Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
Furkanyolcu icon

mcp-simulation

by Furkanyolcu

Sec9

Serves weather forecast and alert data from the National Weather Service API as tools for an MCP-compatible AI agent.

Setup Requirements

  • ⚠️Requires Python 3.10+ and the 'uv' package manager for dependency management and execution.
  • ⚠️An Anthropic API Key is required for the client application to function and should be configured in a .env file (e.g., ANTHROPIC_API_KEY=your_key_here).
Verified SafeView Analysis
The server code (`weather.py`) uses `httpx` for external API calls to the public NWS API. Error handling employs a broad `except Exception` for network requests, which is generally discouraged as it can mask specific issues, but it does not introduce direct security vulnerabilities like arbitrary code execution. No `eval`, `exec`, hardcoded secrets (other than the public NWS API base URL), or malicious patterns were found in the server code. The client code (`client.py`) uses `load_dotenv()` for API keys, which is good practice. The client also executes a specified server script (`uv run <script>`), posing a risk if the script path is sourced from an untrusted origin, but this is a client-side execution risk rather than a server vulnerability.
Updated: 2025-11-26GitHub→
0
0
Medium Cost
osins icon

dev-tool-mcp

by osins

Sec8

An MCP (Model Context Protocol) server providing advanced web crawling, browser automation, and content extraction capabilities, with support for multiple output formats and LLM integration.

Setup Requirements

  • ⚠️Requires Playwright browsers (e.g., Chromium) and their underlying system dependencies, which need to be installed separately via 'python -m playwright install chromium --with-deps'.
  • ⚠️LLM integration features (e.g., 'instruction' parameter in 'crawl_web_page') implicitly require an API key for the configured LLM provider (e.g., OPENAI_API_KEY for OpenAI models), incurring a paid service cost.
Verified SafeView Analysis
The server demonstrates strong input validation for URLs and file paths, includes Playwright security arguments (--no-sandbox, --disable-setuid-sandbox, etc.), and explicitly states file system security measures. No 'eval' or obvious hardcoded secrets were found. However, the use of `--disable-web-security` in Playwright's launch arguments, while potentially necessary for some advanced crawling scenarios, relaxes the same-origin policy and is a notable security consideration that could, under specific circumstances, pose a risk.
Updated: 2025-11-22GitHub→
0
0
Low Cost
marc-shade icon

image-gen-mcp

by marc-shade

Sec7

Provides a multi-provider image generation service with automatic fallback, specialized pixel art mode, and advanced latent space manipulation capabilities.

Setup Requirements

  • ⚠️Requires API keys for most image providers (Cloudflare, Hugging Face, Together AI, Replicate) if not using Pollinations.ai or exceeding free-tier limits.
  • ⚠️Requires a local or accessible Ollama instance running an LLM (e.g., 'llama3.2:3b') for intelligent pixel art prompt generation; otherwise, it falls back to rule-based prompts.
  • ⚠️Python 3.10+ is required.
Review RequiredView Analysis
The `DiffusionLatentHacker` module uses Python's `pickle` library to serialize and deserialize `LatentState` objects to and from disk cache. Deserializing pickled data from an untrusted source can lead to arbitrary code execution. While the cache directory is managed locally by the agent, a compromise of this directory by an external attacker could pose a significant risk. Additionally, the `dspy_prompter.py` module uses an `OLLAMA_HOST` environment variable, defaulting to localhost. If configured to point to an unauthenticated public Ollama endpoint, this could be abused, though this is a configuration rather than a code vulnerability.
Updated: 2025-12-31GitHub→
0
0
Medium Cost
Migueel0 icon

mcp-pdf-reader

by Migueel0

Sec5

Extracts text from PDF files, optionally performing OCR on embedded images, and returns the content.

Setup Requirements

  • ⚠️Requires Python >= 3.13 (recommended)
  • ⚠️Requires Tesseract OCR installed and configured (TESSERACT_CMD environment variable)
  • ⚠️Manual configuration of TESSERACT_CMD in a '.env' file is necessary for OCR functionality.
Review RequiredView Analysis
The 'read_pdf' tool accepts a 'file_path' string directly, which is then used to open the PDF. This design is highly susceptible to path traversal vulnerabilities if the MCP server is exposed to untrusted inputs, allowing an attacker to read arbitrary files from the server's file system. Additionally, processing large or maliciously crafted PDF files can lead to resource exhaustion (CPU, memory) due to `pypdf` parsing and `pytesseract` OCR operations. Broad exception handling in image processing (`except Exception: continue`) can also mask underlying issues. The reliance on an external Tesseract executable introduces a dependency on its security posture.
Updated: 2025-12-06GitHub→
0
0
Medium Cost
Cloudmeru icon
Sec9

Integrates MetaTrader 5 market data into Model Context Protocol, providing read-only access for advanced technical analysis, charting, and ML-driven forecasting.

