Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
NotMrAdan icon
Sec1

Automates the process of searching for job listings on LinkedIn and extracting relevant job data.

Setup Requirements

  • ⚠️The primary setup instruction to run 'python' directly on a remote .zip file URL is highly problematic and likely incorrect syntax, indicating a dubious installation method.
  • ⚠️Requires manual installation of Python 3.6+ and the Selenium library.
  • ⚠️Users must provide their LinkedIn login credentials directly to the application, which is a significant security risk given the suspicious installation instructions.
Review RequiredView Analysis
The installation instructions are highly suspicious: users are directed to download a .zip file from a raw GitHub link and then attempt to run it directly with 'python <zip_url>'. This command is syntactically incorrect for direct execution of a remote zip file as a Python script, which is a significant red flag. Furthermore, all 'resource' links provided in the README (Python, Selenium documentation, LinkedIn guide) also point to this same .zip file URL. This highly unusual pattern strongly suggests a potential attempt to mislead users into downloading and executing untrusted code. The application also requires users to enter their LinkedIn login credentials, posing a severe risk of credential theft if the downloaded application is malicious.
Updated: 2026-01-19GitHub→
0
0
Low Cost
darkbard81 icon
Sec7

Facilitates WebSocket communication between Foundry VTT and an external Message Control Protocol (MCP) relay server.

Setup Requirements

  • ⚠️Requires Foundry VTT v13.
  • ⚠️Requires a separate, browser-accessible WebSocket relay server, which is not provided by this module.
  • ⚠️Only the 'primary GM' (the active GM with the lowest user ID) will establish and maintain the WebSocket connection.
Verified SafeView Analysis
The module's core function is to establish a WebSocket connection to a user-specified relay server and expose Foundry VTT functionalities (like chat, journal, token data, and operations) over this connection. The API key for authentication is sent as a query parameter in the WebSocket URL, which can be logged by intermediaries or exposed if not using WSS (secure WebSocket). The `journal-page` handler allows powerful operations (create, update, delete, read) on journal entries via WebSocket messages. While internal Foundry IDs are mapped to obfuscated IDs for network transmission (using `encryptUuid`), this is not a security measure against unauthorized access if the API key is compromised. Therefore, the overall security critically depends on the trustworthiness and proper securing of the external WebSocket relay server and the API key. The presence of 'Item Pile' related strings in `en.json` (despite the module's description as an MCP bridge) is a minor inconsistency that could suggest sloppy development, but does not indicate a direct code vulnerability.
Updated: 2026-01-05GitHub→
0
0
Medium Cost
terraform-ibm-modules icon

tim-mcp

by terraform-ibm-modules

Sec8

An MCP server that provides AI models with structured access to the Terraform IBM Modules ecosystem, facilitating intelligent discovery and utilization of IBM Cloud infrastructure for AI-assisted infrastructure code generation.

Setup Requirements

  • ⚠️Requires `uv` package manager (Python 3.11+) to be installed locally.
  • ⚠️A GitHub Personal Access Token is highly recommended for frequent use to avoid GitHub API rate limits (60 requests/hour without, 5000 with).
  • ⚠️For local development, manual configuration of `cwd` and `env` variables in MCP client settings (e.g., Claude Desktop, VS Code) is necessary.
Verified SafeView Analysis
The server performs network requests to external APIs (Terraform Registry, GitHub) and downloads a white paper from IBM Cloud documentation. While these sources are specified and generally trustworthy, relying on external services introduces a supply chain risk. No hardcoded secrets were found; sensitive tokens like `GITHUB_TOKEN` are explicitly handled via environment variables. The HTTP transport mode, if used in production, requires a reverse proxy with HTTPS (e.g., Nginx), which is documented. No 'eval' or obfuscation patterns were identified.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
HarshadPanchal12 icon

MCP_server_assignment

by HarshadPanchal12

Sec8

A server that provides real-time and historical cryptocurrency market data and analytics from multiple exchanges, with caching and indicators.

Setup Requirements

  • ⚠️Relies on external cryptocurrency exchange APIs (e.g., Binance, Coinbase), which are subject to their respective rate limits and availability.
  • ⚠️The `config.yaml` file defines server, cache, exchange, logging, and data parameters, but the provided `main.py` does not explicitly show loading and applying these configurations to the initialized services. This might require manual integration or an assumed mechanism within the Docker setup.
  • ⚠️While not explicitly required by the current public data functions, API keys might be necessary for higher rate limits or authenticated features on certain exchanges in a broader use case.
Verified SafeView Analysis
The server leverages the CCXT library for cryptocurrency exchange integration, a widely used and reputable choice. Input validation for symbols, timeframes, and data limits is well-implemented to prevent common input-related vulnerabilities. No direct use of dangerous functions (e.g., `eval`, `exec`) or hardcoded sensitive credentials is evident in the provided source. Exchange interactions are for public market data. A full production deployment would require careful consideration of server exposure and authentication/authorization mechanisms.
Updated: 2025-12-10GitHub→
0
0
Medium Cost
jonasneves icon

canvas-mcp-server

by jonasneves

Sec8

This server acts as a local bridge, enabling Claude Desktop to access a user's Canvas LMS data (courses, assignments, grades, events) through a Chrome extension via the Model Context Protocol (MCP) for AI assistance.

