MCP servers · shortlist
Best MCP servers
The MCP ecosystem grows by hundreds of servers a month and most lists go stale within weeks. This one is generated from the live registry, so it reflects what is actually published today — ranked by how completely the record is documented, not by paid placement.
How this list was ordered. There is no reliable popularity signal in the source registries, so entries are ranked by how completely the record is documented — a substantial description plus a documentation, repository or base URL — and then alphabetically. 3,199 mcp servers in this scope clear the content bar; the top 24 are shown. A place here is not an endorsement or a paid slot.
Shortlisted entries
- 01
CTRLRun/ctrlrun
Execution safety for AI agent actions. ctrlrun mcp-operator exposes the approval queue as tools (listpendingapprovals, approve, deny, resolve, plus receipts, effects, stats and inspectaction), so the human who has to answer a held action answers it from the assistant they are already in; read tools answer without a credential and write tools refuse without one that names a person. Separately, the gateway proxies any MCP server so every tool call is checked against a YAML policy before it runs: allow, hold for a human, or deny. Approvals are single-use and bound to the hash of the exact action, one logical effect runs at most once across processes and hosts, and an unknown outcome is…
Security auth: None
- 02
paulf280-ui/solana-safe-sniper-mcp-template
Pre-trade safety check for Solana tokens. checkcabalrisk traces holder funding to shared sources, flags same-block bundle buys, coordinated dumps and serial-launcher deployer history, and returns one Exit-Liquidity Risk verdict with a 0-100 score before an agent buys. Holder concentration counts only real wallets — LP pools and locked supply are excluded and labelled, not scored as a whale. The deployer is resolved from the token's Create transaction rather than the mutable creator field, which pump.fun's ownership transfer can rewrite. A second tool, checkwalletintoken, screens one specific wallet against one token — rank, share of supply, whether it funded a coordinated cluster, o…
Finance & Fintech auth: API Key
- 03
hypeprinter007-stack/anchor-x402-mcp
16 paid wallet & utility tools on Base + Solana. 9 commodity primitives — OFAC sanctions screen, bundled wallet intel (balances + activity + identity + sanctions in one call), dual-chain hash anchoring, signed decision attestations, mainnet tx + calldata decode, ENS + Bonfida SNS resolve, USD prices, datetime parse. Plus an async due-diligence investigator (/v1/investigate, $7.77, signed markdown report + dual-chain anchor), a verifiable signed RNG (/v1/roll), and 5 universal LLM endpoints — roast, yes/no oracle with on-chain anchored verdict (Base + Solana), TL;DR (URL or text), aura read (color + tier + score), academic grade. Pay-per-call USDC via x402, no API keys, no accounts.…
Finance & Fintech auth: API Key
- 04
MikeyPetrillo/Agent402
The headless browser, live web search, OCR, and durable wallet-keyed memory an agent's sandbox doesn't have - a catalog of 500+: 400+ pay-per-call tools + 100+ curated skill packs, every one tested, priced, and settled on-chain - rented per call via x402 (USDC on Base + 10 more chains (Solana, Polygon, Arbitrum, Monad, Celo, Avalanche, Sei, Optimism, Stellar, Algorand), or USDG on Robinhood Chain - 12 chains) or free with proof-of-work on the 200+ pure-CPU tools. Also an x402 Index + Smart Order Router that finds the cheapest healthy tool across the whole ecosystem. Hosted remote connector at agent402.tools/mcp. Every paid endpoint answers x402 and MPP (Machine Payments Protocol)…
Aggregators auth: None
- 05
jamesdfinance-dev/lazaretto-mcp
Check whether anything you depend on is known malware, before an agent installs it. checklockfile takes a package-lock.json, yarn.lock or pnpm-lock.yaml and matches every pinned version against published malicious-package advisories in one call, free and with no API key, catching compromised releases like chalk@5.6.1 while leaving their clean releases alone. scanartifact adds deterministic behavioral analysis (no LLM in the serving path) for credential theft, exfiltration, obfuscation, prompt injection and install-time droppers, with the file, line and evidence that triggered it; verdicts are SHA-256-bound so you can re-verify what landed on disk. Paid scans settle at $0.03 USDC…
Security auth: API Key
- 06
peopleworks/SignsofAI
#⃣ - Explainable AI-writing detection and originality checking for teachers, students and writers, in English and Spanish. analyzeaiwriting returns a 0–100 score and every tell behind it — overused vocabulary, rhetorical crutches, syntactic patterns and sentence-rhythm burstiness — each with the matched text and a concrete fix, instead of a black-box percentage. checkoriginality returns the shared passages between documents as evidence; checkcitations cross-checks a bibliography against the text offline; comparetobaseline runs Burrows's Delta against the same writer's earlier work; inspectcharacters finds hidden and lookalike characters; writereport exports the evidence as a do…
Education auth: None
github.com/peopleworks/SignsofAI/tree/main/src/SignsOfAI.Mcp ↗
- 07
sF1nX/x402station
Preflight by x402station.io — infrastructure for x402 agentic commerce. Six capability directions (Discover/Evaluate/Pay/Monitor/Recover/Analyze). Agents call it before every PAYMENT-SIGNATURE to detect decoys, zombie endpoints, dead services, and price traps. Tools: preflight ($0.001), forensics ($0.001), catalogdecoys ($0.005), alternatives ($0.005), whatsnew ($0.001), buycredits ($0.50 = 1000 prepaid), watchsubscribe ($0.01) + free creditsstatus/watchstatus/watchunsubscribe. Plus free anonymous preflight-trial for self-test. Probes ~50k endpoints on agentic.market every 10 min. Open dataset: huggingface.co/datasets/x402station/preflight-dataset-v01. npx -y x402station-mcp.
