Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Low Cost
qontinui icon
Sec3

This server enables AI agents to discover, generate, validate, and execute GUI automation workflows using the Qontinui Python executor.

Setup Requirements

  • ⚠️Requires Python 3.12+ and Poetry for setup.
  • ⚠️Requires the `qontinui-runner` Python executor, which is an external dependency and not installed by this project's `poetry install`.
  • ⚠️The `ExecutorBridge` might require setting the `QONTINUI_PYTHON_BRIDGE_PATH` environment variable if the `qontinui-runner` directory structure is not standard or cannot be auto-detected.
Review RequiredView Analysis
The `evaluate_success_criteria` function uses `eval()` for custom workflow conditions. While it attempts to restrict `__builtins__`, `eval()` with arbitrary input from workflow definitions (which can be generated by AI or created via API) poses a significant risk of arbitrary code execution if a malicious workflow is processed. The `subprocess.Popen` calls are part of core functionality for spawning the executor and appear controlled, but the `eval` vulnerability is critical. No hardcoded secrets were found.
Updated: 2025-12-05GitHub→
0
0
Medium Cost
Rayan002 icon

project-atlas

by Rayan002

Sec8

A modular, multi-server AI system for planning end-to-end travel itineraries by orchestrating distinct micro-agents.

Setup Requirements

  • ⚠️Requires Python 3.13+
  • ⚠️Requires UV package manager
  • ⚠️Requires Node.js for MCP Inspector and potentially other MCP servers
  • ⚠️Requires multiple API keys for various services (e.g., HERE_API_KEY, and keys for web search, flight data, accommodation, currency, and AI models for the Memory Server)
Verified SafeView Analysis
API keys are correctly managed via environment variables (e.g., HERE_API_KEY). The project relies on external Node.js packages via 'npx' (e.g., @openbnb/mcp-server-airbnb, @modelcontextprotocol/inspector) which introduces a standard supply chain risk, but these are specific packages rather than arbitrary command execution. No direct 'eval' or obfuscation found in the provided Python code snippets. Network calls to external APIs are inherent to the project's functionality.
Updated: 2025-11-23GitHub→
0
0
Medium Cost
jasbir125 icon

mcp_server_mysql

by jasbir125

Sec4

Exposes MySQL database operations as tools for AI assistants via the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires Python 3.12.x
  • ⚠️Requires a MySQL server (local or remote)
  • ⚠️Requires an MCP-compatible client (e.g., Claude Desktop)
  • ⚠️Requires specific configuration in a client's JSON config file and environment variables.
Review RequiredView Analysis
The `run_query` function directly executes arbitrary SQL passed as a string from the AI assistant. This presents a critical SQL injection vulnerability if the AI's output is not perfectly controlled and sanitized, or if a prompt injection attack occurs. While other functions use parameterized queries, `run_query` lacks any input validation or sanitization, making it highly susceptible to malicious or accidental database modifications and data exfiltration.
Updated: 2025-11-27GitHub→
0
0
Low Cost

mcp_server

by nikith4

Sec4

Custom server implementation, likely related to the Minecraft protocol or a similar game server, based on the 'MCP' abbreviation and Python server files.

Setup Requirements

  • ⚠️Python environment required.
  • ⚠️Unknown Python dependencies (no requirements.txt found).
  • ⚠️Network configuration (e.g., port forwarding, firewall) may be necessary for external access.
Review RequiredView Analysis
Cannot inspect code for 'eval' or obfuscation given only file names. Server applications inherently carry network risks. Running unknown server code without a thorough security audit is not recommended.
Updated: 2025-11-17GitHub→
0
0
Low Cost
Akungapaul icon

wp-content-mcp

by Akungapaul

Sec8

Manages WordPress posts and pages, providing tools for content creation, updates, deletion, and advanced operations like scheduling and bulk editing.

