Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
lin-jona icon

hn_flat

by lin-jona

Sec8

A tool to fetch and flatten Hacker News discussions into clean, readable markdown format, designed for use with AI assistants.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires `uv` for dependency management and execution
  • ⚠️Requires manual configuration in Claude Desktop's `claude_desktop_config.json` for AI assistant integration
Verified SafeView Analysis
The server fetches HTML from a user-provided URL using the `requests` library and parses it with `BeautifulSoup`. This is its intended functionality. While making network requests to arbitrary URLs inherently carries a risk of exposing the host to external content, there are no obvious code injection points, uses of `eval`, or hardcoded secrets in the provided source code. As with any web fetching tool, care should be taken regarding what URLs are processed if the server is run in a sensitive environment.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
congthien2003 icon

sabo-mcp

by congthien2003

Sec8

A Model Context Protocol (MCP) server for AI/LLMs to store conversational memories locally and optionally synchronize them with a Supabase cloud backend, and to pull AI agent workflows into a project directory.

Setup Requirements

  • ⚠️Requires Bun runtime (>= 1.2.x).
  • ⚠️Supabase account and configured MEMORIZE_MCP_SUPABASE_URL, MEMORIZE_MCP_SUPABASE_SERVICE_ROLE_KEY environment variables are required for cloud sync features.
  • ⚠️Database schema migration (SQL) must be manually run on the Supabase project for cloud sync features.
  • ⚠️Environment variables for project root, project slug, and workflow target directory are essential for full functionality.
Verified SafeView Analysis
The server uses environment variables (e.g., MEMORIZE_MCP_SUPABASE_SERVICE_ROLE_KEY) for sensitive Supabase credentials, which is good practice. Path traversal vulnerabilities are explicitly mitigated in the `pullWorkflows` logic using `path.basename` and `path.resolve` checks. However, a similar explicit input sanitization/validation for the `filename` parameter in `save_memorize` (handled by `saveLocalMemory`) is not as robust. While `path.join` offers some protection, an adversarial `filename` (e.g., containing `../`) could potentially write files outside the intended memory directory if not sanitized before being passed to `path.join`. No `eval` or code obfuscation was found.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
sjjsjj2554 icon

SitecoreMCP

by sjjsjj2554

Sec5

Integrate Sitecore CMS with AI assistants (such as Claude and GitHub Copilot) to manage content, track versions, navigate hierarchies, and perform CRUD operations using natural language commands or explicit tool calls via GraphQL.

Setup Requirements

  • ⚠️Requires a Sitecore instance (version 10.1+ recommended for full GraphQL features).
  • ⚠️Requires a valid Sitecore API key with appropriate permissions (read/write depending on operations).
  • ⚠️Default `rejectUnauthorized: false` for HTTPS agent makes it insecure for production over untrusted networks unless explicitly configured otherwise.
  • ⚠️Sitecore GraphQL schema can vary; some features (e.g., `templates()` query, advanced search filters, sites query returning data) may not function as expected on all instances, necessitating schema investigation and client-side filtering/sorting.
Review RequiredView Analysis
The server uses `rejectUnauthorized: false` for its HTTPS agent by default, which bypasses SSL certificate validation. While noted for local development with self-signed certificates, this setting is a critical security vulnerability in production environments as it allows for Man-in-the-Middle (MITM) attacks. All secrets (API key, username, password) are correctly loaded from environment variables. The natural language command parser maps to predefined internal methods, limiting direct remote code execution from chat commands, but relies on the AI model's safety and proper tool instruction. The project explicitly bans Sitecore PowerShell Extensions (SPE) due to high security risks, which is a strong positive.
Updated: 2026-01-19GitHub→
0
0
Low Cost
YunYouJun icon

starter-mcp-server

by YunYouJun

Sec9

This server acts as a proxy to the National Weather Service (NWS) API, providing weather alerts and forecasts based on state codes or geographical coordinates.

