Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
vinay-ram1999 icon

databricks-mcp-server

by vinay-ram1999

Sec9

Exposes Databricks Unity Catalog metadata and read-only SQL query capabilities to LLMs and agents in an optimized, structured format for automated data discovery and SQL generation.

Setup Requirements

  • ⚠️Requires Python 3.13+ for installation based on pyproject.toml.
  • ⚠️Mandates an active Databricks Workspace with Unity Catalog enabled and a configured SQL Warehouse.
  • ⚠️Requires Databricks Personal Access Token (PAT) or OAuth client-credentials, along with specific permissions (USE CATALOG, USE SCHEMA, SELECT on tables, CAN_USE on SQL Warehouse) configured via environment variables.
Verified SafeView Analysis
The server explicitly uses environment variables for all sensitive credentials (Databricks host, tokens, client secrets, warehouse IDs), avoiding hardcoded secrets. The 'execute_spark_sql_query' tool is intentionally restricted to read-only SELECT queries, which is a critical security control when exposing SQL execution to AI agents. No usage of `eval`, `exec`, or obfuscation was found. The project promotes the principle of least privilege in its documentation.
Updated: 2025-11-25GitHub→
0
0
Medium Cost
takanoriyanagitani icon

go-mcp-js-eval-wasi

by takanoriyanagitani

Sec7

Provides a Model Context Protocol (MCP) server for securely evaluating JavaScript code within a WASM sandbox.

Setup Requirements

  • ⚠️Requires a pre-built WebAssembly (WASM) JavaScript engine binary (e.g., `js-eval-boa.wasm`) to be present on the system. This binary typically needs to be compiled separately (e.g., using `cargo install --target wasm32-wasip1`).
  • ⚠️Requires the Go toolchain to build the server executable.
  • ⚠️Depends on the Model Context Protocol (MCP) Go SDK for its API functionality.
Review RequiredView Analysis
The server's core function is to evaluate arbitrary JavaScript code, which is inherently a high-risk operation. However, it implements significant security measures: * Execution occurs within a WebAssembly (WASM) sandbox using `wazero`. * WASM memory limits are enforced (`WithMemoryLimitPages`). * Execution timeouts are applied (`context.WithTimeout`). * Standard HTTP server hardening (body size limit, read/write timeouts, max header bytes) is used. * Input/output is explicitly handled for JSON. The primary remaining risk lies in potential vulnerabilities within the `wazero` runtime or WASI implementation, or in the supplied WASM JavaScript engine itself (e.g., `js-eval-boa.wasm`). The `example.sh` explicitly warns about supply chain attacks for the WASM bytecode, highlighting this dependency as a critical trust boundary.
Updated: 2025-12-10GitHub→
0
0
Low Cost
YasKam24 icon

MCP

by YasKam24

Sec1

Provides client-server communication capabilities.

Review RequiredView Analysis
Security audit is impossible as only the README.md file was provided; no actual source code was available for analysis. Cannot confirm absence of 'eval', hardcoded secrets, or malicious patterns, making it unsafe to assume security.
Updated: 2025-11-19GitHub→
0
0
Low Cost
techwithmi19 icon

test_remote_mcp_server

by techwithmi19

Sec9

This server provides an API for tracking personal expenses, allowing users to add, list, and summarize financial transactions.

Setup Requirements

  • ⚠️Expense data is stored in a temporary directory (`tempfile.gettempdir()`) and may not persist across system restarts or temporary file cleanup operations.
Verified SafeView Analysis
The server uses parameterized SQL queries, which effectively prevents SQL injection vulnerabilities. It binds to `0.0.0.0`, meaning it's accessible from all network interfaces; proper network isolation should be ensured if deployed in a production environment beyond localhost. No 'eval' or other highly dangerous patterns were observed.
Updated: 2025-12-02GitHub→
0
0
Low Cost
Toyoclara233 icon

registry

by Toyoclara233

Sec9

The MCP Registry is a community-driven metadata repository for Model Context Protocol (MCP) servers, facilitating their discovery, publishing, and management.