Setup Requirements

  • ⚠️Requires Node.js 14 or higher (16+ recommended).
  • ⚠️Requires manual configuration of the Chrome extension ID in the native messaging manifest file after installation.
  • ⚠️Requires an existing installation and configuration of the CanvasFlow Chrome extension with the correct Canvas URL and an active Canvas LMS login.
  • ⚠️Requires manual addition of a specific entry to Claude Desktop's `mcp.json` configuration file with the correct path to the `host.js` script.
Verified SafeView Analysis
The server operates locally, binding only to `localhost` for HTTP communication with the Chrome extension, and uses `stdio` for communication with Claude Desktop. It does not store Canvas credentials, relying on the browser's active Canvas session. CORS is broadly enabled (`Access-Control-Allow-Origin: *`) for the local HTTP server, which is acceptable given its `localhost` binding but could be tightened if the extension's origin were known and fixed. `JSON.parse` is used on `stdin` input; while this is standard for native messaging, robust error handling is present. No hardcoded secrets, obfuscation, or obvious malicious patterns were detected.
Updated: 2026-01-18GitHub→
0
0
Low Cost
fazilataqveem19 icon

MCP-Server

by fazilataqveem19

Sec8

This project implements a basic server for a Minecraft-like protocol, handling client connections, packet processing, and fundamental game state.

Setup Requirements

  • ⚠️Requires Python 3
Verified SafeView Analysis
The code does not use dangerous functions like 'eval' or 'exec' and shows no signs of obfuscation. No hardcoded secrets (API keys, passwords) were found. The server binds to 0.0.0.0 (all interfaces) by default, which is standard for a server but requires appropriate firewall configuration in production environments. The packet parsing logic (VarInt, struct) appears to handle variable lengths correctly, mitigating common buffer overflow risks in Python, but the '_process_packet' method is a placeholder and would be a critical area for future security review upon implementation.
Updated: 2025-12-02GitHub→
0
0
Medium Cost
Raghav0005 icon
Sec9

Provides analytical insights and search capabilities for NYC taxi trip data from January 2025.

Setup Requirements

  • ⚠️Requires significant local data files (parquet, csv) to be present in a 'data' directory (3.5M+ trips).
  • ⚠️Requires pre-installation of Python libraries: pandas, pyarrow, fastmcp, whoosh.
  • ⚠️Initial setup involves generating a Whoosh search index (548k documents) which can take time and disk space.
Verified SafeView Analysis
The server primarily uses Pandas for data analysis and Whoosh for full-text search, with data loaded from hardcoded local paths. There are no explicit uses of `eval`, `exec`, or `subprocess.run` with unvalidated user input. It does not appear to open public network ports directly, relying on the FastMCP framework for local inter-process communication with the Gemini CLI. Data loading from parquet/csv is generally safe when file paths are controlled, as they are here. No hardcoded secrets were found.
Updated: 2025-12-15GitHub→
0
0
High Cost
kanishka-namdeo icon

yfnhanced-mcp

by kanishka-namdeo

Sec9

Provides a resilient and validated financial data infrastructure for AI assistants, transforming unreliable APIs into dependable sources for investment platforms and trading systems.

Setup Requirements

  • ⚠️Significant financial statement tools (`get_balance_sheet`, `get_income_statement`, `get_cash_flow_statement`) are currently broken due to deprecation of underlying Yahoo Finance APIs and validation issues with the new `fundamentalsTimeSeries` API.
  • ⚠️Crypto (`get_crypto_quote`) and Forex (`get_forex_quote`) tools return placeholder/mock data, not real-time values, requiring custom implementation for live data.
  • ⚠️Other tools like `get_news` and `get_options` are reported to be broken due to API integration issues ('invalid options', 'set-cookie header missing'), requiring fixes to the Yahoo Finance library interaction.
Verified SafeView Analysis
The server implements robust security measures including input validation, output sanitization, and configuration validation. It actively checks for dangerous patterns, SQL injection, and command injection. Network security is enforced to prevent invalid protocols or access to private IPs. Hardcoded secrets are avoided by design, relying on environment variables or configuration files. The primary deduction is due to the inherent reliance on a frequently changing external API (Yahoo Finance), which the provided test report indicates has broken several core functionalities, potentially introducing new attack vectors or data integrity risks if not constantly monitored and adapted.
Updated: 2026-01-19GitHub→
0
0
Low Cost
ganeshmalkar icon

MCP-Control-Lite

by ganeshmalkar

Sec3

Manages Model Context Protocol (MCP) servers for AI coding assistants on macOS, offering configuration, synchronization, and monitoring capabilities through a native desktop GUI and CLI.

