Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
bhandary icon

my-mcp-server

by bhandary

Sec9

A sample server demonstrating the Multi-modal Communication Protocol (MCP) with OAuth authentication using Auth0.

Setup Requirements

  • ⚠️Requires Auth0 for OAuth authentication.
  • ⚠️Requires `AUTH0_DOMAIN` environment variable.
  • ⚠️Requires `RESOURCE_SERVER_URL` environment variable.
  • ⚠️Requires `AUTH0_AUDIENCE` environment variable.
Verified SafeView Analysis
The server correctly utilizes environment variables for sensitive configuration like Auth0 domain and resource URL, avoiding hardcoded secrets. OAuth token verification is implemented using standard JWT practices with audience, issuer, and signature verification. The JWT client's synchronous operations are appropriately offloaded to a thread pool in the asynchronous context. Binding to '0.0.0.0' is standard for containerized applications but requires proper firewalling in production environments. No 'eval' or obvious malicious patterns were found.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
UnitVectorY-Labs icon

mcp-tf-provider-docs

by UnitVectorY-Labs

Sec9

Indexes and serves Terraform/Tofu provider documentation from a local Git repository to power accurate, context-aware code generation for MCP agents.

Setup Requirements

  • ⚠️Requires the `TF_CONFIG` environment variable to be set, pointing to a valid YAML configuration file.
  • ⚠️Requires a local clone of the target Terraform/Tofu provider's Git repository, with the `docs_path` configured to the documentation subdirectory (e.g., `/website/docs`).
Verified SafeView Analysis
The server reads file content from a configured `docs_path` and uses a regex `match_pattern` from a YAML configuration file to identify resources. Misconfiguration (e.g., `docs_path` pointing to sensitive system areas, or a malicious `match_pattern` in an untrusted config file) could lead to unintended file exposure. However, the code itself does not exhibit dynamic code execution (like `eval`), listen on network ports (it communicates via standard I/O for MCP), or contain hardcoded secrets. It relies on `os.ReadFile` and standard Go libraries, indicating generally safe coding practices for its intended function.
Updated: 2026-01-17GitHub→
0
0
Medium Cost
masaki39 icon

obsidian-mcp

by masaki39

Sec9

Provides the active Obsidian file (path and content) to an LLM via the Obsidian Local REST API.

Setup Requirements

  • ⚠️Requires the Obsidian Local REST API community plugin to be installed and configured in Obsidian.
  • ⚠️Requires Node.js 20+ to be installed.
  • ⚠️Requires an API key generated from the Obsidian Local REST API plugin settings.
Verified SafeView Analysis
The server primarily operates locally, connecting to the Obsidian Local REST API at a default localhost address (http://127.0.0.1:27123). Authentication is handled via an API key passed through environment variables (OBSIDIAN_API_KEY), which is a secure practice for secrets. No 'eval' or obvious malicious patterns are present. The primary security consideration would be the local Obsidian REST API plugin's own configuration and network exposure, which this server relies upon but does not control.
Updated: 2025-12-14GitHub→
0
0
Medium Cost
kaxxx icon
Sec8

A Spring AI MCP server exposing AI-powered code explanation and review tools to an IDE like IntelliJ.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid) for operation.
  • ⚠️Requires JDK 17 for compilation and execution.
  • ⚠️Requires specific JSON configuration within IntelliJ IDEA's AI Assistant settings to integrate as an MCP server.
Verified SafeView Analysis
The application relies on an external OpenAI API, which is standard practice for AI integrations. The application itself does not exhibit immediate code injection vulnerabilities or dangerous patterns like 'eval'. Hardcoded API keys are avoided by using a DUMMY_KEY_FOR_BUILD placeholder and requiring the user to provide a valid key via environment variables. Prompt injection is a theoretical risk inherent to LLM interactions but not a vulnerability of the server's codebase itself.
Updated: 2025-12-12GitHub→
0
0
Low Cost
Horizon-Digital-Engineering icon

