • ⚠️Requires the Google Tag Manager API to be enabled in the Google Cloud Project.
  • ⚠️Initial interactive authentication via a browser is necessary to obtain and cache the OAuth2 token.
  • ⚠️Primarily tested and intended for local operation on macOS, as indicated in the README and specific command usage (`open` for browser).
Verified SafeView Analysis
The server uses standard OAuth2 for Google API authentication, storing tokens securely in a local file (`~/.gtm-mcp-token.json`). Sensitive credentials (Client ID/Secret) are correctly sourced from environment variables. The use of `execAsync('open "${authUrl}"')` is for opening a browser on macOS during initial authentication, where `authUrl` is generated internally by `googleapis`, posing no apparent injection risk. Input sanitization is implicitly handled by the `googleapis` library for API requests, and explicitly for `filter` and `autoEventFilter` parameters by attempting `JSON.parse` if they are strings.
Updated: 2025-12-04GitHub→
0
0
High Cost
greedyaj icon
Sec9

An MCP server that exposes code from multiple local repositories to provide context for AI clients like GitHub Copilot.

Setup Requirements

  • ⚠️Manual configuration of 'config.json' with absolute paths is required.
  • ⚠️Requires Node.js version 18 or higher.
  • ⚠️Specific VS Code settings are necessary for GitHub Copilot Chat integration.
Verified SafeView Analysis
The server implements robust security measures: explicit path sandboxing prevents directory traversal, symbolic links are not followed, and file read sizes are capped to prevent client flooding. There are no signs of 'eval', obfuscation, or hardcoded secrets. As a local stdio-transport server, it minimizes network-related security risks.
Updated: 2025-11-28GitHub→
0
0
Low Cost
YashJain2410 icon

Test-Mcp-Server

by YashJain2410

Sec9

An expense tracker server that allows adding, listing, and summarizing financial expenses.

Setup Requirements

  • ⚠️Requires Python 3.13 or newer (as specified in pyproject.toml).
Verified SafeView Analysis
The code uses parameterized queries, effectively preventing SQL injection vulnerabilities. No hardcoded secrets or dangerous functions like 'eval' or 'os.system' are present. The database is stored in a temporary directory, which is a reasonable approach for a local-file-based database. The server binds to '0.0.0.0' by default, making it accessible from any network interface; while common for development, this should be considered in a production environment.
Updated: 2026-01-16GitHub→
PreviousPage 618 of 760Next