Setup Requirements

  • ⚠️Requires an existing WordPress instance with the REST API enabled.
  • ⚠️Requires WordPress Application Passwords to be configured for authentication.
  • ⚠️WP-CLI functionality is optional but requires local WP-CLI installation or SSH access configured via environment variables for remote execution.
Verified SafeView Analysis
The server uses Zod for input validation, which is a good practice to prevent malformed requests. Sensitive credentials (WordPress URL, username, app password, and WP-CLI SSH details) are expected via environment variables, not hardcoded. The implementation relies on `@akungapaul/wp-mcp-shared` for WordPress REST API and WP-CLI interactions. While the `server.js` itself doesn't expose direct command injection vulnerabilities, the security of the WP-CLI integration (especially remote SSH execution) depends heavily on the robustness of the `WPCLIClient` implementation within the shared library. Without access to that library's source, it's an assumption of safe handling of external commands. No 'eval' or obvious obfuscation is present.
Updated: 2025-11-28GitHub→
0
0
Low Cost
ShakibaMirbagheri icon

mcp-google-drive

by ShakibaMirbagheri

Sec8

Provides a Machine Control Protocol (MCP) interface to interact with Google Drive files and folders.

Setup Requirements

  • ⚠️Requires manual Google Cloud Console setup to obtain `credentials.json` (OAuth client ID).
  • ⚠️Requires an initial manual OAuth authentication flow to generate `tokens.json`.
  • ⚠️Requires Python 3.11 or higher for local execution.
Verified SafeView Analysis
The server handles Google OAuth2 credentials and API tokens (tokens.json and credentials.json) which are sensitive and must be securely stored by the user. The tokens.json file is loaded using pickle.load, which is generally risky if the source is untrusted, but here it's expected to be generated by the project's own auth_setup.py, mitigating the risk if the file is not externally tampered with. Running the server on 0.0.0.0 exposes it to the network by default; users should ensure proper network isolation or configure a more restrictive host if needed.
Updated: 2025-11-27GitHub→
0
0
Low Cost

dsvm-auto13-mcp

by nhartman000

Sec7

A geometry-aware reasoning and machine-to-machine communication module for dynamic systems analysis using an emoji-based machine language and the Model Context Protocol (MCP).

Setup Requirements

  • ⚠️Requires correctly setting the PYTHONPATH environment variable for running the server and tests.
Verified SafeView Analysis
The project implements an MCP server for machine-to-machine communication, which inherently introduces network exposure. While no direct 'eval' or obfuscation is evident, the server's security depends heavily on its deployment environment, network configuration, and authentication/authorization mechanisms, which are not detailed in the provided README. Running it in an unsecure network environment without proper controls could pose risks.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
baraninja icon

cluster-mcp

by baraninja

Sec9

Provides a unified interface for accessing diverse research, socioeconomic, news, health, environment, and trade data from multiple external providers.

Setup Requirements

  • ⚠️Node.js version 20.0.0 or higher is required for all servers.
  • ⚠️Full functionality for `environment-mcp` requires setting the `OPENAQ_API_KEY` environment variable. The `trade-mcp` and `research-mcp` servers also benefit from `COMTRADE_API_KEY` and `CONTACT_EMAIL` respectively for better rate limits and polite access.
  • ⚠️Some servers (e.g., `environment-mcp`, `health-mcp`, `trade-mcp`) rely on local data files (e.g., country codes, HS catalogs) that must be present in the `dist/data/` directory after the build process.
Verified SafeView Analysis
API keys and sensitive contact emails are correctly managed via environment variables and explicitly declared as sensitive in `manifest.json` files. Input validation uses `zod` schemas. The HTTP client includes retry logic and rate limit extraction to prevent abuse of upstream APIs. The `news-mcp`'s `fetch_article` tool fetches arbitrary URLs but implements `maxChars` limits and an `htmlToPlainText` function to strip potentially malicious HTML/scripts, mitigating XSS risks for the parsed content. No `eval` or obvious malicious patterns were found.
Updated: 2026-01-01GitHub→
0
0
Low Cost
Sec8

A frontend web application or UI component library, likely for showcasing or managing 'training reels' or interactive training content.

