Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
High Cost
Kealu-Inc icon
Sec8

Reads and manages Substack subscriptions and posts within Claude Code.

Setup Requirements

  • ⚠️Requires manual export of browser cookies (containing Substack session) into a specific JSON file path.
  • ⚠️Cookies periodically expire, requiring re-export for continued authentication.
  • ⚠️Requires Python 3.10 or newer.
  • ⚠️Designed to run specifically as an MCP server within Claude Code.
Verified SafeView Analysis
The server primarily relies on a 'cookies.json' file for authentication, which contains sensitive session data. Users are explicitly warned not to commit this file and to re-export cookies when they expire. The server itself does not appear to use dangerous functions like 'eval' and correctly handles environment variables for sensitive paths. The main security risk is the user's management of the 'cookies.json' file.
Updated: 2025-12-13GitHub→
0
0
Low Cost
Shellishack icon
Sec7

This repository provides a React full-stack template for building extensions for the Pulse Editor, specifically for configuring connections to an MCP server.

Setup Requirements

  • ⚠️This repository is deprecated; the project has moved to a monorepo.
  • ⚠️Requires global installation of `@pulse-editor/cli`.
  • ⚠️Requires the Pulse Editor application for full functionality (IMC unavailable in preview mode).
Verified SafeView Analysis
The template provides basic server functions without explicit input validation or authentication/authorization. While `dotenv` is a dependency (used by `@pulse-editor/cli`), no hardcoded secrets are present in the provided code snippets. Client-side actions (`useRegisterAction`) receive parameters (`params`) directly from the Pulse Editor; developers must ensure these inputs are sanitized/validated in production to prevent potential injection vulnerabilities if they are used to execute commands or render unescaped content. The use of `JSON.stringify` for displaying results on the client provides some mitigation for output rendering.
Updated: 2025-12-12GitHub→
0
0
Low Cost

mcp-server-demo

by ShanmugaSivapragasam

Sec10

A boilerplate or example server demonstration, purpose unspecified due to limited information.

Verified SafeView Analysis
No code artifacts were provided for analysis beyond the repository name and a truncated README. There are no identifiable security risks based on the provided information, as no executable code is present.
Updated: 2025-11-17GitHub→
0
0
Medium Cost
Supreme-Campus icon

ERP-MCP-SERVER

by Supreme-Campus

Sec5

Manages enterprise resource planning (ERP) processes and data, likely exposing them through a multi-channel platform (MCP) via APIs.

Setup Requirements

  • ⚠️Requires a database (e.g., PostgreSQL, MySQL, MongoDB) to be configured and accessible.
  • ⚠️Requires specific runtime environment (e.g., Node.js, Python, Java) which is not specified without source code.
Review RequiredView Analysis
Cannot perform a security audit as the source code was not provided. The score of 5 reflects an unknown state; no specific risks or safe practices could be identified.
Updated: 2025-11-22GitHub→
0
0
Medium Cost
giantswarm icon

mcp-capi

by giantswarm

Sec7

Enables Large Language Models (LLMs) and AI assistants to manage Kubernetes clusters through natural language interactions with Cluster API (CAPI).

Setup Requirements

  • ⚠️Requires Go 1.24.4 or later.
  • ⚠️Requires access to a Kubernetes Cluster API management cluster.
  • ⚠️Kubeconfig must be configured and have appropriate permissions to manage CAPI resources in the management cluster.
Verified SafeView Analysis
The server exposes powerful Cluster API operations and sensitive information (like workload cluster kubeconfigs) via the Model Context Protocol. While the core implementation uses well-vetted Kubernetes client libraries and includes input validation for CLI parameters, secure deployment is critical. HTTP-based transports (SSE, Streamable HTTP) open network listeners. If exposed publicly without strong authentication and authorization, this could lead to unauthorized cluster management, configuration changes, or sensitive data disclosure. The self-update mechanism fetches from a trusted GitHub repository, but without explicit signature verification, it introduces a potential, albeit low, risk if the repository were compromised. Some tools are currently placeholders and would require further security review upon full implementation.
Updated: 2026-01-05GitHub→
0
0
Low Cost
hajarada icon
Sec8

Exposes PyCharm's refactoring capabilities as an MCP server, enabling Claude Code to perform intelligent code transformations within a PyCharm project.

