Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
ahmetatar icon

mcp2browser

by ahmetatar

Sec9

Enables AI assistants to programmatically interact with web pages through a Model Context Protocol (MCP) server for browser automation tasks.

Setup Requirements

  • ⚠️Requires Playwright browser binaries to be downloaded (typically handled by `npm install`, but can sometimes require specific system dependencies or manual intervention if auto-download fails).
Verified SafeView Analysis
The server uses Playwright to launch a headless browser and navigate to arbitrary URLs via the 'openPage' tool. While this is its intended functionality, exposing this server to an untrusted network would allow remote execution of browser actions, posing a significant security risk. For its intended local use with AI assistants, the code appears robust with basic URL validation for the 'openPage' input.
Updated: 2025-11-24GitHub→
0
0
Low Cost

mcp-http-server

by ivee-tech

Sec8

This server implements the Model Context Protocol (MCP) to expose tools via HTTP, demonstrating tool registration, discovery, and execution for AI agents or clients.

Setup Requirements

  • ⚠️Requires .NET SDK 9.0 (specific version).
  • ⚠️Local HTTPS endpoints may require `curl -k` or trusting developer certificates for command-line interaction.
Verified SafeView Analysis
The server is a sample implementation designed for local use, exposing basic tool discovery and execution endpoints. The 'hello_world' tool is benign. For production deployment or more complex tools, robust authentication, authorization, and input validation would be critical to prevent network risks, but for a local sample, the risk is low.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
arthurfantaci icon

zoom_transcript_mcp

by arthurfantaci

Sec8

Manages and provides an interface for interacting with Zoom Cloud Recording transcripts, allowing listing, downloading, searching, and action item extraction.

Setup Requirements

  • ⚠️Requires a Zoom Account with Cloud Recording enabled.
  • ⚠️Requires creation of a Zoom Server-to-Server OAuth App in the Zoom App Marketplace with specific `cloud_recording:read` scopes to obtain Account ID, Client ID, and Client Secret.
  • ⚠️Node.js v16 or higher is required.
Verified SafeView Analysis
The server correctly uses environment variables for sensitive Zoom API credentials. It interacts with the Zoom API over HTTPS and performs file system operations (read/write transcripts and metadata) to a designated directory, with path sanitization in `formatFileName`. No `eval` or arbitrary command execution is detected. The security primarily relies on the Zoom OAuth configuration and the underlying security of the Zoom API itself. The default `TRANSCRIPTS_DIR` to `process.cwd()/transcripts` could be a minor concern if the working directory is not secure, but it can be configured.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
krakend icon

mcp-server

by krakend

Sec9

Universal MCP server providing intelligent assistance for KrakenD API Gateway configuration validation, security auditing, and configuration generation.

Setup Requirements

  • ⚠️Optimal functionality (e.g., precise version-aware validation and auditing) often requires the `krakend` binary or `docker` to be installed and accessible in your system's PATH.
  • ⚠️Depending on the installation method and target directory (e.g., `~/.local/bin`), you may need to manually add the server's installation path to your system's PATH environment variable.
Verified SafeView Analysis
The server runs locally via stdio, exposing no network ports and performing no remote access beyond downloading documentation and JSON schemas from `krakend.io`. File system access is limited to the current working directory for configuration files (read-only) and a dedicated data directory (`~/.krakend-mcp/` or `data/`) for cache and search index (read/write). No hardcoded secrets or 'eval' equivalent found in the analyzed source code. It operates with user permissions, not elevated privileges. The `SECURITY.md` explicitly outlines supported versions, vulnerability reporting, and user best practices, contributing to a strong security posture.
Updated: 2026-01-09GitHub→
0
0
High Cost

BoostHub

by Anderson-SG

Sec9

An MCP (Model Context Protocol) server designed to boost developer productivity by offering AI-driven code review prompts, code rule generation, and utility tools for integration with clients like Cursor.

