Every Grade-A MCP server
13,530 of the 45,787 Model Context Protocol servers scanned by the Canopii Trust Index score 90–100/100 — a security grade of A, or 30% of the corpus.
These servers pass every security control that applies to them, with enough of their source verifiable for us to say so. No confirmed injection sinks, no committed credentials, no known-vulnerable dependencies left unpatched.
- Average score
- 92/100
- Share of scanned corpus
- 30%
- Verified against a live endpoint
- 494
The 100 highest-scoring
Ranked by score, then by how much of the server we could verify.
An MCP (Model Context Protocol) server implementation for Microsoft Teams integration, providing capabilities to read messages, create messages, reply to messages, mention members.
AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints
Run and manage H Company's Computer-Use Agents from any MCP client.
Manage Coder workspaces, templates, and cloud development environments
Declarative agent orchestration for engineering teams
Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.
XML tools for agents: XPath queries, inspection, and schema validation in Rust.
Autonomous log surgery & secret redaction MCP server for AI coding agents.
Agent memory engine — 106 MCP tools, self-hosted, single Rust binary
Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real.
PAN-OS firewall MCP server: scoped, audited, two-person change control. Rust.
UniFi Network MCP server: scoped tools, audited two-person change control. Rust.
mcp-1panel is an implementation of the Model Context Protocol (MCP) server for 1Panel.
🐘 Give AI assistants full PostgreSQL DBA superpowers — 30+ tools for performance analysis, bloat detection, lock/deadlock monitoring, autovacuum & schema inspection. No extensions required. PG 12-18.
MCP server that lets AI agents run maigret, an OSINT tool that searches a username across thousands of sites
Local Go repository call graphs and structural analysis for coding agents over stdio.
Universal MCP to LSP bridge exposing language server code intelligence as MCP tools
Open-source local MCP connector for intervals.icu (Go binary)
Query WHOIS/RDAP information for domains, IP addresses, CIDR prefixes and ASNs. Self-hostable.
Automate tasks, processes, and approvals with AI.
Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.
Read and write a self-hosted TriliumNext knowledge base over its ETAPI.
Search, resume and hand off coding-agent sessions: Claude Code, Codex, Gemini, Antigravity and more.
Exact polynomial checks, sparse expansion and verified rule memory. Local MCP tools, no model key.
A Model Context Protocol server for Excel file manipulation
Shared session bus for Claude, Codex, Copilot, Cursor, Gemini, AGY, Grok, and OpenCode.
Create, edit, validate, preview, and render Shotcut projects through AI clients.
🚀 Self-hosted TikTok & Douyin scraper and no-watermark video downloader — async REST API, MCP server, CLI and web console for posts, profiles, comments and playlists. Self-healing identity pool, PostgreSQL archive, one docker compose up. 抖音、TikTok 数据采集与无水印视频下载 API,自托管,支持 MCP 调用与 Docker 一键部署。
Knowledge graph for token-efficient code reviews -- semantic search and call-graph resolution across your codebase.
24 public-data Apify actors (sanctions, SEC Form D, WARN, FMCSA, SEO, jobs) as MCP tools.
MCP server for Active Directory over LDAP: users, groups, computers, OUs and security auditing.
Neuro-symbolic agents with verified memory. MCP math tools, an algebra repair Skill, and an open challenge. Verify solutions, learn checked rules, and reuse.
MCP Server for interacting with Android Devices.
Read-only VMware vCenter/ESXi monitoring with 27 MCP tools. Code-level safety.
VMware vSphere storage management with 11 MCP tools: datastores, iSCSI, vSAN.
Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
Discover and quote quality-gated private AI inference without creating or buying a locker.
Create designed slide decks from a prompt, notes, or an outline, then export them or share a link.
Python MCP Server for Kestra — you can use it as a tool in Kestra's AI Agents
An MCP server retrieving transcripts of YouTube videos
Standalone MCP server for Obsidian vaults — hybrid search, notes & files, memory, tasks, OAuth 2.1
⚡ Control Apache Airflow with natural language via MCP. Chat with your workflows using Claude, GPT, or any LLM — no REST API calls needed. Supports Airflow 2.x (43 tools) & 3.0+ (45+ tools).
ReActMCP is a reactive MCP client that empowers AI assistants to instantly respond with real-time, Markdown-formatted web search insights powered by the Exa API.
Indian stocks: NSE/BSE filings read by AI with price reactions, fundamentals, IPOs and FPI flows.
Real-time social media and prediction market integrity layer for traders, funds, and quant desks.
MCP server for Polarion ALM — read and write documents and work items
Read/write a self-hosted Gramps Web family tree where every fact carries a citation.
MCP server for Kylas CRM: create, search, and manage leads. Requires KYLAS_API_KEY.
