Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
High Cost

rancher-mcp-server

by futuretea

Sec7

Provides a Model Context Protocol (MCP) server designed for Rancher multi-cluster management, enabling AI tools to interact with Kubernetes and Rancher resources.

Setup Requirements

  • ⚠️Requires access to an existing Rancher server.
  • ⚠️Rancher API credentials (Token or Access Key/Secret Key) are mandatory.
  • ⚠️Using 'npx' requires Node.js and npm to be installed locally.
Verified SafeView Analysis
The server requires Rancher API credentials, which grant significant access to Kubernetes clusters. While it offers read-only and disable-destructive modes, and protects secret data by only exposing metadata, the `--rancher-tls-insecure` option can introduce vulnerabilities if misused. Users must ensure secure handling of credentials.
Updated: 2025-11-18GitHub→
0
0
Medium Cost
dominodatalab icon

qa_mcp_server

by dominodatalab

Sec8

Automated User Acceptance Testing (UAT) and performance analysis for the Domino Data Science Platform using an LLM-powered MCP server.

Setup Requirements

  • ⚠️Requires Python 3.11 or higher.
  • ⚠️Requires access to an active Domino Data Science Platform instance with a valid API key and host configured in a .env file.
  • ⚠️Requires Domino user and project names to be configured in a `@domino_project_settings.md` file for LLM client to provide as parameters.
Verified SafeView Analysis
The server uses environment variables for sensitive credentials (DOMINO_API_KEY, DOMINO_HOST) and reads user/project names from a markdown file, which is good practice. It interacts with the Domino platform via API, which is its core functionality. The `open_web_browser` tool could potentially open arbitrary URLs if the LLM client is compromised or poorly constrained, posing a minor risk of opening unintended browser tabs on the server host. However, in the context of a dedicated QA tool, this is likely used for specific, internal Domino URLs.
Updated: 2026-01-13GitHub→
0
0
Medium Cost
serenichron icon

mcp-cloudron

by serenichron

Sec9

MCP server for Cloudron instance management, enabling AI assistants to list apps, get status, manage resources, and perform validated operations on self-hosted applications.

Setup Requirements

  • ⚠️Requires a `CLOUDRON_API_TOKEN` with 'Read and Write' permissions from your Cloudron Admin Panel. Insufficient permissions will lead to tool failures (e.g., 401 'No such token').
  • ⚠️Requires a running and accessible Cloudron instance (`CLOUDRON_BASE_URL` must be correct).
  • ⚠️Node.js version 18 or higher is required.
Verified SafeView Analysis
The server follows strong security practices. It requires `CLOUDRON_BASE_URL` and `CLOUDRON_API_TOKEN` to be set via environment variables, preventing hardcoded credentials. All API calls use bearer token authentication over HTTPS. Crucially, it implements pre-flight validation (F37, F36, F23a) for destructive operations (e.g., uninstall app, create backup, install app, restore backup) and storage checks, adding a critical layer of safety. Input validation is performed for all tool parameters (e.g., email/password strength, app IDs, roles). No `eval` or other dangerous dynamic code execution patterns were found. Error messages are designed to avoid leaking sensitive internal details. The primary security risk lies in the permissions granted to the `CLOUDRON_API_TOKEN` itself; it should be configured with the minimum necessary 'Read and Write' scope as emphasized in the `REAL_API_TEST_RESULTS.md`.
Updated: 2025-12-27GitHub→
0
0
Low Cost
saketh395 icon

Anthropic_MCP

by saketh395

Sec5

Builds and operates a Minecraft Protocol (MCP) server-client architecture for game interaction.

Review RequiredView Analysis
Insufficient source code provided for a comprehensive security audit. Only the README file was available. Cannot assess for 'eval', obfuscation, hardcoded secrets, network risks, or malicious patterns.
Updated: 2025-11-30GitHub→
0
0
Medium Cost

schemamcp

by manattan

Sec7

Provides MySQL schema files as an HTTP-based Model Context Protocol (MCP) server for AI models or other clients.