fpe-demo-mcp

by Horizon-Digital-Engineering

Sec4

Demonstrates authentication and FF3 Format Preserving Encryption (radix-10 digits) for LLM tools via Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Critical Security Defaults: Hardcoded FPE keys/tweak and authentication secrets (e.g., 'demo-secret') are used by default. These must be overridden with strong, unique values via environment variables for production (FPE_KEY, FPE_TWEAK, AUTH_TOKEN, AUTH_JWT_SECRET).
  • ⚠️Insecure Authentication Modes: AUTH_MODE defaults to 'authless'. For secure deployments, it must be explicitly set to 'production' (or 'test' for a stricter demo) and requires JWT configuration.
  • ⚠️Node.js Version Requirement: Requires Node.js version >=20.0.0.
  • ⚠️FF3 Encryption Limitations: The underlying FF3 library only supports radix-10 (digits 0-9) for inputs between 6 and 56 characters after non-digit stripping. Format reconstruction (e.g., hyphens in SSNs) is not preserved.
Verified SafeView Analysis
The server defaults to hardcoded FPE keys/tweak and authentication secrets (e.g., 'demo-secret'). It also offers 'authless' and 'debug' authentication modes that bypass security. These are intended for demo/testing and are critical security risks if deployed to production without overriding relevant environment variables (FPE_KEY, FPE_TWEAK, AUTH_TOKEN, AUTH_JWT_SECRET) and configuring AUTH_MODE='production'.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
schieblerchris icon
Sec8

This project is a small demo for Spring AI, providing an MCP-Server for local LLMs and a web frontend for a chat client to aggregate data from various sources (persons, hobbies, events, vacations).

Setup Requirements

  • ⚠️Requires a locally running LLM with tool support (e.g., LM Studio) configured for MCP Server and API access.
  • ⚠️Requires PostgreSQL and an SMTP server (both provided via Docker Compose).
  • ⚠️Configuration of LLM base URL and API Key is required via application.properties or environment variables.
  • ⚠️Initial Vaadin build can take a while.
Verified SafeView Analysis
The codebase is generally well-structured for a Spring Boot application, with no direct 'eval' or malicious patterns. Sensitive configurations like API keys are expected to be environment variables. Potential risks include Cross-Site Scripting (XSS) if LLM-generated Markdown or HTML (via the MailTool) is rendered by a client without adequate sanitization, but this is often a broader LLM safety concern rather than a specific code vulnerability within this application itself. Administrative features like database cleanup are explicit and require user confirmation.
Updated: 2025-11-20GitHub→
0
0
Medium Cost
shujaakbar2020 icon

mcp-client-server

by shujaakbar2020

Sec5

Implements a server and client for the Minecraft protocol, enabling custom game interactions or proxying.

Setup Requirements

  • ⚠️Requires a specific runtime environment (e.g., Node.js or Python)
  • ⚠️Dependencies must be installed via a package manager (e.g., npm or pip)
Review RequiredView Analysis
Source code was not provided for detailed analysis. The security assessment is based solely on the project name and common patterns for network servers. Potential risks in a network server include improper input validation, unauthenticated command execution, and resource exhaustion. No 'eval', obfuscation, hardcoded secrets, or malicious patterns could be identified without access to the code.
Updated: 2025-11-29GitHub→
0
0
Medium Cost
poetryprotocol icon

hermes-mcp

by poetryprotocol

Sec8

A lightweight MCP server providing file, shell, Git, HTTP, and system utilities for Claude Desktop, specifically fixing a common subprocess stdin inheritance bug.

Setup Requirements

  • ⚠️Currently Windows-optimized (uses PowerShell, Git for Windows paths), requiring adaptation for Unix/Mac.
  • ⚠️Requires manual configuration of `ALLOWED_PATHS` directly in `server.py` for file operation security.
  • ⚠️Requires manual configuration in Claude Desktop's `claude_desktop_config.json`.
Verified SafeView Analysis
File operations are restricted to `ALLOWED_PATHS` configured by the user, which is good. The `run_powershell` and `run_git` commands use `asyncio.create_subprocess_exec` with `stdin=asyncio.subprocess.DEVNULL` to prevent stdin inheritance issues, which is a critical security and stability fix. Arbitrary commands can be run via `run_powershell` and `run_git` within specified working directories, but inputs are passed as arguments, not via `shell=True`, reducing direct shell injection risk. The `fetch_url` and `http_request` tools allow unrestricted network access to any URL, which is explicitly noted as 'intentional for development' and 'local use only' in the README. This capability means the LLM can make arbitrary network requests from the host machine, which should be considered when assessing overall system security. No hardcoded secrets or 'eval' statements were found.
Updated: 2025-11-19GitHub→
0
0
Low Cost
ISubkowskI icon
Sec7

Serves as an intermediary Model Context Protocol (MCP) server with Server-Sent Events (SSE) transport for an Identity Claims API, proxying requests to a backend REST service.