Setup Requirements

  • ⚠️Requires Windows OS (MetaTrader5 library is Windows-only).
  • ⚠️MetaTrader 5 terminal must be installed and running.
  • ⚠️Algo trading must be enabled within the MT5 terminal settings.
  • ⚠️Requires Python 3.10+.
Verified SafeView Analysis
The server implements robust security measures, especially for the `execute_mt5` tool. It explicitly blocks calls to `mt5.initialize()`, `mt5.shutdown()`, `os.system()`, `subprocess`, `eval()`, `exec()`, and `__import__`. The `mt5` object in the execution namespace is a `SafeMT5` proxy exposing only whitelisted read-only MetaTrader 5 functions. Input validation for `mt5_query` and `mt5_analyze` prevents malformed requests and potential injection attempts. HTTP rate limiting is implemented, and command length limits are enforced. The overall design prioritizes read-only data access and prevents trading operations.
Updated: 2025-12-03GitHub→
0
0
Low Cost
aiibygg icon
Sec1

A server component for the AIibygg project, likely handling document processing or management within an AI context.

Review RequiredView Analysis
Cannot perform a security audit due to the complete lack of source code. Only a README file was provided. It is impossible to check for common vulnerabilities like 'eval', hardcoded secrets, network risks, or malicious patterns without any executable code to analyze.
Updated: 2025-11-19GitHub→
0
0
High Cost
nasuni-labs icon

nasuni-mcp-desktop

by nasuni-labs

Sec8

Provides an AI agent (like Claude Desktop) with controlled, local access to files on mounted Nasuni SMB shares for experimental data analysis.

Setup Requirements

  • ⚠️Requires 'uv' (Python package manager/installer) to be installed globally.
  • ⚠️Requires one or more Nasuni SMB shares to be mounted locally on the desktop.
  • ⚠️The 'FILE_SYSTEM_PATH' environment variable is mandatory and must be configured correctly, pointing to the mounted SMB share.
Verified SafeView Analysis
The server implements robust path traversal protection using `os.path.abspath` and `os.path.commonpath` to ensure file access is confined to the specified base directory. It enforces file size limits (`MAX_READ_FILE_SIZE`, `MAX_RETURN_FILE_SIZE`) and folder exclusions (`exclude_folders`) to mitigate resource exhaustion and unauthorized access to sensitive areas. However, processing arbitrary file contents (PDF, DOCX, images) using third-party libraries (`pypdf`, `python-docx`, `Pillow`, `hachoir`) inherently introduces a potential attack surface through malformed or malicious files, though the code does not appear to directly execute or mishandle extracted content. No direct `eval` or `exec` commands were found. A separate `process_traffic.py` script for repository analytics uses `GH_TOKEN` from environment variables, which is good practice for credentials. The project explicitly states it's for 'experimentation only - not intended for production use'.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
Marco-O94 icon

server-mcp

by Marco-O94

Sec7

AI-powered natural language interface for querying and managing data across multiple databases (MongoDB for paints, MySQL for food industry).

Setup Requirements

  • ⚠️Requires Docker Desktop with at least 8GB RAM and ~20GB disk space.
  • ⚠️Users must manually download an Ollama LLM model (e.g., `llama2` or `mistral`) after initial setup using `./docker-utils.sh pull-model <model-name>`.
  • ⚠️The `.env` file must be copied from `.env.example` and its default credentials should be updated for security.
Verified SafeView Analysis
The core MCP server application correctly utilizes environment variables for database credentials, which is good practice. However, the `docker-utils.sh` script, used for common operations, hardcodes default passwords ('mongopassword', 'mysqlrootpassword') when accessing the database shells (e.g., `mongosh -u admin -p mongopassword ...`). While the README advises users to update their `.env` file with strong credentials, this helper script does not reference those `.env` variables for shell access, creating a potential exposure if a user updates `.env` but forgets about the script's hardcoded defaults, or if the script itself is run in an insecure environment. Additionally, `curl` commands in `docker-utils.sh` hardcode `localhost` ports (8080, 3000) for health checks, which may not align with custom `MCP_SERVER_PORT` or `FRONTEND_PORT` values in `.env`.
Updated: 2025-11-30GitHub→
0
0
Low Cost
lamplite-dev icon
Sec9

This server acts as a communication bridge, enabling a Multi-Agent Communication Protocol (MCP) agent to send notifications to specific Slack channels.

