MCP Server Triage · 2026-07-17

33 MCP servers, sorted by trust & fit

A security-first shortlist of the repos you pasted — evaluated on trust-surface first, then maintenance, then fit to a Python/Go/Flutter/dev-tooling workflow. Popularity was only a tiebreaker. A local MCP server runs with your filesystem & network rights and can inject into the model's context, so this is a security call, not a star count.

33
Evaluated
5
Tier 1 · Keep
7
Tier 2 · Conditional
0
Malware found
Tier 1 · Keep

Install-worthy — high fit, clean audited source

Local, auditable, pip/cargo, no API keys. Source read end-to-end for these.
nickclyde/duckduckgo-mcp-server Keep
PythonMIT★ 13412026-07

Zero-config web search + page fetch, no API key. The safe default search server.

✓Hits only html.duckduckgo.com. No secrets, no shell. Most-adopted repo on the list.
riponcm/projectmem Keep
PythonMIT★ 1872026-07

Coding-agent memory — decisions, bugs & gotchas carried across sessions.

✓Best trust evidence of the list: zero network calls, read-only git, and it redacts API keys/tokens before storing (redaction.py).
lyonzin/knowledge-rag Keep
PythonMIT★ 2322026-07

Local RAG over your own PDFs / markdown / code (BM25 + semantic + rerank).

✓Audited: no outbound calls, 127.0.0.1-only; subprocess use is benign (nvidia-smi, one-time model download).
reflex-search/reflex Keep
RustMIT★ 672026-07

Sub-100ms offline code/symbol search for agents — search_code, find_references.

✓Core server fully local; the only network path (ask/LLM) is opt-in and unconfigured by default.
ymw0407/auth-fetch-mcp Keep
TypeScriptMIT★ 312026-07

Login-gated fetch: opens Chromium so you authenticate, returns cleaned HTML. (The one you pasted first.)

✓Above-average security — full SSRF blocklist re-validated on every request; sessions stay on local disk.
Tier 2 · Conditional

Strong, but a real cost or caveat gates them

Worth it once a specific need, key, or trust decision is in place.
konippi/servo-fetch Cond.
RustApache-2.0★ 1312026-07

Most polished fetch — Servo engine → Markdown, respects robots.txt.

!Heavyweight build; large JS-rendering attack surface by nature.
mikechao/brave-search-mcp Cond.
TypeScriptGPL-3.0★ 1212026-05

Capable multi-type search with built-in auth/audit interceptors.

!Needs a Brave API key and is GPL-3.0. DDG already covers the zero-config case.
sitbon/toolport Cond.
RustMIT★ 912026-07

Local MCP gateway — one port fronts all servers, secrets in OS keychain, SSRF guard, approval broker, rug-pull detection.

!Security-positive design, but it's a central chokepoint holding all your secrets and very young. Read its source before it becomes your secret store.
samvallad33/vestige Cond.
RustAGPL-3.0★ 5852026-07

Novel "causal backward-reach" memory; real 166-file codebase.

!Blessed install runs an opaque prebuilt npm binary, not the source. Watch/experiment via cargo build-from-source only.
whw23/searxng_http_mcp Cond.
PythonMIT★ 102026-07

Wrapper over a self-hosted SearXNG metasearch (OpenSSF badges, constant-time auth).

!Clean, but only worth the heavier setup if you want self-hosted privacy metasearch.
drolosoft/go-docs-mcp Cond.
GoMIT★ 92026-05

Dir-locked local document reader (PDF/DOCX/CSV/images, OCR).

▲read_url does an unguarded http.Get (no SSRF guard). Fine if you set DOCS_MCP_DIR and skip read_url.
back1ply/agent-skill-loader Cond.
TypeScriptMIT★ 142026-04

Surfaces your SKILL.md skills to any MCP client as prompts/tools.

▲Reads skill files as prompt text → prompt-injection vector. Safe only pointed at your own trusted skill dirs.
Tier 3 · Skip

Not worth running — with the reason why

Mostly off-stack or off-domain. Several are fine software; a few carry worse trade-offs.
Off-stack — game / creative / media
ahujasid/blender-mcp24k★ and canonical, but no 3D work here — and it runs Python inside Blender by design.
IvanMurzak/Unity-MCP3.6k★, reputable; executes C# in the Unity editor. Off-stack.
diivi/aseprite-mcpSolid pixel-art tool; no pixel-art workflow.
Erodenn/godot-mcp-runtimeCleaner of the two Godot servers (arg-array spawn, path-validation, zero deps) — keep in mind if Godot ever.
n24q02m/better-godot-mcpRicher tools but leans on an external beta mcp-core dep — extra trust hop.
NAJEMWEHBE/unreal-ai-connection143 Unreal editor tools over a local socket. Off-stack.
guimatheus92/mcp-video-analyzerVideo → transcript/frames/OCR; heavy deps (browser+ffmpeg). MAYBE only on a concrete need.
j-east/pixel-surgeon-mcpGemini image gen/repair; 5★, committed dist/. Off-stack.
cfpramod/open-museum-mcpLowest-risk in its bucket, but a niche domain with no tie to your work.
Off-domain — misc
lacausecrypto/mcp-sports-hubMost hardened server in its bucket (127.0.0.1 bind, DNS-rebind protection) — just no use here.
PaSympa/discord-mcpFull Discord control; broad bot-token scope not worth it absent a need.
jkiley129/steam-mcpGame-library trivia; committed tarball (build from source if ever).
afshinator/mcp-server-pexelsClean stock-media search; irrelevant unless the notes app needs stock imagery.
arikusi/nakkasAnimated-SVG generator; off-topic.
Over-engineered or licensing
l33tdawg/sageMemory run through a BFT consensus node + federation — massive attack surface for solo use.
sheawinkler/ContextLatticeBSL-1.1 — source-available, not OSS, with paid tiers and cross-machine network surface.
fabio-rovai/open-ontologiesWell-made OWL/RDF ontology engineering — outside your workflow.
Right category, wrong fit
gamosoft/NoteDiscovery2.6k★, but overlaps your own Flutter notes app — a competitor, not a tool.
HasanJahidul/git-insight-mcpOn-topic (semantic git queries) but only 2★ — audit source before trusting.
Different job — reconsider if the need arises
sitbon/maggMCP aggregator that lets the model auto-install servers — privilege-escalation surface; only with auto-add disabled.
hidai25/eval-viewAgent regression/snapshot testing — genuinely useful if you build agents.
Keep — run today, clean & high-fit Conditional — gated by a key, setup, or trust call Skip — off-stack or worse trade-off ▲ source-level security caveat