Setup Requirements

  • ⚠️Requires Docker for running pre-configured MCP servers (e.g., sequentialthinking, playwright) when using the `/create-mcp-config` prompt, or for standard Docker deployment.
  • ⚠️Requires `MCP_API_KEY` environment variable for secure operation in 'production' environments.
  • ⚠️Requires Node.js and Bun runtime (or Docker) if running locally from source.
Verified SafeView Analysis
The server implements API key authentication via `Authorization: Bearer` or `X-API-Key` headers. The `MCP_API_KEY` environment variable is explicitly enforced as mandatory in 'production' environments, which is a strong security practice. In 'development' mode, authentication is optional, which could be a minor risk if accidentally deployed without a key in production. No 'eval' or direct obfuscation found. Sensitive information like API keys are managed via environment variables. Proper logging for unauthorized access attempts is in place.
Updated: 2025-11-27GitHub→
0
0
Medium Cost
glennart8 icon

MCP_mail_server

by glennart8

Sec8

Automates email handling for a fictional timber company by using AI to classify emails and execute predefined tools for responses and actions.

Setup Requirements

  • ⚠️Requires a Gemini API Key for AI classification and response generation (paid service).
  • ⚠️Requires manual Google OAuth 2.0 configuration (creating a project, enabling Gmail API, generating credentials.json) to interact with real Gmail.
  • ⚠️Requires Python 3.x and installing dependencies from requirements.txt.
Verified SafeView Analysis
The system uses `pickle` for persisting Google OAuth tokens (`token.pickle`). While used for legitimate credential storage, deserializing data from `pickle` can pose a security risk if the file is maliciously tampered with or loaded from an untrusted source. However, in this context, the file is self-generated by the application for its own trusted credentials.
Updated: 2025-12-03GitHub→
0
0
Medium Cost
rameshcreations icon

docker-mcp

by rameshcreations

Sec6

This project implements a Model Context Protocol (MCP) server that exposes Docker management capabilities as MCP tools, allowing connection to clients like Amazon Q or Claude Desktop for AI-driven container orchestration.

Setup Requirements

  • ⚠️Requires Docker Engine to be installed and running on the host system.
  • ⚠️Requires Python 3.10+.
  • ⚠️The client configuration paths (e.g., `mcp/venv/bin/python`, `mcp/docker-mcp.py`) assume the repository is cloned into a `~/mcp` directory; users must adjust these paths if cloned elsewhere.
  • ⚠️Requires an MCP-compatible client (e.g., Amazon Q, Claude Desktop) to interact with the server.
Verified SafeView Analysis
The server itself does not contain obvious malicious patterns, hardcoded secrets, or use dangerous functions like 'eval'. However, it exposes powerful Docker management capabilities (e.g., `run_container`, `delete_container` with `force`) directly to an MCP client. If the MCP client or the host running this server is compromised, it could lead to arbitrary code execution or full control over the Docker host. The security risk lies in the inherent power of the exposed tools and the permissions with which the Docker daemon operates, rather than specific vulnerabilities in the server's code.
Updated: 2025-12-02GitHub→
0
0
Low Cost
hyfoxus icon

movieRecsBot

by hyfoxus

Sec8

The service exposes an IMDb vector database through Model Context Protocol (MCP) endpoints, allowing clients to perform natural language movie searches and fetch movie metadata.

Setup Requirements

  • ⚠️Requires a local Ollama instance running to provide embeddings.
  • ⚠️Requires a PostgreSQL database with the pgvector extension and pre-loaded IMDb data.
  • ⚠️Default `SPRING_DATASOURCE_PASSWORD` and `APP_ADMIN_BOOTSTRAP_TOKEN` are 'changeme'/'bootstrap-token' respectively, requiring explicit modification for secure deployment.
  • ⚠️Initial setup involves running `scripts/setup_data.sh` to download and embed IMDb data, which can be time-consuming and resource-intensive.
Verified SafeView Analysis
The server uses named parameters for most SQL queries, which is a good practice against SQL injection. Sensitive administrative endpoints are protected by an `X-Bootstrap-Token`. Docker secrets are utilized for the Telegram bot token (though not directly for this MCP server, it's a monorepo setup). However, default placeholder values like `change-me` for `APP_ADMIN_BOOTSTRAP_TOKEN` and `SPRING_DATASOURCE_PASSWORD` are present; these must be explicitly changed in production environments. There is a minor risk with direct string concatenation for `hnsw.ef_search` and `maxTitles` in SQL queries, although these values are currently derived from application configuration properties, not directly from untrusted user input.
Updated: 2026-01-17GitHub→
0
0
Low Cost
devonfox icon

notes-mcp

by devonfox

Sec8

An MCP server for creating markdown notes and managing tasks, sending them to Discord and optionally saving locally.