Setup Requirements

  • ⚠️Requires PyCharm with the custom 'Refactoring Bridge' plugin installed (can be built from source or installed from Marketplace when available).
  • ⚠️PyCharm must be running and have the target project open for the refactoring operations to work.
  • ⚠️Requires `PYCHARM_BRIDGE_URL` and optionally `PYCHARM_BRIDGE_TOKEN` to be configured, either via environment variables or in Claude Code's MCP config.
Verified SafeView Analysis
The PyCharm Refactoring Bridge plugin binds its HTTP server exclusively to localhost (127.0.0.1), preventing external network access. It supports an optional bearer token for authentication, and allows configuring an allowlist of project paths to restrict which projects can be refactored. Refactoring operations automatically save all documents first. The primary security risk involves an attacker gaining local access to the machine, which is an inherent risk for any local development tool integration.
Updated: 2026-01-18GitHub→
0
0
Medium Cost
shubhamdhiman-crossml icon

MCP_Assignment

by shubhamdhiman-crossml

Sec1

Implements a hospital database system using an MCP Server, integrated with Langchain, agents, and various tools for enhanced interaction.

Setup Requirements

  • ⚠️Requires LLM API Key (e.g., OpenAI, Anthropic, etc.)
  • ⚠️Requires a database setup (e.g., SQLite, PostgreSQL)
  • ⚠️Familiarity with the MCP Server framework might be needed for setup
Review RequiredView Analysis
Only README.md content was provided for analysis. Without access to the actual source code files, a comprehensive security audit for 'eval', obfuscation, network risks, hardcoded secrets, or malicious patterns is impossible. Therefore, safety cannot be guaranteed without reviewing the complete codebase.
Updated: 2026-01-19GitHub→
0
0
Medium Cost
AI-Junction icon
Sec2

A comprehensive agentic AI framework integrating RAG, LangGraph workflows, and external tools via an MCP server to provide an AI assistant with capabilities spanning information retrieval, task automation, and multi-agent orchestration.

Setup Requirements

  • ⚠️Requires OpenAI API Key (Paid) for core RAG components.
  • ⚠️Requires a local `ollama` server running with the `llama3.2` model for LangGraph agent reasoning and as an LLM fallback.
  • ⚠️Requires a separate `MCP Server` instance running (default `http://localhost:8000/mcp/`) for agent tool execution.
  • ⚠️Downloads `all-MiniLM-L6-v2` embedding model (~90MB) on first run for local embeddings.
Review RequiredView Analysis
CRITICAL VULNERABILITIES DETECTED: 1. Arbitrary Code Execution (eval): Several files within `swarm-writer-agents` (e.g., `ai-travel-agents/agents/orchestrator_agent.py`, `flight_agent.py`, `email_agent.py`, `hotel_agent.py`, `ai-recruiter-agency/agents/orchestrator.py`, `recommender_agent.py`, `screener_agent.py`, `matcher_agent.py`) use `eval(messages[-1]["content"])` with `messages[-1]["content"]` originating from user-controlled input. This allows an attacker to execute arbitrary Python code on the server, posing an extreme risk. 2. Exposed Filesystem Operations: The `mcp_server/tools/filesystem.py` module exposes tools (`read_file`, `write_file`, `list_dir`, `search_in_files`) that grant direct access to the server's filesystem. If the MCP server is publicly exposed or an agent is compromised, this could lead to unauthorized data access, modification, or deletion. 3. File Upload Processing: The `rag_project/app.py` and `app_from_rag_basics_final_working.py` allow file uploads. While `secure_filename` is used, the subsequent processing of these files (e.g., PDF extraction) could expose vulnerabilities if malicious files are uploaded. 4. Uncontrolled JSON Parsing: `langgraph_app/graph.py` performs `json.loads()` on agent output, which, while standard, could be a vector for attack if the underlying LLM's output is not strictly constrained and an attacker can inject malicious JSON structures.
Updated: 2025-12-06GitHub→
0
0
Low Cost
kpernyer icon

nyc-last-mile

by kpernyer

Sec9

An AI-powered analytics platform for optimizing last-mile delivery operations and logistics networks by transforming raw shipment data into actionable insights through natural language queries.

