Stop Searching. Start Trusting.

The curated directory of MCP servers, vetted for security, efficiency, and quality.

Browse DirectoryWhy Us?

Tired of the MCP "Marketplace" Chaos?

We built MCPScout.ai to solve the ecosystems biggest pain points.

No Insecure Dumps

We manually analyze every server for basic security flaws.

Easy Setup

Our gotcha notes warn you about complex setups.

Avoid "Token Hogs"

We estimate token costs for cost-effective agents.

Products, Not Demos

We filter out "Hello World" demos.

CATEGORIES:
SORT:

Vetted Servers(9120)

0
0
Medium Cost
JoseJimenez-M icon

mcp-statcan-odcaf

by JoseJimenez-M

Sec9

Exposes Canada's Official Canadian Cultural Facilities Dataset (ODCAF) via an MCP server for AI clients to query.

Setup Requirements

  • โš ๏ธRequires `ODCAF_v1.0.csv` to be manually acquired and placed in the project root.
  • โš ๏ธRequires running `python ingest.py` once to create the `odcaf.db` SQLite database.
  • โš ๏ธRequires Python 3 and `pip install -r requirements.txt` to install dependencies.
Verified SafeView Analysis
The server correctly uses parameterized queries with `aiosqlite` to prevent SQL injection. No `eval` or direct code execution functions are observed. There are no hardcoded secrets. The CORS middleware is set to allow all origins (`allow_origins=["*"]`), which is permissive but common for public APIs and not a direct code execution vulnerability.
Updated: 2025-12-11GitHubโ†’
0
0
Low Cost
drewelewis icon

ai_m365_mcp

by drewelewis

Sec9

A Python-based MCP client for interacting with Microsoft Teams, primarily for learning, testing, and prototyping AI-powered automation and integration.

Setup Requirements

  • โš ๏ธRequires Azure AD App Registration with specific Microsoft Graph delegated permissions (e.g., Chat.ReadWrite, ChannelMessage.Send).
  • โš ๏ธRequires a valid `TEAMS_ACCESS_TOKEN` obtained via Azure CLI or manually, which needs to be configured as an environment variable.
  • โš ๏ธPython 3.8+ and pip dependencies (`mcp`, `httpx`, `fastapi`, `pydantic_settings`, `dotenv`) must be installed.
Verified SafeView Analysis
The client uses standard Microsoft Graph API authentication mechanisms via access tokens and warns against hardcoding secrets by recommending environment variables and `.env` which is `.gitignore`d. It relies on Azure AD for permissions and token management. No `eval` or obvious malicious patterns were found in the provided client code. The security primarily depends on secure management of the `TEAMS_ACCESS_TOKEN` and correctly configured Azure AD app permissions.
Updated: 2025-12-12GitHubโ†’
0
0
Medium Cost
arifdegirmenci icon

mcp_server

by arifdegirmenci

Sec7

A simple MCP server that retrieves bank accounts from the TreasuryPath API and enables question-answering using an Ollama LLM.

Setup Requirements

  • โš ๏ธRequires TreasuryPath API Key, API Secret, and Company ID (implies a TreasuryPath account).
  • โš ๏ธRequires Ollama to be installed and running locally, with the specified LLM model (e.g., 'llama3') pulled.
  • โš ๏ธRequires Python 3.x and dependencies installed in a virtual environment.
Verified SafeView Analysis
Sensitive API keys (TREASURY_API_KEY, TREASURY_API_SECRET) are loaded from a .env file, which is good practice. The server and Ollama instance are configured to run on localhost by default, limiting external network exposure. User input for LLM questions is combined with structured bank account data (rather than raw data), which helps mitigate basic prompt injection, but does not eliminate all potential LLM prompt injection risks. No obvious 'eval' or direct arbitrary code execution from user input is present in the provided code snippets.
Updated: 2025-12-03GitHubโ†’
0
0
Low Cost
iamthite icon
Sec9

Manages and tracks personal expenses using a Model Context Protocol (MCP) server.

Setup Requirements

  • โš ๏ธPython 3.14+ required (as per pyproject.toml)
  • โš ๏ธRequires `uv` package manager
Verified SafeView Analysis
The server uses parameterized SQL queries for SQLite operations, which is good practice to prevent SQL injection. It does not use `eval` or similar dangerous functions. Data is stored locally in an SQLite database, and the server runs on `stdio` transport, limiting direct network exposure. No hardcoded secrets were found.
Updated: 2025-12-13GitHubโ†’
0
0
Low Cost
novatecoder icon

kis_mcp_server_adk

by novatecoder

Sec6

An MCP server providing read-only access to Korea Investment & Securities (KIS) REST API for stock quotes and account information, with hidden trading capabilities.