Aggregators auth: None
- 08
sebastienrousseau/camt053-mcp
ISO 20022 bank-statement parsing + reversing entries (camt.053 Bank-to-Customer Statement). 19 tools + 3 resources + 4 guided prompts across message-type discovery, return-reason lookup, schema introspection, IBAN/BIC/LEI validation, camt.053 parsing + XSD validation, Nov 2026 CBPR+ cliff readiness check, curated SEPA / CBPR+ / HVPS+ rulebook citation lookup, accounting-platform journal export (Xero + QuickBooks Online), LLM-driven entry classification via MCP Sampling, entry listing/filtering, and one-shot validated reversing-entry XML generation. Built on the camt053 library (100% line + branch coverage, SLSA Build L3 + PEP 740 attestations, Apache-2.0). Install pip insta…
Finance & Fintech auth: None
- 09
taniwhaai/arai
Policy enforcement for AI coding agents derived from existing instruction files (CLAUDE.md, .cursorrules, .windsurfrules, .github/copilot-instructions.md) — no separate YAML to maintain. Rules with prohibitive predicates (never, forbids, mustnot) emit permissionDecision: deny to block tool calls in Claude Code; advisory rules inject context. PostToolUse is correlated with PreToolUse to produce per-rule obeyed/ignored compliance verdicts in a local JSONL audit log. MCP tools — araiaddguard (register rules mid-session), arailistguards, arairecentdecisions — work in any MCP client (Claude Desktop, Cursor, Windsurf, Cline). No network on the hook hot path; opt-out anonymous tel…
Security auth: None
- 10
rdanieli/tentra-mcp
AI-native architecture platform for engineering teams. Describe a system in natural language (e.g. "payment service with Stripe, Kafka, PostgreSQL") → get an interactive typed diagram with 167 cloud components → export to 14 production frameworks (Java Spring Boot, Python FastAPI, Go chi, Rust Axum, .NET, Kotlin Ktor, Ruby Rails, Elixir Phoenix, Docker Compose, Terraform, Mermaid, ADR, and more). Drift detection (syncarchitecture) scores saved diagrams against live code 0–100 with a structured diff. 9 quality-lint rules catch orphans, SPOFs, god services. Also includes a secondary persistent code-graph layer for AI coding agents (free offline via npx tentra-mcp --local i…
Architecture & Design auth: None
- 11
cogdepot/mcp-server
Official server for cogDepot, an anonymous broker where agents publish capability listings, negotiate terms, and form direct peer-to-peer deals backed by escrow and two-sided reputation. Five tools need no account at all - what the broker does and what it costs, how to get a key, a preview of the live board, any agent's public reputation record, and the marketplace's aggregate stats; with a key, read balance and escrow holds, negotiation threads, sealed deals and their reveal packages, and rate a counterparty. Prices come from the live discovery document at call time rather than being baked into the package, and an unreachable API is reported as stale rather than answer…
Agreements & Coordination auth: None
- 12
JeanFrancoisGagne/crapkit
Read-only view of a repository's CRAP scores, one per function: ccn^2 (1 - cov)^3 + ccn, cyclomatic complexity joined to the branch coverage your own test command already writes. Twelve tools (getnextitem, listworklist, getfunctionbrief, getfunctionhistory, checkgate, checkconfig, listcoupledfiles, listduplicatefunctions, getratchetreport, gettrend, listruns, listclaims) hand the agent the worst function to fix next with its own source, its uncovered lines, its change-coupled files, its near-duplicates and a gate verdict on the edited file. None of the twelve runs a test suite or edits source files. Reads Python, TypeScript, JavaScript, Go, Rust, Swift, Java, C/C++ and…
Developer Tools auth: None
- 13
Fabio662/yieldagentx402-sdks
Custody-free, policy-gated, receipt-backed execution layer for AI agents. 16 MCP tools across 18 chains (Base, Ethereum, Bitcoin native, Starknet, NEAR, Solana, Stacks, BNB, Rootstock, Filecoin, Aptos, Sui, TON, Tron, XRPL, Stellar, Algorand). One NEAR MPC key authority signs on EVM and BTC, no private keys held anywhere. ShadeGuard policy enforcement, Intel TDX TEE attestation, HMAC-SHA256 receipts, Filecoin and BTFS anchored. x402 protocol settlement with 0.25 percent protocol fee. Public discovery with no signup needed: call yaxgetcapabilities without auth. Instant test key (5 USD cap, 7 day) via POST /api/apply. Install via npx agentx402-mcp-server.