Setup Requirements

  • ⚠️Requires Rust toolchain (for `cargo build`)
  • ⚠️Requires `api_server` to be running first (usually on `http://localhost:8080`)
  • ⚠️Requires Claude Desktop for integration (as it's an MCP server)
  • ⚠️Requires prior data ingestion (running `ingest.rs` or `ingest_synthetic.rs` binaries) to populate the SurrealDB instance.
Verified SafeView Analysis
The server is built in Rust, generally considered memory-safe. It uses standard, well-vetted libraries. The `api_server` binds to `0.0.0.0` by default, making it accessible from any network interface, and its CORS configuration allows `Any` origin, which should be restricted in a production environment. Database paths are hardcoded as local files (`data/lastmile.db` or `data/synthetic.db`), making it suitable for local operation but not shared environments without proper access controls. No obvious hardcoded network secrets or malicious patterns were found.
Updated: 2025-12-11GitHub→
0
0
Low Cost
tamappe icon
Sec9

Provides market index data (S&P500, NASDAQ100, Nikkei 225, etc.) for natural language search within Claude Desktop.

Setup Requirements

  • ⚠️Requires Claude Desktop for integration.
  • ⚠️Initial data download (approx. 10MB) required on first run, which may take up to 30 seconds.
  • ⚠️The full path to `uvx` must be specifically configured in Claude Desktop settings.
Verified SafeView Analysis
The server uses parameterized queries to prevent SQL injection, which is good practice. Market data is downloaded securely from GitHub Releases via HTTPS, with SSL verification utilizing 'certifi'. No 'eval' or obvious malicious patterns are present in the provided source code. The primary external security consideration is the integrity of the data source on GitHub Releases.
Updated: 2026-01-16GitHub→
0
0
Medium Cost
lianekai icon
Sec9

Provides a secure, read-only Model Context Protocol (MCP) server for openGauss database operations, intended for integration with AI clients like Claude Desktop.

Setup Requirements

  • ⚠️Requires an operational openGauss database instance.
  • ⚠️Requires manual copying of `src/utils/db.fixed.ts` and `src/utils/validation.fixed.ts` to `src/utils/db.ts` and `src/utils/validation.ts` respectively, as part of the upgrade process to the secure version.
  • ⚠️Database connection credentials (host, port, user, password, database, schema) must be configured via environment variables or a `.env` file.
  • ⚠️Additional security measures, such as creating a dedicated read-only database user and configuring firewall rules, are strongly recommended as per the deployment guide.
Verified SafeView Analysis
The server, after applying the recommended security fixes (indicated by the `db.fixed.ts` and `validation.fixed.ts` files and outlined in the `README_SECURITY_FIXES.md`), demonstrates strong security practices. It effectively addresses critical SQL injection vulnerabilities through robust identifier normalization, parameterization (using a connection pool), and comprehensive read-only query validation. The enhanced validation logic includes checks for multiple statements, dangerous functions (e.g., file system access), subquery write operations, NULL byte injections, and input length limits. Connection pooling, query timeouts, and a rate limiter are implemented to prevent resource exhaustion and Denial-of-Service attacks. Logging is structured with `pino` and redacts sensitive information, mitigating information leakage. The project's security rating is reported to have improved from 68/100 to 90/100 post-fix, and it is deemed 'production-ready'.
Updated: 2025-12-25GitHub→
0
0
Medium Cost
betahub-io icon

betahub-mcp-server

by betahub-io

Sec9

Integrates BetaHub's feedback management and project data with AI assistants via Model Context Protocol (MCP) for AI-powered development workflows.

Setup Requirements

  • ⚠️Requires a BetaHub account with API access.
  • ⚠️Requires a BetaHub Personal Access Token (PAT) to be generated from BetaHub profile settings.
  • ⚠️The BetaHub token must be provided as an environment variable (BETAHUB_TOKEN) or a command-line argument (--token).
Verified SafeView Analysis
The server explicitly handles authentication tokens via environment variables or CLI arguments, avoiding hardcoding. Input validation for tools is enforced using Zod schemas. Error handling is structured with custom error classes. Communication with AI clients uses stdio (stdin/stdout), which is a secure local channel. External API calls are made to BetaHub with standard authorization headers. No 'eval' or malicious patterns were identified in the provided source code.
Updated: 2025-12-01GitHub→
PreviousPage 718 of 760Next