8 read-only MCP platform entries; support is operation-specific; merchant live acceptance pending
Dog-specific aging tools: HAGR dog rows, dog orthologs, dose translation, DAP codebooks, FDA FOI.
Genealogical research in the US National Archives Catalog: records, transcriptions, page images.
Verified issuer earnings calendars and results documents
Resemble AI: deepfake, AI-text, and site agent detection, Detect Agents, intelligence, watermarks.
Send Signal messages and read replies through your own signal-cli JSON-RPC daemon (unofficial).
Local MCP framework for bounded cross-model delegation, routing and evidence verification.
Reference verification MCP server for CSL bibliographies, evidence, and audited writes.
Bounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.
Bounded, source-write-free Rust correctness tools grounded in Cargo and rustc output.
Directum RX for AI assistants: assignments, documents, boards, projects, any entity, system help
Local-first TDLib Telegram MCP server with 126 tools, account isolation and production guardrails.
MCP server for App Store Connect: releases, TestFlight, reviews, reports. Read-only by default.
MCP server for App Store Connect: releases, TestFlight, reviews, reports. Read-only by default.
Read-only MCP server for licensed Healthpoint HL7 FHIR API access.
Delegate summarising, extraction, classification and OCR to the macOS 27 on-device model.
Juniper Junos/SRX MCP server: scoped, audited, two-person change control. Rust.
Rust development tools for offline context, compiler diagnostics, focused tests and Cargo execution.
JVM dependency intelligence for AI assistants via Maven Central
Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2
Host apps in the EU from your assistant: App Store, Docker, GitHub, databases, logs.
🦀 A high-performance code agent written in Rust, combining the best features of WCGW for maximum efficiency and semantic capabilities.
Read-only NVIDIA GPU monitor: bottlenecks, VRAM forecast, crash diagnosis, pre-render check, jobs.
🌍 Terraform Model Context Protocol (MCP) Tool - An experimental CLI tool that enables AI assistants to manage and operate Terraform environments. Supports reading Terraform configurations, analyzing plans, applying configurations, and managing state with Claude Desktop integration. ⚡️
Instagram & Facebook MCP server for Meta Marketing API v25 with secure token redaction, cursor pagination, and OSS tooling for campaigns, ad sets, ads, creatives, insights, and reports.
MCP server to list, load, explain, and validate Agent Skills.
Talk to roadmaps with AI. Query and manage bars, OKRs, ideas, and launches.
Render, analyze, and verify audio (WAV/FLAC/mp3/ogg) offline and deterministically via MCP tools.
MCP server for guiding Coding Agents via end-to-end requirements to implementation plan pipeline
Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.
MCP server for structured access to Gramps Web genealogy data
Read-only access to a Crossplane control plane: resources, claims, packages, compositions.
MT5 strategy development with 87 tools. Backtest, optimize, debug MQL5 EAs on macOS/Linux.
The IDE for agents: read by symbol, edit against a revision, validate with your own build, revert.
Control Miro whiteboards with AI. 110 tools for boards, diagrams, mindmaps, comments, SVG.
mcp-gitee is a Model Context Protocol (MCP) server implementation for Gitee. It provides a set of tools that interact with Gitee's API, allowing AI assistants to manage repository, issues, pull requests, etc.
AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.
The IDE for agents: read by symbol, edit against a revision, validate with your own build, revert.
Generate more accurate Terraform and automate workflows for HCP Terraform and Terraform Enterprise
Local shell history and AI agent sessions over MCP: search commands, failures, risk and git changes
MCP server for lossless YAML 1.2 parsing, formatting, and validation (pure Rust).
MCP server for reverse engineering tasks in Ghidra 👩💻
Unofficial read-only MCP server for Snappfood & SnappMarket: search food and groceries, compare prices, find deals.
A bridge between Streamable HTTP and stdio MCP transports
MCP server exposing rlg log streams to LLM agents via JSON-RPC 2.0 over stdio.
Scan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration.
Evaluate an MCP server with passmcp and verify its attestations, from inside the agent. Read-only.
Let AI agents use any website you're logged in to. Sessions stay encrypted on your machine.
Unofficial read-only MCP server for Digikala (دیجیکالا), Iran: search products, compare every seller and price, price history, reviews and deals. For Claude, Cursor and Copilot via uvx.
Official data.gouv.fr Model Context Protocol (MCP) server that allows AI chatbots to search, explore, and analyze datasets from the French national Open Data platform, directly through conversation.
Manage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync.
Control Parallels Desktop VMs from MCP: power, screenshot, exec, keyboard, sequences. macOS only.
What a A actually means
Scores are deterministic and evidence-based: every point traces to a named control evaluated against the server's source, and a confirmed flaw caps the score outright regardless of what else passes. Grades are not endorsements and not a substitute for your own review — read the full methodology or see how the whole ecosystem scores.
Maintain one of these? Every server page carries an embeddable badge that updates on each rescan.