Setup Requirements

  • ⚠️Requires macOS 10.15 (Catalina) or higher.
  • ⚠️Requires Node.js and npm for installing and managing MCP server packages from NPM.
  • ⚠️Relies on system binaries like 'curl' and 'mdfind' being available and functioning correctly.
Review RequiredView Analysis
The application's core functionality involves executing arbitrary shell commands and installing external (potentially untrusted) NPM packages directly via `npm install` and `npx`. This presents a significant security risk, as a malicious package or a compromised NPM registry could lead to arbitrary code execution on the user's system. The `search_npm_packages` function constructs shell commands that source user-specific shell configuration files (`.zshrc`, `.bashrc`, etc.), which could be exploited if those files are compromised. Extensive local file system read/write operations on application configuration files (e.g., in `~/Library/Application Support` and `~/.config`) could be a local privilege escalation vector if not handled with extreme care, especially if the app runs with elevated permissions. While `PathUtils::is_safe_path` exists, its usage might not cover all potential path traversal attack surfaces. Network calls to external registries (NPM, GitHub, PulseMCP) are also made, introducing reliance on the security of those third-party services. The application does not appear to hardcode sensitive secrets in the provided code.
Updated: 2026-01-19GitHub→
0
0
High Cost
kyisoe101 icon

Varon-AI

by kyisoe101

Sec8

Varon AI is an intelligent multi-agent system designed to automate everyday tasks, including web search, messaging, coding, design, and data scraping, by coordinating a team of specialized AI agents.

Setup Requirements

  • ⚠️Requires Node.js 18+.
  • ⚠️Requires a MongoDB instance and `MONGO_URL` environment variable.
  • ⚠️Requires a Google Cloud Project with OAuth client ID and secret (`GOOGLE_CLIENT_ID`, `GOOGLE_CLIENT_SECRET`).
  • ⚠️Requires an SMTP service (e.g., Brevo) and credentials (`SMTP_USER`, `SMTP_PASSWORD`) for email verification.
  • ⚠️Requires a Google Gemini API Key, likely two separate keys (`VARON_AI_API_KEY`, `VARON_AI_TEAM_API_KEY`) for main AI and specialist agents.
  • ⚠️Requires a SerpAPI Key for web search capabilities.
  • ⚠️Puppeteer (used for scraping) may require additional OS-specific dependencies (e.g., browser binaries, `libgconf-2-4` on Linux).
Verified SafeView Analysis
The server demonstrates good security practices including externalized environment variables for sensitive data (API keys, database credentials, JWT secret), robust cookie handling (`httpOnly`, `secure`, `sameSite`), and JWT-based authentication. CORS is properly configured to restrict origins. Input validation is present for user registration and login. The use of `puppeteer-extra` with `StealthPlugin` for web scraping, while powerful and intended for legitimate use, introduces a dependency that can bypass anti-bot measures, requiring trust in how the AI (and thus the user) is directed to use it. No 'eval' or obvious malicious code patterns were found. The extensive `systemInstruction` for the AI aims to embed safety and ethical guidelines.
Updated: 2026-01-19GitHub→
0
0
Medium Cost

TTS-MacOS

by hbuddenberg

Sec5

A server component for integrating Text-to-Speech capabilities on macOS, potentially leveraging external AI services within a Multi-Cloud Platform (MCP) or Zed ecosystem.

Setup Requirements

  • ⚠️Requires Anthropic Claude API Key (Paid service) for LLM interactions.
  • ⚠️Designed specifically for macOS operating system.
  • ⚠️Integration with/dependency on the 'Zed' ecosystem (e.g., editor, platform, or specific tools) is implied.
Review RequiredView Analysis
Source code not provided, preventing a comprehensive audit. As a server component potentially interacting with external AI services (Claude) and the operating system (macOS TTS), it inherently carries risks related to data handling, API key management, and potential system resource access. Assumed no obvious obfuscation or critical vulnerabilities without code review.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
deeprunnerai icon

odoo-mcp-server

by deeprunnerai

Sec8

An MCP server enabling AI assistants like Claude to interact with Odoo ERP for reading and writing data across various modules.

Setup Requirements

  • ⚠️Requires Node.js (version 18+) installed locally on the user's machine.
  • ⚠️Requires manual configuration in Claude Code's settings (~/.claude.json) including the absolute path to the server's executable.
  • ⚠️Odoo authentication credentials (URL, DB, username, password) must be securely provided as environment variables.
Verified SafeView Analysis
The server correctly retrieves Odoo credentials from environment variables, preventing hardcoded secrets. It utilizes HTTPS for Odoo communication if configured, enhancing transport security. The `odoo_execute` tool, while powerful, directly exposes Odoo's method execution capabilities, which requires careful handling by the AI agent to prevent unintended operations. The overall design is sound for its intended purpose, but relies on secure environment configuration and responsible AI agent behavior.
Updated: 2025-12-09GitHub→
PreviousPage 670 of 760Next