Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
DavidMalkhasyan icon

mcp-todo-demo

by DavidMalkhasyan

Sec9

A minimal WebSocket-based server and client demonstrating CRUD operations for a todo list using the Model Context Protocol (MCP).

Verified SafeView Analysis
The server correctly uses a whitelist (`tools` object) to dispatch tool calls, preventing arbitrary code execution. It handles JSON parsing and stringifying, which are standard and generally safe. There are no obvious hardcoded secrets or direct 'eval' usage. Data is stored in-memory, which is not a security risk but means data persistence is not handled. Text input for todos is stored directly, but the React frontend automatically escapes content, mitigating client-side XSS if it were used in a UI. For a demo, the security practices are robust.
Updated: 2025-12-01GitHub→
0
0
Low Cost
rinaldofesta icon

mcp-andromeda

by rinaldofesta

Sec3

Generates Model Context Protocol (MCP) servers from YAML configurations, enabling simplified AI tool integration for developers.

Setup Requirements

  • ⚠️Requires Python 3.11 or higher.
  • ⚠️The 'web-scraper' template's generated code requires 'beautifulsoup4', which is not listed as a core dependency for the builder itself and must be installed separately for the generated server to function.
  • ⚠️Database tools (especially from the 'database' template) generate SQL-injection vulnerable code and require a configured database connection string (e.g., DATABASE_URL).
Review RequiredView Analysis
The 'python_inline' tool type allows arbitrary Python code execution directly from the YAML configuration, posing a high risk if configuration sources are untrusted. Crucially, the built-in 'database' template generates code highly vulnerable to SQL injection due to direct string concatenation in SQL queries without proper parameterization. HTTP tool configurations also perform direct environment variable substitution into URLs and headers, which could potentially introduce risks if environment variables are not sanitized. These issues mean the builder can generate inherently insecure server code.
Updated: 2025-11-25GitHub→
0
0
Low Cost
Ujjwal-Pandit icon

weather-mcp-server

by Ujjwal-Pandit

Sec7

Implements Model Context Protocol (MCP) servers for providing weather information, mathematical calculations, and demonstrates model distillation for AI agents.

Setup Requirements

  • ⚠️Requires Python 3.10 or higher.
  • ⚠️Requires `uv` package manager for setup and running dependencies.
  • ⚠️Requires Claude Desktop for full MCP protocol testing as intended by the assignment.
  • ⚠️First run for the model distillation script (Task 4) involves downloading approximately 1.8GB of models and datasets.
Verified SafeView Analysis
The 'calc.py' server uses SymPy's 'sympify' function to parse user-provided mathematical expressions. While 'convert_xor=True' is used to mitigate some risks, 'sympify' can still be a vector for resource exhaustion attacks or potential code injection if input is not rigorously sanitized or run in a highly restricted sandbox. Generic 'except Exception' blocks in 'weather.py' might mask specific issues but prevent crashes. No obvious hardcoded sensitive credentials found.
Updated: 2025-12-03GitHub→
0
0
High Cost
ffffyhffff icon
Sec7

Enables LLMs to perform browser automation, web interaction, and data extraction with anti-detection capabilities.

Setup Requirements

  • ⚠️Requires a locally installed Chrome/Chromium browser.
  • ⚠️The default Puppeteer executable path for non-Docker usage assumes a Windows Chrome location ('C:\Program Files\Google\Chrome\Application\chrome.exe') if the `CHROME_PATH` environment variable is not explicitly set, which may cause issues on other operating systems.
  • ⚠️Requires Node.js and npm/npx to run locally.
Verified SafeView Analysis
The server allows executing arbitrary JavaScript code (`puppeteer_evaluate` tool) within the browser's context. While this is a core and expected feature of browser automation, it poses a risk if the input script is untrusted or malformed. Additionally, the `puppeteer_navigate` tool allows navigating to any URL, which could expose the browser to malicious websites. The server does implement validation for dangerous browser launch arguments, requiring explicit opt-in via `ALLOW_DANGEROUS` or `allowDangerous` parameter, which is a good security measure. No direct 'eval' is used within the Node.js server itself. The primary risk stems from the powerful capabilities when fed untrusted inputs, requiring careful consideration of the LLM's output when using this server.
Updated: 2026-01-17GitHub→
0
0
Low Cost
FezAreCool icon
Sec3

An AI-powered application interacting with Hacker News, likely using Anthropic's Claude.