Setup Requirements

  • ⚠️Requires pnpm for dependency management and script execution.
  • ⚠️The MCP Server configuration (`mcp.json`) for clients requires an absolute path to the compiled `dist/index.mjs` file.
  • ⚠️Relies on the National Weather Service (NWS) API, which primarily covers US locations; requests for non-US locations will likely fail for the forecast tool.
Verified SafeView Analysis
The server makes outgoing HTTP requests to 'https://api.weather.gov', a legitimate public weather API. Input validation for tool arguments is implemented using 'zod', mitigating common injection risks. Communication with the MCP client is handled via StdioServerTransport, which communicates over standard I/O, reducing typical network attack surfaces. No hardcoded secrets or 'eval' statements were found. The User-Agent is generic and could be more descriptive for API politeness in a production environment, but this is not a security flaw.
Updated: 2025-12-13GitHub→
0
0
Low Cost
friedrichwilken icon
Sec8

An extendable Kubernetes Model Context Protocol (MCP) server that replicates original functionality and serves as a foundation for custom toolset extensions.

Setup Requirements

  • ⚠️Requires Go 1.25 or later.
  • ⚠️Requires access to a Kubernetes cluster and a configured kubectl with appropriate permissions.
  • ⚠️The `kubernetes-mcp-server` repository must be cloned as a sibling directory to this project for building, due to a Go module `replace` directive.
Verified SafeView Analysis
The server's primary function is to expose Kubernetes tools, which inherently involves sensitive operations on a cluster. However, the source code provided does not reveal obvious internal vulnerabilities such as 'eval' or direct arbitrary command execution outside of specific test scenarios. It offers configurable security measures for HTTP transport, including OAuth, token validation, and CA certificate support. Hardcoded secrets are not apparent. The comprehensive testing strategy also indicates a focus on reliability and compatibility, which can contribute to overall security.
Updated: 2025-11-26GitHub→
0
0
Low Cost
STetsing icon

sourcify-mcp

by STetsing

Sec8

This server acts as a Model Context Protocol (MCP) wrapper for the Sourcify API, enabling AI assistants to perform smart contract verification, lookup, and similarity searches.

Setup Requirements

  • ⚠️Requires Node.js 18.0.0 or higher to run.
  • ⚠️Relies on configuration via a `.env` file for Sourcify API base URL and timeout, though defaults are provided.
  • ⚠️Designed to be consumed by an MCP-compatible client (e.g., Claude Desktop) which manages the server process and communication (typically via stdio).
Verified SafeView Analysis
The server correctly uses environment variables for sensitive configurations like API URLs and timeouts, avoiding hardcoded secrets. Input validation for tool parameters is implemented using Zod, enhancing robustness against malformed requests. Comprehensive error handling wraps Sourcify API errors for clearer communication. However, the HTTP mode explicitly enables `CORS` for all origins (`*`), and while an `ALLOWED_HOSTS` environment variable is defined, it is not currently used to restrict this, which could be a concern in some deployment scenarios if the server is exposed publicly beyond a trusted MCP client network. For its intended use as a local or controlled AI agent tool, the risk is mitigated.
Updated: 2026-01-19GitHub→
0
0
Low Cost
evilGmonkey icon
Sec9

A production-ready Model Context Protocol (MCP) server for secure, multi-database SQL access to Supabase and PostgreSQL instances, built for AI coding assistants and automation workflows.

Setup Requirements

  • ⚠️Requires Docker and docker-compose (recommended) or Python 3.11+ for local development.
  • ⚠️Requires access to PostgreSQL/Supabase databases with valid credentials.
  • ⚠️Requires manual creation of dedicated database roles (e.g., 'mcp_readonly', 'mcp_readwrite') in your PostgreSQL/Supabase instance, although a setup script is provided.
  • ⚠️Requires configuring 'MCP_TOKEN' and at least one complete database connection (CONN_<name>_HOST, CONN_<name>_DBNAME, CONN_<name>_USER, CONN_<name>_PASSWORD) in a '.env' file.
Verified SafeView Analysis
The server demonstrates a strong security posture with a default read-only mode, bearer token authentication, and robust SQL injection prevention through parameterized queries. A well-defined database role strategy (mcp_readonly and mcp_readwrite) promotes the principle of least privilege. The 'is_readonly' function effectively blocks common write operations. Warnings are logged if the authentication token is not set, preventing silent unauthenticated access. While authentication via query parameters is supported, the documentation correctly recommends using HTTP headers for better security.
Updated: 2026-01-19GitHub→
0
0
Medium Cost

catalog-mcp

by BFRS-2

Sec7

A backend server for managing a catalog or as a component in a Master Control Program (MCP) or microservice architecture.