Setup Requirements

  • ⚠️Node.js and npm/yarn are required to manage project dependencies and execute scripts.
  • ⚠️Environment variables, as indicated by the '.env.example' file, may be essential for the application's full functionality.
  • ⚠️Project dependencies must be installed using `npm install` (or `yarn install`) before the development server can be run.
Verified SafeView Analysis
The project uses a standard modern frontend development stack (Vite, TypeScript, Tailwind CSS). There are no apparent uses of 'eval' or obfuscation detectable from the file names. Potential network risks depend on interactions with external APIs or backend services, which cannot be assessed without reviewing the actual source code. A full security audit of the application's source code and third-party dependencies is recommended for production environments.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
the-artinet-project icon

router

by the-artinet-project

Sec2

A dynamic orchestration library for routing messages between A2A enabled AI agents and marshalling MCP tool servers, enabling complex multi-agent and tool-using AI applications.

Setup Requirements

  • ⚠️Requires Node.js version >=18.9.1.
  • ⚠️Relies on an external Artinet API (api.stage.artinet.io/v1/connect) for core routing decisions, which could be a point of failure or require specific authentication/pricing.
  • ⚠️Requires external MCP tool servers (e.g., @modelcontextprotocol/server-filesystem) to be installed and available for specific functionalities.
  • ⚠️Currently only supports stdio MCP Servers, limiting integration options to processes that communicate via standard I/O streams.
Review RequiredView Analysis
The library utilizes `child_process.execSync` within `src/utils/env-expand.ts` to expand shell variables in arguments for MCP tool servers. This `envArgsCapture` function is called when creating new tools (`src/tools/init.ts`). If the `StdioServerParameters.args` (or `command`) provided to `createTool` can be influenced by untrusted or malicious input, it could lead to arbitrary command execution on the host system. The `README.md` examples show dynamic commands (e.g., `npx @modelcontextprotocol/server-filesystem`), highlighting the potential for this vector. This constitutes a critical security risk.
Updated: 2025-11-23GitHub→
0
0
Low Cost
hi-ropon icon

plc-gateway

by hi-ropon

Sec3

This server provides a FastAPI REST API for reading device values from Mitsubishi PLCs using the MC protocol.

Setup Requirements

  • ⚠️Requires a Mitsubishi PLC accessible via network (TCP/UDP).
  • ⚠️No built-in authentication or authorization, requiring external security measures for production deployment.
  • ⚠️Network connectivity between the server and the PLC is essential; firewall rules must permit MC Protocol communication (default port 5511).
Review RequiredView Analysis
The server uses `allow_origins=["*"]` for CORS, which is a significant security risk in production environments as it allows cross-origin requests from any domain. There is no visible built-in authentication or authorization for API access, which is critical for an API interacting with industrial control systems. The `--production` flag binds the API to `0.0.0.0`, making it publicly accessible, which, when combined with the lack of authentication and permissive CORS, creates a major vulnerability. Dynamic PLC IP/port specification in API requests (`plc_host` parameter) increases flexibility but also expands the attack surface if not securely deployed. The `_read_plc` and `_batch_read_plc` functions establish and close a new PLC connection for each API request, which could be an efficiency concern under high load but is not a security flaw.
Updated: 2025-12-18GitHub→
0
0
Medium Cost
coval-ai icon

mcp-server

by coval-ai

Sec9

Provides a Model Context Protocol (MCP) server that enables AI assistants to interact with the Coval AI evaluation platform for launching and monitoring evaluation runs, managing AI agents and test sets, and retrieving evaluation metrics.

Setup Requirements

  • ⚠️A Coval API Key is required (COVAL_API_KEY environment variable or X-API-Key header in Lambda). Without it, the server will only enable a basic 'ping' tool.
  • ⚠️Requires Node.js version 20.0.0 or higher, as specified in package.json.
Verified SafeView Analysis
The server correctly retrieves the Coval API key from environment variables or HTTP headers (for Lambda), avoiding hardcoded secrets. All tool inputs are rigorously validated using Zod schemas, significantly reducing the risk of malformed requests and injection vulnerabilities. Network requests are confined to the defined Coval API, and comprehensive error handling ensures that internal errors are not leaked directly to the client. There is no direct usage of 'eval' or other inherently dangerous functions that would allow arbitrary code execution.
Updated: 2026-01-16GitHub→
PreviousPage 713 of 760Next