Finance & Fintech auth: None
- 14
ARADIA-systems/aradia-mcp-server
Turnkey on-premise private Agentic AI systems by ARADIA on dedicated NVIDIA DGX hardware (Spark, Station, B200) with zero cloud data leakage. Operating since 1991, six tools cover hardware sizing (queryhardwarespecs), CapEx token ROI payback modeling (calculateroi), autonomous affiliate onboarding to earn 10% bounties (onboardpartner), and machine procurement via BTCPay Server (BTC/LN/USDT) or Stripe MPP Fiat (executeprocurementorder), plus trackorderstatus and querypartnerstats. Listed on the official MCP Registry (com.aradia/sovereign-hardware). Remote Streamable HTTP / SSE at https://aradia.com/api/mcp or https://aradia.com/api/a2a/mcp-endpoint.php.
Developer Tools auth: API Key
- 15
ostapondo/Plonk
A Mac window manager an agent can drive, plus ten more menu bar utilities behind the same icon: see every monitor and window, arrange a layout across displays in one call, snap a window into zones you drew yourself, save workspaces that relaunch apps into their places, keep-awake, measure the screen, screenshot a window by name even when it is buried behind other windows, annotate it, and read text off the screen on-device — handed back a box per line, so what was read can be pointed at. 20 tools, backed by a native menu bar app over a local-only loopback API; no cloud, no telemetry. npx -y plonk-mcp, or open the shipped .mcpb bundle in Claude Desktop.
OS Automation auth: None
- 16
cq27-dev/rag-rat
Local repo-intelligence index and MCP server for coding agents — "what a repository knows about itself." Hybrid BM25 + vector semantic search, a tree-sitter code graph (callers/callees/imports across Rust, TS/TSX, Kotlin, C/C++, Python) with an optional compiler-grade SCIP oracle, queryable git/GitHub history, and typed, source-anchored repo memories (Invariant, Decision, Risk, …) that persist across sessions. Every result carries provenance — confidence labels and coverage warnings. Keeps source read-only; a background watcher keeps queries fresh. PreToolUse hooks augment grep and flag near-duplicate code as you write it. cargo install rag-rat
Developer Tools auth: None
- 17
juyterman1000/entroly
Auditable context control plane and MCP server for AI coding agents. Compresses context 70–95% (BM25 + entropy + dep-graph knapsack), stabilizes prompt prefixes for provider cache discounts, routes easy tasks to cheaper models (RAVS Bayesian router), and verifies answers locally with WITNESS hallucination guard (0.844 AUROC, $0, ~3 ms). MemoryOS adds local budget-aware working/episodic/semantic memory with decay, safety scanning, and durable persistence. 38 agent integrations (Cursor, Claude Code, Codex, Aider, and more). Ships as MCP server (entroly serve), HTTP proxy, or Python/Rust library. Apache-2.0, local-first. pip install entroly
Knowledge & Memory auth: None
- 18
2s-io/sdk
Unified API for AI agents — 180+ tools across geocoding, weather (NWS), climate stations (NOAA), earthquakes (USGS), tides (NOAA), points of interest (OpenStreetMap), patents (USPTO ODP), US case law (CourtListener / Free Law Project), Federal Register, Wikipedia, scientific papers (arXiv / PubMed / Semantic Scholar), AI summarize / translate / extract / screenshot / image-describe, image compression, DNS / WHOIS, crypto address-validate + EVM gas oracle, OFAC sanctions screening, US Census ACS demographics, airport / ZIP lookup. Sub-cent to a few cents per call in USDC on Base via x402 — no API keys, no signup. npx -y @2sio/mcp
Aggregators auth: API Key
- 19
ni-c/carddav-mcp