Setup Requirements

  • ⚠️Docker and Docker Compose are required for easy setup and deployment.
  • ⚠️Configuration is required via environment variables; refer to '.env.example' for necessary parameters (e.g., database connection strings, API keys, ports).
  • ⚠️A Node.js runtime and TypeScript compiler (tsc) are necessary for local development and building outside of a Docker environment.
Verified SafeView Analysis
Without access to source code, a deep security audit is not possible. The presence of Docker files suggests containerization, which aids in isolation. However, actual security depends on the implementation of dependencies, environment variable handling, and network configurations within the application. No 'eval' or obfuscation can be confirmed or denied without code review.
Updated: 2025-11-17GitHub→
0
0
Low Cost
marcusbaer icon

poc-mcp-server-wttr

by marcusbaer

Sec9

Provides a weather forecasting tool for Model Context Protocol (MCP) agents by integrating with the wttr.in API.

Setup Requirements

  • ⚠️Requires a Node.js runtime environment.
Verified SafeView Analysis
The server makes external 'fetch' requests to the public wttr.in API. The 'city' input parameter is properly URL-encoded using 'encodeURIComponent' to mitigate injection risks. No hardcoded secrets, 'eval', or other malicious patterns were found in the provided source code. The primary risk is reliance on an external, untrusted API for data, which is inherent in its functionality.
Updated: 2025-11-28GitHub→
0
0
High Cost
khglynn icon
Sec9

This server enables bulk Spotify operations including batch playlist creation, large-scale library management, and confidence-scored song matching for importing song lists.

Setup Requirements

  • ⚠️Requires Python 3.10+
  • ⚠️Requires a Spotify account and Spotify Developer credentials (Client ID, Client Secret)
  • ⚠️One-time interactive authentication process (opens browser to log in to Spotify)
  • ⚠️Requires manual configuration in Claude Code settings (`~/.claude/settings.local.json`)
Verified SafeView Analysis
The server follows good practices for handling sensitive information by using environment variables (`.env`) for Spotify API credentials and by explicitly gitignoring the `.env` file and the `.spotify_cache/` directory where authentication tokens are stored. It uses `spotipy` for Spotify API interaction, which handles OAuth securely. No 'eval' or obvious malicious patterns were found. Users should be aware that the server requests broad Spotify API scopes necessary for its functionality (e.g., modifying playlists, reading library data), so understanding these permissions is important.
Updated: 2025-12-22GitHub→
0
0
Medium Cost
thsmale icon
Sec8

An LLM agent server designed to provide access to the BibleGet I/O API for quoting Sacred Scriptures via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires 'uv' (ultrafast Python package installer and runner) to be installed.
  • ⚠️Requires 'OPENAI_API_KEY' environment variable to be set for the client (which interacts with this server) to function.
Verified SafeView Analysis
The server fetches its OpenAPI specification from an external GitHub URL (raw.githubusercontent.com) at startup. A compromise of this external source could lead to changes in the tools presented to the LLM. However, no 'eval' or direct obfuscation is found, and sensitive configurations are handled via environment variables.
Updated: 2025-11-19GitHub→
0
0
Low Cost
junimnjw icon

mcp-server-test

by junimnjw

Sec1

This project aims to simulate or test the Minecraft Protocol (MCP) for development and compatibility verification.

Review RequiredView Analysis
Source code was not provided for analysis. Therefore, a security audit could not be performed to check for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns. Running unverified code carries significant risks, including potential for malicious activity, data breaches, or system compromise. It is considered unsafe without a full code review.
Updated: 2025-11-22GitHub→
PreviousPage 676 of 760Next