Setup Requirements

  • ⚠️Requires SLACK_BOT_TOKEN environment variable configured with appropriate Slack app permissions.
  • ⚠️Requires Python 3 environment with 'fastmcp' and 'slack_sdk' libraries installed.
Verified SafeView Analysis
The code retrieves the Slack bot token from environment variables, which is a good practice. There are no 'eval' or obvious obfuscation techniques. Inputs for 'title' and 'message' in 'send_notification' are directly inserted into the Slack message text; while this isn't a server-side code execution risk, care should be taken if these inputs originate from untrusted sources to prevent potential malicious rendering or social engineering via Slack's markdown capabilities.
Updated: 2025-11-22GitHub→
0
0
Low Cost
jordantdavis icon

phone-call-mcp-server

by jordantdavis

Sec9

Enables AI assistants to programmatically make and manage phone calls through Twilio.

Setup Requirements

  • ⚠️Requires Go 1.25.3 or later
  • ⚠️Requires a Twilio account (paid service) with Account SID, Auth Token, and a Twilio phone number
  • ⚠️Requires environment variables (TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_FROM_NUMBER) to be set before startup. Missing variables will cause a fatal error.
Verified SafeView Analysis
The server uses environment variables for Twilio credentials, avoiding hardcoded secrets. It employs standard Go libraries and the official Twilio SDK. Communication with the MCP client is via stdio, which is secure for local integration. There is a TODO for phone number validation which could improve robustness but isn't a direct security vulnerability of the server itself.
Updated: 2025-11-25GitHub→
0
0
Low Cost
griffinwork40 icon
Sec9

Manages ElevenLabs Voice Agents, including their configuration, knowledge bases, webhook tools, and outbound calling capabilities, for integration with MCP clients like Claude.

Setup Requirements

  • ⚠️Requires Node.js 18 or higher.
  • ⚠️Requires a paid ElevenLabs API key.
  • ⚠️For outbound calling features, requires a Twilio account and imported Twilio phone numbers.
  • ⚠️For batch calling, ElevenLabs Zero Retention Mode (ZRM) must be disabled.
Verified SafeView Analysis
The server demonstrates strong security practices: extensive use of Zod schemas ensures strict input validation across all tool arguments, mitigating common injection and malformed request vulnerabilities. The `ELEVENLABS_API_KEY` is correctly sourced from environment variables, preventing hardcoding of secrets. By default, it uses stdio transport, which reduces network attack surface compared to a publicly exposed HTTP server. Error handling is centralized to provide user-friendly messages without leaking sensitive internal details. While some schemas use `z.record(z.any())` for flexible configuration objects, this data is passed to the trusted ElevenLabs API, which is expected to handle it securely.
Updated: 2026-01-02GitHub→
0
0
Low Cost
williamIIliu icon
Sec7

This server provides a wide range of image and video processing functionalities, including basic manipulations, color adjustments, filters, format conversions, metadata extraction, and document-to-image conversions, exposed as an MCP server.

Setup Requirements

  • ⚠️Requires Python >=3.10.
  • ⚠️The 'word_to_images' tool explicitly requires LibreOffice (soffice) to be installed on the system.
  • ⚠️The 'pdf_to_images' tool (via `pdf2image` library used in `word_to_images` or `fitz` in `convert_pdf_to_images`) may implicitly require Poppler PDF utilities (e.g., `pdftoppm`) on some systems, though PyMuPDF (`fitz`) has its own engine.
Verified SafeView Analysis
The server uses `subprocess.run` to invoke `soffice` (LibreOffice) for Word document conversions (`word_to_images`). While arguments are passed as a list, mitigating direct shell injection, relying on external binaries and passing user-controlled file paths introduces potential risks if the external tools have vulnerabilities or if malicious file paths are provided. The server also relies on `pptxtoimages` and `pdf2image` (which typically uses Poppler) for file conversions, further expanding the attack surface through external dependencies. However, there are no obvious hardcoded secrets or 'eval' calls. Input validation for image coordinates is present. The primary risk lies with the robustness of external document processing tools when given arbitrary user input.
Updated: 2026-01-11GitHub→
PreviousPage 691 of 760Next