Setup Requirements

  • ⚠️Requires Go installed to build the binary from source.
  • ⚠️A mandatory `config.yaml` file must be created and correctly configured with database names, types (currently only 'mysql' is supported), and paths to schema files.
  • ⚠️Source SQL schema files (e.g., `.sql` files) must exist at the paths specified in `config.yaml` and contain supported `CREATE TABLE` statements.
Verified SafeView Analysis
The server exposes database schema information via an HTTP API. While schema data itself is not sensitive in all contexts, direct exposure without authentication or authorization could be a risk if deployed publicly. It is primarily designed for local or internal use with AI development tools. No obvious execution of arbitrary code ('eval') based on the description, and it parses a limited subset of SQL syntax, which could reduce certain attack vectors.
Updated: 2025-11-17GitHub→
0
0
Low Cost
consigcody94 icon

minecraft-pilot

by consigcody94

Sec9

Control a Minecraft Java Edition server using natural language commands through Claude Desktop via RCON.

Setup Requirements

  • ⚠️Requires a Minecraft Java Edition Server with RCON enabled and correctly configured (port, password).
  • ⚠️Requires Node.js 16+ and npm to be installed.
  • ⚠️Requires Claude Desktop to be installed and correctly configured with the absolute path to the `mcp-server.js` file, which is a common point of error.
Verified SafeView Analysis
The project extensively documents the inherent security risks of RCON (unencrypted protocol) and provides robust warnings and mitigation strategies, including strong password recommendations, firewall configuration for local access, and SSH tunneling for remote access. The `CommandParser` includes built-in safety validation to prevent execution of dangerous commands like server shutdowns (`stop`, `restart`), mass bans (`ban *`), or global kills (`kill @a`/`@e`). No 'eval' or malicious patterns were found in the source code. Hardcoded secrets are avoided by requiring environment variables for RCON credentials.
Updated: 2025-11-21GitHub→
0
0
Medium Cost
William-Ger icon
Sec9

Provides comprehensive tools for accessing and studying the Bible, including verse lookup, search, chapter reading, and generating devotional and study guides.

Setup Requirements

  • ⚠️Requires deployment to a remote server (e.g., Railway) to obtain a public URL for connection.
  • ⚠️Requires `npx` (Node.js/npm) installed on the client machine to connect via `mcp-remote`.
Verified SafeView Analysis
The server uses `requests` to interact with the public `bible-api.com`. There are no 'eval' or similar dangerous functions found. No hardcoded secrets. The server is designed for remote hosting and listens on all interfaces, which is standard for deployed applications. Overall, it appears safe.
Updated: 2026-01-17GitHub→
0
0
Low Cost
thinkingidentities icon

ep2-filebridge

by thinkingidentities

Sec8

Facilitates cross-platform file and Git operations for AI agents and other cognates within a sandboxed repository.

Setup Requirements

  • ⚠️Requires Node.js installed to run the server components.
  • ⚠️Requires Git installed on the host machine where the server runs, with the target repository initialized at the `FILEBRIDGE_ROOT`.
  • ⚠️For full 'Gabe' (ChatGPT) functionality, an external 'Cognate Gateway' and 'Cloudflare Tunnel' (or similar public exposure) are required to route HTTPS requests to the internal HTTP server.
Verified SafeView Analysis
The server implements strong path sanitization (`safePath()`) to sandbox all file operations to a specific root directory (`/home/jim00/ep2` by default), preventing arbitrary file system access. It does not use `eval()` or direct `child_process.exec()` on user input. It relies on `simple-git` for Git operations, which generally handles command arguments safely, minimizing shell injection risks. The primary remaining risk is the inherent privilege of offering file and Git access, which requires trust in the consuming AI agents and robust input validation, or a potential exploit within `simple-git` or the Node.js `fs` module itself. The MCP-SSE server sets `Access-Control-Allow-Origin: *`, which is typical for SSE but means any origin can connect to the SSE endpoint.
Updated: 2025-12-01GitHub→
0
0
Medium Cost
lalipop05 icon
Sec9

Serves as a Model Context Protocol (MCP) server to connect Large Language Models (LLMs) with University of Texas at Dallas (UTD) course data and RateMyProfessors ratings.