Contacts, groups and photos over CardDAV, on any server that speaks the standard — Radicale, Baikal, Nextcloud, SOGo, Fastmail, iCloud. 17 tools. Writes are read-modify-write over the parsed card guarded by ETags, so an X- property some phone wrote in 2014 survives an edit; both group conventions are read and the one written follows what the book already uses; an address book allowlist is enforced where ids are decoded rather than per tool. Card text is treated as untrusted input, because a card claiming somebody's bank details changed does not need the model to run a tool, only to be believed. npx -y @ni-c/carddav-mcp
Communication auth: None
- 20
carloshpdoc/memorydetective
iOS leak hunting and performance investigation. Reads .memgraph (leaks(1)) and .trace (xctrace) files, classifies retain cycles against a 34-pattern catalog (SwiftUI, Combine, Swift Concurrency, UIKit, Core Animation, Core Data, SwiftData, RxSwift, Realm), surfaces a Swift fixTemplate snippet for each match, and bridges to source via SourceKit-LSP. Single-call build+boot+launch fixes the macOS 26.x leaks --outputGraph regression; replayScenario + captureScenarioState close the verify-fix loop. 31 MCP tools, 34 catalog resources, 5 investigation prompts. CI-gateable via verifyFix and compareTracesByPattern. Apache 2.0.
Developer Tools auth: None
- 21
donnywin85/dex-data-mcp
Live multi-chain DEX market data: USD price for any ERC-20 by ticker or contract address, per-venue liquidity depth, raw pool reserves, best execution venue, liquidity-risk depth class, and pre-trade price impact for a specific trade size — across BNB Chain, Polygon, Arbitrum, Base and Avalanche. Every quote returns the USD liquidity backing it and a confidence rating, and a price backed only by a dust pool is refused rather than returned. Free tier needs no API key and no wallet; beyond it, x402 micropayments in USDC on Base. On the official MCP Registry as io.github.donnywin85/dex-data-mcp. npx -y dex-data-mcp
Finance & Fintech auth: API Key
- 22
ophis-fi/ophis
Agent-first intent-based DEX aggregator (self-hosted CoW Protocol). Remote Streamable HTTP at https://mcp.ophis.fi/mcp, no auth, holds no keys. 12 tools: parseintent (natural-language swap to structured intent), resolvetoken (symbol to canonical address, fails closed), listchains, getquote, expectedsurplus, buildorder (bounded, ready-to-sign EIP-712 CoW order with the receiver pinned to the owner), submitorder, lookuptier (fee-rebate tier), getbalances, getportfolio, getgas, gettokenchart. Live across 11 EVM chains: Ethereum, Optimism, BNB Chain, Gnosis, Polygon, Base, Arbitrum, Avalanche, Plasma, Ink, Linea.
Finance & Fintech auth: API Key
- 23
Eszetael/postgres-mcp-hardened
Maintained Rust replacement for the archived @modelcontextprotocol/server-postgres. Writes are refused twice: sqlparser AST validation rejects mutating statements before execution, and the session runs defaulttransactionreadonly with a per-session statementtimeout — so the read-only transaction is the fallback, not the only defence. Single self-contained binary, stdio and Streamable HTTP, schema inspection, column redaction that survives renames and casts, an EXPLAIN cost guard, a hash-chained audit log with --verify-audit, optional OAuth 2.1 RS256, distroless image, signed releases for five platforms. MIT.
Databases auth: OAuth
- 24
HelpCode-ai/anythingmcp
Self-hosted source-available MCP gateway and API-to-MCP bridge. Converts REST, SOAP/WSDL, GraphQL, and SQL/NoSQL databases (PostgreSQL, MySQL, MariaDB, MSSQL, Oracle, MongoDB, SQLite) into MCP tools — no SDK, no code. Imports OpenAPI / Postman / WSDL / GraphQL specs; bridges multiple MCP servers behind one endpoint. Ships with 29 pre-built adapters (DHL, DATEV, Weclapp, Personio, Handelsregister, Shopware 6, VIES, OpenPLZ, Bundesbank, etc.). OAuth2 (PKCE + Client Credentials), Bearer, API Key, WS-Security, TLS certs. AES-256-GCM credential encryption, full audit log, per-user MCP API keys, tool-level RBAC.
Aggregators auth: API Key
Snapshot 2026-09-18. Fields shown are what the source registry stated, not a live probe — check the linked documentation before integrating. See the methodology.