Review RequiredView Analysis
The provided 'SOURCE CODE' only contains README.md. No actual server code was available for a security audit. Therefore, no 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns could be identified or ruled out. Running any server without its source code is inherently risky.
Updated: 2026-01-19GitHub→
0
0
Medium Cost

mcp-server-edgee

by edgee-cloud

Sec6

A Minecraft proxy or custom server implementation for edge environments, facilitating connections and potentially manipulating game data.

Setup Requirements

  • ⚠️Node.js and npm/yarn are required.
  • ⚠️A running Minecraft server (or client) is likely needed for full interaction/testing.
  • ⚠️TypeScript compilation step might be necessary before running (e.g., 'npm run build').
Review RequiredView Analysis
Code is not available for direct audit; server applications inherently involve network interactions and potential risks if input validation, authentication, and authorization are not robustly implemented. No 'eval' or obfuscation detected from file list.
Updated: 2025-11-18GitHub→
0
0
High Cost
leonchike icon

simbrief-mcp

by leonchike

Sec9

Provides SimBrief flight planning data and VATSIM ATIS to MCP clients like Claude Desktop for generating comprehensive flight briefings.

Setup Requirements

  • ⚠️Requires setting up Google OAuth credentials and a Google Cloud project.
  • ⚠️Requires a Cloudflare account and creation of a Cloudflare KV namespace with its ID updated in `wrangler.toml`.
  • ⚠️Manual configuration of allowed user email usernames in `src/config/allowed-users.ts`.
Verified SafeView Analysis
The server uses Google OAuth for authentication with email-based access control and HMAC-signed cookies for client approval persistence. Sensitive information (Google API keys, cookie encryption key, SimBrief API key) are managed as secrets via Cloudflare Wrangler. Input validation is performed using Zod schemas for MCP tools and explicit checks for VATSIM ATIS ICAO codes. The code avoids 'eval' and includes HTML encoding for user-supplied data in the OAuth approval dialog. Configuration of allowed users is explicitly done by editing a TypeScript file, which is a design choice for access control.
Updated: 2026-01-19GitHub→
0
0
Low Cost
grantkazan icon

weather-mcp

by grantkazan

Sec8

A Voice AI assistant for medical clinics to automate appointment scheduling, patient inquiries, and administrative tasks.

Setup Requirements

  • ⚠️Requires a phone number to be verified in the Telnyx system to place calls to the AI assistant.
  • ⚠️The MCP server hardcodes its dependency on an external Flask API URL, which must be live and accessible for the MCP server to function correctly.
  • ⚠️The README warns that setting up all associated repositories (Flask API, Dashboard) locally may encounter 'mileage vary' issues with ports and environment variables.
Verified SafeView Analysis
The MCP server's code itself appears clean, with no obvious 'eval' usage or hardcoded sensitive credentials. However, it relies heavily on a hardcoded external Flask API URL (https://telnyx-assignment-production.up.railway.app/). While common for demo projects, this introduces a dependency risk; if the external API were compromised or became malicious, the MCP server would interact with it. The `httpx` client is used for secure communication, but the external endpoint's security is beyond this repository's scope.
Updated: 2025-12-12GitHub→
0
0
Low Cost
seolcu icon
Sec9

An MCP server enabling AI agents to safely rename Git commit messages and manage repository state.

