Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse Directory Why Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:

SORT:

Vetted Servers(9120)

High Cost

n8n-automations

by Conversionblanketstitch672

Sec3

Automates sales and marketing lead generation by scraping LinkedIn job postings, identifying decision-makers through Apollo.io, enriching their profiles, and performing AI-driven psychographic research for tailored outreach messages, storing data in Notion.

Setup Requirements

⚠️Requires an n8n instance to host and run the workflow.
⚠️Requires API keys and specific API endpoint URLs for Apify (LinkedIn scraping) and Apollo.io (organization/people search and enrichment).
⚠️Requires an OpenAI API Key, and specifies a 'gpt-5' model which is not a publicly available model, likely meaning it won't run as written and will require changing to 'gpt-4' or 'gpt-3.5-turbo'.
⚠️Requires Notion API integration and pre-configured Notion databases (e.g., 'Lucid Lead Database', 'Lucid Group Sales Database', 'Lucid Jobs Database').

Review RequiredView Analysis

The workflow exposes a significant security risk by explicitly showing placeholders like '[add your apollo api key here]' and '[go to api -> api endpoints in apify]' directly within HTTP Request node configurations (body/headers/URL). This implies that sensitive API keys are intended to be hardcoded into the workflow's JSON definition rather than leveraging n8n's secure credential management system for these specific integrations. While Notion and OpenAI connections use n8n's credential storage, this inconsistency creates a vulnerability where API keys could be exposed in plain text if the workflow file is shared or stored insecurely.

Updated: 2026-01-19GitHub→

Low Cost

mcp-server

by rayyanhere1

Sec10

Provides a server environment potentially related to Minecraft modding or a game server based on the Minecraft Coder Pack.

Verified SafeView Analysis

No executable source code was provided for analysis. Only markdown files (README.md, mcp.md) were present, which inherently pose no security risk.

Updated: 2025-11-20GitHub→

Low Cost

remote-mcp-server-for-n8n-test

by Sergey-Bondarev

Sec7

Deploys an authentication-less Model Context Protocol (MCP) server on Cloudflare Workers, providing simple mathematical tools for AI clients like Cloudflare AI Playground or Claude Desktop.

Setup Requirements

⚠️The server is explicitly 'authless'. Deploying to a public URL without additional Cloudflare Worker authentication/authorization will make all tools publicly accessible.
⚠️Requires a Cloudflare Workers account for deployment.
⚠️Requires `npm` and `wrangler` CLI tools for local setup and deployment.

Verified SafeView Analysis

The server is explicitly designed to be 'authless' as stated in the README. This means that, by default, any deployed instance will be publicly accessible. While the implemented tools (calculator functions) are simple and do not inherently pose high-risk vulnerabilities like code injection, deploying without additional Cloudflare Worker authentication/authorization mechanisms could lead to unintended public access and potential resource abuse if not properly rate-limited or secured at the edge. Input validation for tools is handled via `zod`, which is a good practice.

Updated: 2025-12-06GitHub→

Low Cost

registry

by AlejandroVelezGuillermo

Sec8

Provides a centralized registry service for discovering, managing, and sharing Model Context Protocol (MCP) server metadata.

Setup Requirements

⚠️Requires Docker and Docker Compose for easy deployment of the server and its MongoDB database.
⚠️Publishing server metadata requires a GitHub OAuth App (Client ID and Secret) to be configured and exposed as environment variables (MCP_REGISTRY_GITHUB_CLIENT_ID, MCP_REGISTRY_GITHUB_CLIENT_SECRET) for server-side token validation.
⚠️The publisher tool (written in Go) also requires the MCP_REGISTRY_GITHUB_CLIENT_ID environment variable for GitHub authentication via device flow.

Verified SafeView Analysis

The service implements GitHub OAuth device flow for publishing server metadata, which correctly uses environment variables (MCP_REGISTRY_GITHUB_CLIENT_ID, MCP_REGISTRY_GITHUB_CLIENT_SECRET) for credentials. Token validation is performed against the GitHub API, checking application association and repository access (owner or organization member). No 'eval' or obvious obfuscation is present. The 'docker-compose.yml' exposes MongoDB on port 27017, which, while standard for development, would require securing (e.g., firewall, network segmentation) in a production environment to prevent unauthorized database access.

Updated: 2026-01-19GitHub→

High Cost

Arduino-MCP

by warusakudeveroper

Sec4

Automates ESP32 development workflows including compiling, uploading, serial monitoring, pin analysis, and SPIFFS file management via an MCP stdio server.

Setup Requirements

⚠️Requires `arduino-cli` executable to be installed and discoverable (can be auto-installed via `ensure_dependencies`).
⚠️Requires Python 3.x with `pyserial` installed (can be auto-setup in a virtual environment via `ensure_dependencies`).
⚠️Requires `mkspiffs` for SPIFFS upload functionality (needs manual installation, e.g., `brew install mkspiffs` on macOS).