Setup Requirements

  • โš ๏ธRequires Python >= 3.13
  • โš ๏ธRequires 'uv' package manager for dependency management and execution
  • โš ๏ธMandatory KIS API Key and Secret (requires registration with Korea Investment & Securities)
  • โš ๏ธMandatory KIS Account Number (CANO)
  • โš ๏ธRequires manual creation and configuration of a '.env' file
Review RequiredView Analysis
The README states the server is 'Read-Only' and '๋งค์ˆ˜/๋งค๋„์™€ ๊ฐ™์€ ์ฃผ๋ฌธ ๊ธฐ๋Šฅ์€ ํฌํ•จ๋˜์–ด ์žˆ์ง€ ์•Š์•„ ์‹ค์ˆ˜๋กœ ์ธํ•œ ๊ฑฐ๋ž˜๋ฅผ ๋ฐฉ์ง€ํ•ฉ๋‹ˆ๋‹ค.' (trading functions are not included to prevent accidental transactions). However, the `src/kis_mcp_server_adk/server.py` file explicitly defines and exposes an `order-stock` tool via `@mcp.tool` decorator, which allows for buy/sell operations. This discrepancy between documentation and actual functionality is a critical security concern as it implies the server can perform sensitive trading actions. While secrets are managed through `.env` files (good practice), the access token is cached in a local `token.json` file, which poses a minor risk if the server's filesystem is compromised. The server also binds to `0.0.0.0` by default, making it accessible from any network interface, necessitating proper network security configurations.
Updated: 2025-11-23GitHubโ†’
0
0
Medium Cost
scopweb icon
Sec3

Translates Divi pages and WordPress posts by extracting translatable text, allowing an LLM to translate while preserving original structure and Divi shortcodes, then reassembling the content.

Setup Requirements

  • โš ๏ธRequires Go 1.21+ installed to build the executable.
  • โš ๏ธRequires Claude Desktop with MCP support to function as intended.
  • โš ๏ธWordPress mode requires a MySQL database connection, configured via environment variables (WP_MYSQL_USER, WP_MYSQL_DATABASE are mandatory). The user must ensure the database exists and is accessible.
Review RequiredView Analysis
The server has a critical path traversal vulnerability. The 'inputPath' and 'outputPath' parameters for file-based operations (e.g., 'extract_divi_text', 'start_divi_translation') are taken directly from user input and used without sufficient sanitization or restriction to a designated directory. This could allow an attacker to read from or write to arbitrary file system locations outside the intended working directory. WordPress MySQL credentials are handled via environment variables, which is standard practice, but requires users to securely manage their '.env' file or environment configuration.
Updated: 2026-01-18GitHubโ†’
0
0
Low Cost
mbeps icon
Sec9

A template for building Model Context Protocol (MCP) servers to expose tools and resources for AI interaction.

Setup Requirements

  • โš ๏ธPython 3.12+ only
  • โš ๏ธRequires uv for dependency management and execution
Verified SafeView Analysis
The server template uses Pydantic for input validation, which helps prevent malformed data from reaching the core logic. Logging is correctly directed to stderr, separating it from the MCP protocol communication on stdout. No 'eval' or similar dangerous functions, hardcoded secrets, or direct network exposures (beyond FastMCP's stdio transport) were identified in the provided source code. The code is clean and follows good practices for a foundational template, making it generally safe to run as provided. Any security risks would likely stem from extensions made to the template or its deployment environment.
Updated: 2025-12-13GitHubโ†’
0
0
Medium Cost
sathishkannan162 icon

simple-mcp-server-hono

by sathishkannan162

Sec5

A Model Context Protocol (MCP) server that provides AI agents or other applications programmatic access to PostgreSQL database schema and a read-only SQL query execution tool.