Setup Requirements

  • ⚠️Requires Git to be installed and configured on the host system.
  • ⚠️Requires Node.js (>=18.0.0) and npm/npx for installation and execution.
  • ⚠️Operations like `rename_commit` rewrite Git history, potentially requiring `git push --force` for remote branches, which can cause issues in shared development environments.
Verified SafeView Analysis
The server executes Git commands via `child_process.execAsync`. It includes a custom `escapeShellArg` function to sanitize input parameters, mitigating shell injection risks. Explicit safety checks are implemented to prevent operations on unclean working directories, during rebase, or on remote-pushed commits (unless `force` is used). The `undo_rename` feature offers a recovery mechanism. While Git history rewriting is inherently powerful and can be disruptive on shared branches, the server provides warnings and controls (e.g., `force` parameter) for this.
Updated: 2025-12-03GitHub→
0
0
Low Cost
Aniketps4 icon
Sec9

This server provides tools to track, list, and summarize personal or small-scale expenses using a local SQLite database.

Setup Requirements

  • ⚠️Requires Python 3.13 or newer, which might be a barrier as 3.13 is currently in early development and not widely adopted.
  • ⚠️The database (`expenses.db`) is stored in a temporary directory, which means data is not persistent across system restarts unless handled externally.
Verified SafeView Analysis
The server correctly uses parameterized queries for all database operations, effectively preventing SQL injection vulnerabilities. There are no clear signs of `eval` usage, obfuscation, hardcoded sensitive secrets (as it's a local SQLite DB), or other malicious patterns. Error handling is present to return structured messages instead of raw stack traces. The database is stored in a temporary directory, which limits potential impact on system-critical files.
Updated: 2026-01-19GitHub→
0
0
Low Cost
zemi-gh icon

ctf-mcp-server

by zemi-gh

Sec8

Facilitate LLM assistance in Capture The Flag (CTF) challenges and cybersecurity training in a controlled lab environment.

Setup Requirements

  • ⚠️Requires Debian/Ubuntu system with `sudo` access and internet connectivity for setup.
  • ⚠️The `setup.sh` script installs numerous cybersecurity and development tools, effectively making the host system a dedicated CTF environment.
  • ⚠️Node.js and npm are required, though `setup.sh` attempts to install them.
Verified SafeView Analysis
The server exposes powerful command-line tools (e.g., `radare2`, `pwntools`) and a Python sandbox, allowing LLMs to execute arbitrary Python code. While category-specific command execution is restricted to a strict whitelist of binaries, the Python sandbox is an explicit remote code execution vector. It is, however, designed and documented for use *only* in controlled CTF labs and sandboxes, with explicit warnings against use in production systems or untrusted networks. No `eval` in JavaScript code, no hardcoded secrets, and no unintended network exposures are apparent.
Updated: 2025-11-29GitHub→
0
0
High Cost
manish6007 icon

mcp_servers

by manish6007

Sec4

A combined Model Context Protocol (MCP) server that provides tools for querying Amazon Redshift databases and performing vector-based knowledge base searches.

Setup Requirements

  • ⚠️Requires AWS credentials with access to Bedrock, Redshift, S3, and Secrets Manager.
  • ⚠️Requires a running Amazon Redshift cluster and a PostgreSQL database with the `pgvector` extension enabled.
  • ⚠️Requires S3 buckets for both the knowledge base markdown files and for storing large Redshift query results.
  • ⚠️Local development uses Docker Compose to set up PostgreSQL and LocalStack for AWS service emulation, adding complexity.
Review RequiredView Analysis
The `run_query` tool directly accepts raw SQL as input, which is a significant SQL injection vulnerability if exposed to untrusted user input or if an LLM generates malicious SQL. The `list_tables` and `describe_table` tools use f-strings to embed `schema` and `table` names directly into SQL queries, also creating SQL injection opportunities if these parameters are not rigorously sanitized by the calling agent or application. The `query_vectorstore` tool similarly uses f-strings for the `query` parameter within `plainto_tsquery`, which could lead to unexpected behavior or resource exhaustion with malicious input. While intended for LLM agents, these patterns pose a high risk without strict input validation or sandboxing.
Updated: 2026-01-18GitHub→
PreviousPage 705 of 760Next