Review RequiredView Analysis

The primary Node.js server uses input validation (Zod) and path sanitization (`resolveSafePath`) which mitigate common server-side risks. However, critical vulnerabilities exist within the associated `ArduinoMCP` ESP32 firmware library and its usage examples: 1. **ESP32 Firmware Path Traversal**: The `ArduinoMCP` library's SPIFFS API endpoints (`/api/spiffs/list`, `/api/spiffs/read`, `/api/spiffs/write`, `/api/spiffs/delete`) directly use user-provided `path` arguments in `SPIFFS.open`, `SPIFFS.remove`, and `file.print` operations without apparent sanitization against path traversal (e.g., `../`). This creates a critical vulnerability on the ESP32 device itself, allowing an attacker to read, write, or delete arbitrary files on the SPIFFS partition. 2. **Hardcoded Credentials in Example Sketch**: The `mercury_net_diag/settingManager.cpp` file, part of an example sketch, contains multiple hardcoded WiFi SSIDs and passwords (`mainSSID`, `mainPass`, `altSSID`, `altPass`, `devSSID`, `devPass`). Deploying this sketch or similar code with sensitive information hardcoded poses a significant security risk. 3. **Default Lax CORS Policy**: The Console Server's API defaults `MCP_CORS_ORIGIN` to `*`, making it accessible from any origin. This is a security concern if the console server is exposed to an untrusted network. 4. **Unrobust JSON Parsing (ESP32 Sketch)**: The `settingManager.cpp` uses a simplistic string-based JSON parser (`fromJson`) which is prone to errors with malformed JSON and could lead to unexpected behavior or data corruption on the device, though not directly to code execution.

Updated: 2025-12-13GitHub→

Low Cost

aurora-rs-mcp

by KotDath

Sec7

A minimal MCP server for Aurora OS, demonstrating Rust application development, cross-compilation, and integration with core Aurora OS interfaces (D-Bus, C libraries, C++, Qt).

Setup Requirements

⚠️Requires 'cross' for cross-compilation, which typically uses Docker/Podman.
⚠️Requires 'aurora-cli' for Aurora OS SDK management, sysroot synchronization, and RPM building.
⚠️Aurora OS SDK and corresponding sysroots must be installed and configured (e.g., via `aurora-cli services --sysroot`).
⚠️C++ Qt5 development libraries (Qt5Core, Qt5Network) are required in the sysroot for successful C++/Rust interop builds.
⚠️Deployment scripts assume SSH access to an Aurora OS device/emulator with specific SSH key paths configured.

Verified SafeView Analysis

The server application itself (aurora-rs-mcp) appears to have no obvious critical security vulnerabilities in its core logic, relying on established libraries like `dbus` and `rmcp`. However, the provided `run.sh` and `build.sh` deployment scripts contain significant security risks: they use `ssh -o StrictHostKeyChecking=no`, which disables host key verification, making SSH connections vulnerable to man-in-the-middle attacks. Additionally, paths to SSH private keys (`$HOME/.ssh/qtc_id` or `$VAR_SDK/vmshare/ssh/private_keys/sdk`) are hardcoded, which is generally not a best practice for security or portability. While these issues are in the deployment scripts and not the server's runtime code, they represent a risk in the project's operational setup.

Updated: 2025-12-01GitHub→

Low Cost

mcp-client-shell

by cafalchio

Sec9

Provides a command-line interface to interact with local FastMCP servers for tool listing and execution.

Setup Requirements

⚠️Requires Python 3.13+.
⚠️A FastMCP server must be running locally for the client to connect.
⚠️The provided run instructions use 'uv' for virtual environment management, which may need to be installed.

Verified SafeView Analysis

The client connects to a local FastMCP server (http://localhost:port/mcp) and passes user input directly as tool arguments. Security largely depends on the trustworthiness of the local FastMCP server and its exposed tools. No 'eval', hardcoded secrets, or obvious client-side vulnerabilities were found. As a client, it does not expose network services.

Updated: 2025-11-20GitHub→

Medium Cost

insights-mcp

by DEVtheOPS

Sec9

Provides persistent storage and full-text search for project-specific or global insights within Claude Code sessions.

Setup Requirements

⚠️Requires Node.js (version 18 or higher is specified in package.json).
⚠️The 'better-sqlite3' dependency is a native Node.js addon, which may require compilation during installation if a prebuilt binary is not available for your specific environment (OS/architecture/Node.js version).
⚠️The default database file path is '~/.insights-mcp/insights.db', which might need to be explicitly overridden using the '--db-path' flag or 'INSIGHTS_MCP_DB_PATH' environment variable for certain use cases or containerized environments.

Verified SafeView Analysis

The server appears robust against common web vulnerabilities. It uses 'better-sqlite3' with prepared statements, mitigating SQL injection risks. Input validation for all MCP tools is handled by 'zod' schemas, adding a strong layer of protection. No usage of 'eval' or obvious hardcoded secrets was found. The HTTP mode exposes a '/mcp' endpoint; secure deployment practices (e.g., proper firewalling, access control) are required if exposed beyond a local or trusted network.