Setup Requirements

  • ⚠️Requires a `NEBULA_API_KEY` which may need to be obtained from UTD Nebula Labs.
  • ⚠️The `PATH_TO_ENV` variable in `cmd/server/main.go` is hardcoded to a Windows absolute path and must be updated for different operating systems or installation locations.
Verified SafeView Analysis
API keys are sourced from environment variables, which is a good security practice for sensitive credentials. All external API communications are handled over HTTPS. GraphQL queries are constructed using named variables and parameters, mitigating direct injection risks. The primary non-critical concern is a hardcoded absolute path to the `.env` file in `cmd/server/main.go`, which is a setup issue for portability rather than a code vulnerability.
Updated: 2026-01-17GitHub→
0
0
Low Cost
bluebillshtml icon

ideconnect

by bluebillshtml

Sec9

Provides a self-hosted Model Context Protocol (MCP) server for shared, persistent project context across multiple AI IDEs.

Setup Requirements

  • ⚠️Requires Node.js version 18 or higher.
  • ⚠️Requires write permissions to the project directory and potentially user-level application configuration directories for IDE setup.
  • ⚠️Manual IDE configuration may be required if auto-detection fails, which involves editing specific JSON files in user application data folders.
Verified SafeView Analysis
The server is self-hosted, local-only, and explicitly designed with no external network dependencies, paid APIs, or cloud services, significantly reducing network-based security risks. It stores context in local markdown files. The main security consideration is the trust required when installing a global Node.js package (`npm install -g ideconnect`) and running its setup script, which modifies local filesystem and potentially configuration files of other installed IDEs (e.g., Cursor, Claude Desktop). No 'eval' or obvious malicious patterns are present in the truncated source code, and no hardcoded secrets are identified. Overall, it appears to prioritize privacy and local control.
Updated: 2026-01-18GitHub→
0
0
Low Cost
eddiebe147 icon

memmon

by eddiebe147

Sec7

A local development dashboard for macOS to monitor system resources (RAM, CPU, Swap) and manage active processes, including AI agents (e.g., Claude, Codex), development servers (e.g., Next.js, PostCSS workers), and local network services.

Setup Requirements

  • ⚠️Requires macOS: The API backend utilizes macOS-specific shell commands (`vm_stat`, `sysctl -n hw.memsize`, `osascript`, `purge`) and will not function correctly on other operating systems without extensive modification.
  • ⚠️Manual Path Configuration: The `scripts/start-memmon.sh` script contains a hardcoded absolute path (`/Users/eddiebelaval/Development/id8/memmon`) that must be updated to reflect the user's specific project directory.
  • ⚠️Privileged Access: Many management actions (e.g., `kill`, `pkill`, `lsof`, `purge`) require sufficient shell permissions, and `sudo purge` implies that the application or its startup script might need `sudo` privileges for full functionality.
Verified SafeView Analysis
The server executes shell commands (`ps aux`, `lsof`, `kill`, `pkill`, `sysctl`, `vm_stat`, `du`, `df`) directly from the backend. While these commands are generally hardcoded or constructed from validated integers (PIDs/ports) and predefined process names, avoiding direct arbitrary user input injection, the `pkill -f` commands are broad and could impact unintended processes if process names overlap. The 'use server' actions for system management are intended for the dashboard UI, not direct public API access. The `killPort` function specifically protects Memmon's own port (1111). Overall, the risks are mitigated given the tool's nature as a local developer utility, but direct shell execution is inherently more privileged than typical web apps.
Updated: 2025-11-19GitHub→
0
0
Medium Cost
pslavchev11 icon

Stocks-MCP-Server

by pslavchev11

Sec9

A server providing real-time and historical stock market data, company financials, and news via JSON-RPC, designed to be integrated as a tool for other applications, potentially an AI agent.

Setup Requirements

  • ⚠️Requires an Alpha Vantage API key (free tier available, but usage limits apply).
  • ⚠️Requires a Java Development Kit (JDK) to build and run.
  • ⚠️Operates as a command-line application interacting via standard input/output (stdin/stdout) for JSON-RPC, rather than a traditional HTTP web server.
Verified SafeView Analysis
The server uses standard Java/Spring Boot practices and Jackson for JSON parsing, which is generally robust. Input parameters (symbol, limit) are extracted as basic data types (String, Integer) and used in URL query parameters for external API calls, mitigating direct injection risks. Error handling for API calls and JSON parsing is implemented. No 'eval' or obvious obfuscation is present. The primary security concern is the secure management of the Alpha Vantage API key, which is expected to be provided via environment variables or configuration.
Updated: 2025-11-30GitHub→
PreviousPage 727 of 760Next