Setup Requirements

  • ⚠️Requires Node.js 18+ for native FormData and Blob support.
  • ⚠️A Discord Webhook URL is required for core functionality, which needs to be created and configured.
  • ⚠️Environment variables (e.g., `DISCORD_WEBHOOK_URL`, `LOCAL_FILE_PATH`, `TASKS_FILE_PATH`) must be correctly set up.
Verified SafeView Analysis
The server correctly uses environment variables for sensitive information like `DISCORD_WEBHOOK_URL`, preventing hardcoded secrets. User-provided `title` for markdown notes is sanitized to prevent path traversal issues when forming filenames. File paths for local saving (`LOCAL_FILE_PATH`, `TASKS_FILE_PATH`) are configured via environment variables, which is standard practice. No direct `eval` or shell command execution from user input is observed. Network requests to Discord include timeouts. Overall, the code follows good security practices for its described functionality, assuming secure configuration of environment variables. The primary risks would stem from misconfiguration of local file paths or improper management of the Discord webhook URL.
Updated: 2025-11-18GitHub→
0
0
Low Cost

mcp-oidc-nx-poc

by adem-hassine

Sec8

Demonstrates a Keycloak-protected Model Context Protocol (MCP) server for OIDC-based authentication and authorization of various backend tools.

Setup Requirements

  • ⚠️Requires Node.js v20.19.3 to be installed and used (e.g., via nvm).
  • ⚠️Docker and Docker Compose are essential for running Keycloak and MySQL services locally.
  • ⚠️The Keycloak realm configuration, including users, roles, and clients (e.g., 'mcp-react-client' and the 'math-ops' role), is pre-defined in `docker/keycloak-realm-config/realm-export.json` and must be imported into Keycloak for the demo to function.
  • ⚠️The React client's OIDC `redirect_uri` is explicitly configured as `http://localhost:3333/react`, which must match the Keycloak client setup and where the React application is served by the `mcp-server`.
Verified SafeView Analysis
The server uses `jose` for JWT verification and implements role/scope-based authorization, with `zod` for input validation, which are good practices. CORS is configurable. The `execSync` import in `AppController.ts` is present but not used in the provided code, which could be a risk if activated without care. Development Keycloak credentials (`admin`/`admin`) and empty MySQL password are used in `docker-compose.yml`, explicitly noted as needing hardening for production.
Updated: 2025-11-29GitHub→
0
0
Low Cost
VshareCloud-Project icon

awesome-mcp-servers

by VshareCloud-Project

Sec10

This repository serves as a curated catalog for discovering production-ready MCP servers.

Verified SafeView Analysis
The provided source code is limited to a README.md file, which does not contain executable code to audit for security risks. The repository itself is a static list of external servers, thus posing no direct security threat from its own code.
Updated: 2025-11-20GitHub→
0
0
Low Cost
Grohith17 icon
Sec2

Manages inventory data by providing tools to add, remove, check stock, and list items.

Setup Requirements

  • ⚠️Python 3.13+ required
  • ⚠️MySQL database server must be running and accessible with a database named 'inventory_system'
  • ⚠️Database user 'root' with an empty password is used (highly insecure and often requires specific MySQL configuration for this privilege)
  • ⚠️`mysql-connector-python` library must be installed (`pip install mysql-connector-python`)
Review RequiredView Analysis
CRITICAL: Hardcoded MySQL root user with an empty password in `db_config`. This poses a severe security risk, allowing unauthorized database access if exposed. No environment variables are used for credentials.
Updated: 2025-12-03GitHub→
PreviousPage 637 of 760Next