Updated: 2025-11-25GitHub→

Medium Cost

senzing-mcp-server

by jbutcher21

Sec8

Provides entity resolution capabilities from the Senzing SDK to AI assistants via the Model Context Protocol (MCP).

Setup Requirements

⚠️Requires Senzing SDK version 4 installed and its environment variables (LD_LIBRARY_PATH, PYTHONPATH) configured.
⚠️Requires a configured and accessible Senzing database, specified via SENZING_ENGINE_CONFIGURATION_JSON.
⚠️Requires Python 3.10 or higher.

Verified SafeView Analysis

The code itself is well-structured and does not use dangerous functions like `eval`. All Senzing SDK calls are wrapped for asynchronous execution within a ThreadPoolExecutor. Security relies heavily on the underlying Senzing SDK and the secure configuration of its environment variables (`SENZING_ENGINE_CONFIGURATION_JSON`, `LD_LIBRARY_PATH`, `PYTHONPATH`). The HTTP/SSE transport can be configured to listen on all interfaces (`0.0.0.0`), which is a network risk if not properly secured via firewalls or proxies. By default, it uses localhost for HTTP/SSE or STDIO, which are safer.

Updated: 2026-01-06GitHub→

Low Cost

classhopper-mcp-server

by classhopperapp

Sec7

Deploy a remote Model Context Protocol (MCP) server on Cloudflare Workers, providing a set of calculator tools without authentication for easy integration with AI clients like Cloudflare AI Playground or Claude Desktop.

Setup Requirements

⚠️Requires a Cloudflare account for deployment and Cloudflare's 'wrangler' CLI for local development and deployment.
⚠️The server is intentionally deployed 'Without Auth' by design, meaning anyone with the URL can access the exposed tools.
⚠️Local development and setup require Node.js and npm.
⚠️Connecting local MCP clients (e.g., Claude Desktop) necessitates the use of the 'mcp-remote' proxy.

Verified SafeView Analysis

The server is explicitly designed to operate "Without Auth" as stated in the README, making it publicly accessible. While intentional for a demo/playground integration, this means the endpoint should only expose non-sensitive functionality. The provided tools (add, calculate) perform simple arithmetic and use Zod for robust input validation, mitigating common injection risks for these specific operations. No malicious patterns or 'eval' usage are observed in the source code. The primary security consideration is to avoid deploying this 'authless' setup for any sensitive production use cases.

Updated: 2025-12-05GitHub→

Medium Cost

icore_mcp_server

by RahulM0912

Sec5

Provides a backend API for a Minecraft-related application or service.

Setup Requirements

⚠️Requires a specific runtime environment (e.g., Node.js, Python, Java).
⚠️May require a database (e.g., MongoDB, PostgreSQL) and corresponding connection details.
⚠️Configuration via environment variables is expected for production use.

Review RequiredView Analysis

Source code was not provided for analysis. Therefore, a thorough security audit could not be performed. The score reflects an unknown risk level, as no specific vulnerabilities or dangerous patterns (like 'eval' or hardcoded secrets) could be identified or ruled out.

Updated: 2025-11-24GitHub→

Medium Cost

MCP-Server

by wildan14ar

Sec2

Manages remote SSH servers and manipulates Excel files without Microsoft Excel, serving as a modular Model Context Protocol (MCP) server for agents.

Setup Requirements

⚠️Requires SSH credentials (host, user, password/private key) for server module.
⚠️File path sandboxing (EXCEL_FILES_PATH) can be bypassed by providing absolute paths to Excel tools.
⚠️Python 3.10+ is required (as per `pyproject.toml`).

Review RequiredView Analysis

The server has critical security vulnerabilities. 1. Arbitrary SSH Command Execution: The `SSHSession.execute` function, used by both WebSocket (`execute` message with `skip_confirm=True` or confirmed) and REST API (`/server/mcp/execute`), allows direct execution of arbitrary commands on the remote SSH server. The command warning system is client-side and bypassable for REST API calls, and the `allowlist`/`disallowlist` are not enforced by default in the WebSocket handler's SSHSession instantiation. This means a compromised MCP token or malicious client can execute any command on the remote SSH server. 2. Arbitrary Local File System Access: The `get_excel_path` function, intended to sandbox Excel file operations within `EXCEL_FILES_PATH`, is vulnerable. If an absolute path is provided as `filepath` (e.g., `/etc/passwd`), the server will attempt to access that file directly on the machine running the MCP server, potentially allowing an attacker to read or write to arbitrary files outside the intended directory. This is a severe local file access vulnerability. 3. Information Disclosure: Combining these, a malicious actor could use the local file access vulnerability to read sensitive local files, or use arbitrary SSH commands to extract sensitive data from remote servers.

Updated: 2026-01-16GitHub→

PreviousPage 669 of 760Next