Setup Requirements

  • โš ๏ธRequires an external PostgreSQL database with `DATABASE_URL` configured.
  • โš ๏ธDesigned for deployment on Cloudflare Workers, requiring `wrangler` CLI and a Cloudflare account for production deployment.
  • โš ๏ธThe `execute-read-queries` tool allows direct execution of read-only SQL queries, necessitating robust input sanitization from clients to prevent SQL injection risks.
Review RequiredView Analysis
The `execute-read-queries` tool directly executes user-provided SQL queries (using `client.query(sql)`). While wrapped in a `READ ONLY` transaction to prevent writes, this poses a significant risk for read-only SQL injection, potentially leading to sensitive data leakage, denial-of-service via complex queries, or other resource abuses if the `sql` input is not strictly validated and sanitized by the consuming application before being passed to this endpoint. The current `zod.string()` validation for `sql` is insufficient for preventing SQL injection.
Updated: 2025-11-19GitHubโ†’
0
0
Medium Cost
dscv103 icon
Sec9

Recommends tools for step-by-step reasoning, tracks agent thought processes, and learns tool-chain patterns.

Setup Requirements

  • โš ๏ธRequires Node.js 20+.
  • โš ๏ธRequires an existing MCP client to interact with.
  • โš ๏ธCreates a local SQLite database file (mcp-thinking.db) by default for persistence.
Verified SafeView Analysis
The server primarily operates locally, using SQLite for persistence and standard I/O for MCP communication, which minimizes external network attack surfaces. Input validation (Valibot) is used for incoming MCP requests, and SQLite queries are prepared, preventing SQL injection. No 'eval' or direct execution of user-supplied commands found. The main potential risk would be if the configured DB_PATH points to a sensitive system location, but this is a configuration rather than a code vulnerability.
Updated: 2025-12-20GitHubโ†’
0
0
Low Cost
drogariamatogrossoti-wq icon

mcp-supabase-server

by drogariamatogrossoti-wq

Sec8

This server acts as a backend API for a Marketing/Content Platform (MCP) to facilitate product searches within a Supabase database.

Setup Requirements

  • โš ๏ธRequires a Supabase project URL and API key.
  • โš ๏ธRequires a secret key (MCP_SECRET) for API authentication.
  • โš ๏ธRequires Node.js environment.
Verified SafeView Analysis
Secrets (Supabase credentials, MCP_SECRET) are correctly loaded from environment variables using dotenv. Access control is implemented via an 'x-api-key' header against MCP_SECRET. The Supabase client library is used for database interactions, which generally handles SQL parameterization and prevents injection, though direct string interpolation within `or` clauses could theoretically be a minor concern if not fully abstracted by the library. No 'eval' or malicious patterns were found.
Updated: 2025-12-01GitHubโ†’
0
0
Medium Cost
stateset icon
Sec9

Provides a robust Model Context Protocol (MCP) server for comprehensive e-commerce operations management.

Setup Requirements

  • โš ๏ธRequires a valid `STATESET_API_KEY` for integration with the StateSet API, which may be a paid service.
  • โš ๏ธFor production deployments, a Docker or Kubernetes environment is highly recommended, requiring familiarity with these platforms.
  • โš ๏ธFor advanced caching and distributed setups, a Redis instance is recommended and utilized by optional features.
Verified SafeView Analysis
The project demonstrates a strong focus on security. It utilizes `dotenv` for environment variable management, preventing hardcoded secrets. `src/middleware/security.ts` implements `helmet` for security headers, robust CORS configuration, request sanitization (removing null bytes), API key validation, and IP whitelisting. Input validation is rigorously enforced using `Zod` schemas (`src/tools/schemas.ts`). Error handling (`src/middleware/error-handler.ts`) is structured to prevent sensitive information leakage and offers actionable suggestions. These measures collectively make the server highly secure.
Updated: 2025-12-12GitHubโ†’
0
0
Low Cost
buyan-kh icon

designi

by buyan-kh

Sec4

Centralized management and serving of user design preferences (color, typography, tone, keywords) for AI agents to ensure aesthetic consistency.

Setup Requirements

  • โš ๏ธRequires Node.js 18+
Verified SafeView Analysis
The server has no authentication or authorization mechanisms implemented. The CORS policy `Access-Control-Allow-Origin: '*'` allows requests from any origin. This means any client that can reach the server's `/mcp` endpoint can call `get_design_identity` and `update_design_identity` tools, potentially allowing unauthorized access to read and modify the design profile. While suitable for a strictly local, single-user environment, it is highly insecure for public deployment without adding robust authentication and authorization layers. There is no `eval` or obvious malicious code patterns, and Zod is used for input validation, which is good for data integrity.
Updated: 2025-12-02GitHubโ†’
PreviousPage 747 of 760Next