Setup Requirements

  • ⚠️Local development requires Pulumi CLI and a local Kubernetes cluster (e.g., Minikube) configured via kubeconfig.
  • ⚠️Production deployment on GCP is complex, requiring a GCP account, specific IAM roles for a service account, and a GCS bucket for Pulumi state, along with a Pulumi passphrase file.
  • ⚠️Publisher CLI authentication for publishing servers requires GitHub OAuth/OIDC, or DNS/HTTP domain verification with Ed25519 private keys.
Verified SafeView Analysis
The project demonstrates strong security practices for production deployments, utilizing Pulumi secrets for sensitive configurations (GitHub client secrets, JWT private keys) and OIDC for admin authentication. Local development uses hardcoded, non-sensitive defaults, which is acceptable. The `server.json` schema explicitly warns about command injection risks for clients, indicating proactive security awareness. Shell scripts for administrative tasks correctly handle environment variables for tokens, preventing hardcoding. Overall, the architecture minimizes direct exposure of secrets in code and relies on established secure deployment and authentication mechanisms.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
gchavez83 icon

inegi-mcp-server

by gchavez83

Sec9

Provides an MCP server to access official INEGI (Mexico's National Institute of Statistics and Geography) APIs, enabling Claude Desktop to query statistical, economic, demographic, and establishment data from Mexico.

Setup Requirements

  • ⚠️Requires INEGI API Tokens (registration required)
  • ⚠️Python 3.10+ required
  • ⚠️Requires .env file configuration
Verified SafeView Analysis
The server uses environment variables for API tokens, which is a good security practice. It leverages standard HTTP client libraries (httpx) and includes basic input validation and error handling. No 'eval' or direct shell command execution is observed. The client for searching the full catalog mimics browser behavior to handle session cookies, which is a specific implementation detail, but does not introduce obvious new security vulnerabilities within the server itself.
Updated: 2025-12-05GitHub→
0
0
Low Cost
eagleisbatman icon

tips-mcp-server

by eagleisbatman

Sec8

Serve AI-generated farming tips, categorized by region and context (weather, season), with bilingual support and interaction tracking.

Setup Requirements

  • ⚠️Requires Node.js 18+ runtime.
  • ⚠️Requires a PostgreSQL database with specific 'tip_categories', 'tips', and 'tip_interactions' tables, whose schema is defined in a migration file from a related project (`nong-tri`). Manual setup or prior deployment of that project's migrations is necessary.
  • ⚠️Requires an external Weather API (WEATHER_API_URL) to provide contextual weather data for tips.
Verified SafeView Analysis
The server uses parameterized queries, which effectively prevents SQL injection. Environment variables are used for sensitive configurations (DATABASE_URL), avoiding hardcoded secrets. CORS is configurable. The direct passing of user-provided 'location' to an external weather API could be a minor concern if the external API itself is vulnerable to injection, but the server's code doesn't directly introduce this vulnerability. The `rejectUnauthorized: false` for SSL is correctly conditionalized for non-production environments.
Updated: 2025-12-01GitHub→
0
0
Low Cost
selvasv icon

adk-docs

by selvasv

Sec9

Python Flask microservice template for Kubernetes deployments with multi-profile traffic management (stable, canary, preview) and integrated Azure Data Factory pipelines for data movement.

Setup Requirements

  • ⚠️Requires Docker for building and packaging the microservice, although the Dockerfile content is not provided.
  • ⚠️Full deployment and traffic management (stable, canary, preview profiles) necessitate a Kubernetes cluster with Ambassador installed.
  • ⚠️Azure Data Factory setup, including Azure Blob Storage and Azure Key Vault, is required for the data pipeline functionalities.
Verified SafeView Analysis
The Flask application (`app.py`) is very simple, containing a basic 'Hello World' endpoint with no evident security vulnerabilities, 'eval' usage, or obfuscation. The Azure Data Factory configurations (`linkedService` files) demonstrate a secure practice by using Azure Key Vault to manage sensitive connection strings, preventing hardcoded secrets in the repository. The application binds to '0.0.0.0', which is standard for containerized services.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
Sec9

Provides a Zed editor extension for generating slides, managing jobs, and searching themes via the 2slides API.