Setup Requirements

  • ⚠️Requires a separate `ae-poc-identity-webapi` backend REST service to be running and accessible.
  • ⚠️The `Authentication__ExpectedToken` environment variable or configuration setting MUST be replaced with a secure, unique token for production or sensitive environments.
  • ⚠️Accessing the backend service from Docker requires careful `IdentityStorageApi__ApiUrl` configuration (e.g., `http://host.docker.internal:5023`).
Verified SafeView Analysis
The repository uses placeholder secret tokens (e.g., 'YOUR_SUPER_SECRET_AND_UNIQUE_TOKEN_REPLACE_ME', 'my-secret-token') in configuration files and templates. While the documentation correctly advises replacing these and provides mechanisms for secure configuration via environment variables, deploying with these default placeholders would pose a critical security risk. No 'eval' or obvious malicious patterns were found in the provided code snippets. Network exposure on ports 3033 (MCP) and 9007 (Health) is expected for server functionality.
Updated: 2025-12-17GitHub→
0
0
Low Cost
humanlayer icon

mcp-cli

by humanlayer

Sec5

Facilitates interaction with MCP servers via a command-line interface, primarily for automation and integration with subagents.

Setup Requirements

  • ⚠️Requires an existing MCP server to function.
Review RequiredView Analysis
Insufficient source code provided for a comprehensive security audit; only README.md was available. Therefore, no checks for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns could be performed.
Updated: 2025-11-26GitHub→
0
0
Low Cost
devtobecurious icon

workshop-mcp

by devtobecurious

Sec7

Demonstrates an OAuth 2.0 protected Model Context Protocol (MCP) server providing external tool access.

Setup Requirements

  • ⚠️.NET 9.0+ SDK required
  • ⚠️Requires a running `TestOAuthServer` from the same repository (typically at `https://localhost:7029`)
  • ⚠️Requires trusting the ASP.NET Core development certificate (`dotnet dev-certs https --trust`)
  • ⚠️Ensure ports 7071 (for `ProtectedMcpServer`) and 7029 (for `TestOAuthServer`) are available.
Verified SafeView Analysis
The server uses standard OAuth 2.0 with JWT bearer token authentication. The `ProtectedMcpClient` README notes the use of 'demo-client' and 'demo-secret' which are hardcoded for demonstration and must be changed for production. `AllowedHosts: "*"` is configured in `appsettings.json`, which is too permissive for production environments. No apparent direct code injection or 'eval' usage in provided snippets.
Updated: 2025-12-01GitHub→
0
0
Medium Cost
tf1997 icon

mcp-gateway

by tf1997

Sec2

The MCP Gateway acts as an API gateway for the Model Context Protocol (MCP) ecosystem, facilitating secure communication, tool invocation, and prompt management for various backend services.

Setup Requirements

  • ⚠️Requires Go (version 1.18 or higher recommended).
  • ⚠️Requires Redis for session and authentication storage if configured.
  • ⚠️Requires Kafka brokers if configured for logging or session storage.
Review RequiredView Analysis
The server exhibits critical security risks. The `StdioTransport` executes external commands (`cfg.Command` with `cfg.Args`) based on configuration. If this configuration can be modified by an authenticated but malicious actor via the exposed `/api/v1/configs` endpoint, it could lead to arbitrary Remote Code Execution (RCE) on the gateway server. Additionally, the `text/template` package is used for rendering `tool.Endpoint`, `tool.RequestBody`, and `tool.Headers`, which exposes the `os.Getenv` function through the `.Env` context. This creates a potential template injection vulnerability for information disclosure (e.g., environment variables containing secrets). The `installService` and `uninstallService` commands involve high-privilege operations (moving executables, `systemctl` commands) that, while not direct code execution, demand careful handling and trust in the executable source. While OAuth2 and JWT are integrated, their implementation and secure configuration are crucial and require thorough auditing.
Updated: 2026-01-19GitHub→
PreviousPage 654 of 760Next