Setup Requirements

  • ⚠️Requires a 2slides API Key (potentially a paid service).
  • ⚠️Requires the Zed editor for integration and usage.
  • ⚠️Rust toolchain is required to build the server from source.
Verified SafeView Analysis
The server acts as a wrapper for the 2slides API, requiring an API key. API key management is handled securely within Zed settings. No immediate security vulnerabilities were detected based on the provided information, but reliance on external APIs always carries inherent risks.
Updated: 2025-11-18GitHub→
0
0
Medium Cost

canvas-ed-mcp

by r1ckyIn

Sec6

A backend server for an educational platform, likely integrating Anthropic's Claude AI for conversational or content generation tasks.

Setup Requirements

  • ⚠️Requires Claude API Key (Paid) for AI functionalities.
  • ⚠️Requires Python 3.x and dependencies listed in 'requirements.txt'.
Review RequiredView Analysis
Code content for 'canvas_ed_mcp.py' not available for detailed analysis. Potential network risks associated with external API calls (e.g., to Claude) and typical server vulnerabilities if exposed to a network. No 'eval' or obfuscation detected from file names alone.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
azharlabs icon
Sec9

A FastAPI and MCP server designed to expose Retrieval-Augmented Generation (RAG) knowledge bases for chat interactions and document ingestion.

Setup Requirements

  • ⚠️Requires an active API key for a compatible Large Language Model (LLM) service (e.g., Gemini, OpenAI), which is typically a paid service. The `MODEL_API_KEY` environment variable is mandatory.
  • ⚠️The default Qdrant vector database is configured for in-memory storage, meaning all indexed document data will be lost upon server restart unless `QDRANT_URL` (for remote) or `QDRANT_PATH` (for local persistent) is explicitly configured.
  • ⚠️The `extractanything` library (which uses MarkItDown) for document processing might require additional system-level dependencies (e.g., LibreOffice) for effective parsing of various file formats (e.g., .docx, .pptx) beyond standard Python packages. These are not specified in the `requirements.txt`.
Verified SafeView Analysis
The server demonstrates good security practices: sensitive configurations like API keys and database URLs are loaded from environment variables or a configuration file, not hardcoded. User passwords are hashed using `hashlib.sha256`, and API keys are generated securely with `secrets.token_urlsafe`. File uploads are size-limited and use temporary UUIDs to prevent path traversal. Frontend markdown rendering is sanitized using `DOMPurify` to mitigate XSS risks. Authentication and authorization checks are implemented for API endpoints. The primary remaining risk would involve potential vulnerabilities within third-party libraries (e.g., `extractanything` or `MarkItDown`) for document parsing, but the direct application code is robust.
Updated: 2026-01-03GitHub→
0
0
Low Cost
rohitvish07 icon
Sec9

Manages and tracks personal expenses by providing an API to add, list, and summarize financial transactions.

Setup Requirements

  • ⚠️Requires `DB_URL` environment variable pointing to a PostgreSQL database (e.g., Neon).
  • ⚠️Requires Python 3.12 or higher.
Verified SafeView Analysis
The server uses parameterized queries with `asyncpg` to prevent SQL injection vulnerabilities. The database connection URL (`DB_URL`) is correctly loaded from environment variables, avoiding hardcoded secrets. Basic input validation is present for numeric amounts. The server listens on all network interfaces (`0.0.0.0`), which is typical for containerized deployments but should be secured with a firewall in production environments.
Updated: 2025-12-07GitHub→
PreviousPage 689 of 760Next