diff --git a/docs/mcp-shortlist.html b/docs/mcp-shortlist.html new file mode 100644 index 00000000..2404fb66 --- /dev/null +++ b/docs/mcp-shortlist.html @@ -0,0 +1,370 @@ +MCP Server Shortlist — Security Triage + + +
+ +

MCP Server Triage · 2026-07-17

+

33 MCP servers, sorted by trust & fit

+

A security-first shortlist of the repos you pasted — evaluated on + trust-surface first, then maintenance, then fit to a Python/Go/Flutter/dev-tooling + workflow. Popularity was only a tiebreaker. A local MCP server runs with your + filesystem & network rights and can inject into the model's context, so this is a + security call, not a star count.

+ + + +
+
33
Evaluated
+
5
Tier 1 · Keep
+
7
Tier 2 · Conditional
+ +
0
Malware found
+
+ + +
+ Tier 1 · Keep +

Install-worthy — high fit, clean audited source

+ Local, auditable, pip/cargo, no API keys. Source read end-to-end for these. +
+
+ +
+
nickclyde/duckduckgo-mcp-server + Keep
+
PythonMIT★ 13412026-07
+

Zero-config web search + page fetch, no API key. The safe default search server.

+
✓Hits only html.duckduckgo.com. No secrets, no shell. Most-adopted repo on the list.
+
+ +
+
riponcm/projectmem + Keep
+
PythonMIT★ 1872026-07
+

Coding-agent memory — decisions, bugs & gotchas carried across sessions.

+
✓Best trust evidence of the list: zero network calls, read-only git, and it redacts API keys/tokens before storing (redaction.py).
+
+ +
+
lyonzin/knowledge-rag + Keep
+
PythonMIT★ 2322026-07
+

Local RAG over your own PDFs / markdown / code (BM25 + semantic + rerank).

+
✓Audited: no outbound calls, 127.0.0.1-only; subprocess use is benign (nvidia-smi, one-time model download).
+
+ +
+
reflex-search/reflex + Keep
+
RustMIT★ 672026-07
+

Sub-100ms offline code/symbol search for agents — search_code, find_references.

+
✓Core server fully local; the only network path (ask/LLM) is opt-in and unconfigured by default.
+
+ +
+
ymw0407/auth-fetch-mcp + Keep
+
TypeScriptMIT★ 312026-07
+

Login-gated fetch: opens Chromium so you authenticate, returns cleaned HTML. (The one you pasted first.)

+
✓Above-average security — full SSRF blocklist re-validated on every request; sessions stay on local disk.
+
+ +
+ + +
+ Tier 2 · Conditional +

Strong, but a real cost or caveat gates them

+ Worth it once a specific need, key, or trust decision is in place. +
+
+ +
+
konippi/servo-fetch + Cond.
+
RustApache-2.0★ 1312026-07
+

Most polished fetch — Servo engine → Markdown, respects robots.txt.

+
!Heavyweight build; large JS-rendering attack surface by nature.
+
+ +
+
mikechao/brave-search-mcp + Cond.
+
TypeScriptGPL-3.0★ 1212026-05
+

Capable multi-type search with built-in auth/audit interceptors.

+
!Needs a Brave API key and is GPL-3.0. DDG already covers the zero-config case.
+
+ +
+
sitbon/toolport + Cond.
+
RustMIT★ 912026-07
+

Local MCP gateway — one port fronts all servers, secrets in OS keychain, SSRF guard, approval broker, rug-pull detection.

+
!Security-positive design, but it's a central chokepoint holding all your secrets and very young. Read its source before it becomes your secret store.
+
+ +
+
samvallad33/vestige + Cond.
+
RustAGPL-3.0★ 5852026-07
+

Novel "causal backward-reach" memory; real 166-file codebase.

+
!Blessed install runs an opaque prebuilt npm binary, not the source. Watch/experiment via cargo build-from-source only.
+
+ +
+
whw23/searxng_http_mcp + Cond.
+
PythonMIT★ 102026-07
+

Wrapper over a self-hosted SearXNG metasearch (OpenSSF badges, constant-time auth).

+
!Clean, but only worth the heavier setup if you want self-hosted privacy metasearch.
+
+ +
+
drolosoft/go-docs-mcp + Cond.
+
GoMIT★ 92026-05
+

Dir-locked local document reader (PDF/DOCX/CSV/images, OCR).

+
▲read_url does an unguarded http.Get (no SSRF guard). Fine if you set DOCS_MCP_DIR and skip read_url.
+
+ +
+
back1ply/agent-skill-loader + Cond.
+
TypeScriptMIT★ 142026-04
+

Surfaces your SKILL.md skills to any MCP client as prompts/tools.

+
▲Reads skill files as prompt text → prompt-injection vector. Safe only pointed at your own trusted skill dirs.
+
+ +
+ + +
+ Tier 3 · Skip +

Not worth running — with the reason why

+ Mostly off-stack or off-domain. Several are fine software; a few carry worse trade-offs. +
+
+ +
+
Off-stack — game / creative / media
+
ahujasid/blender-mcp24k★ and canonical, but no 3D work here — and it runs Python inside Blender by design.
+
IvanMurzak/Unity-MCP3.6k★, reputable; executes C# in the Unity editor. Off-stack.
+
diivi/aseprite-mcpSolid pixel-art tool; no pixel-art workflow.
+
Erodenn/godot-mcp-runtimeCleaner of the two Godot servers (arg-array spawn, path-validation, zero deps) — keep in mind if Godot ever.
+
n24q02m/better-godot-mcpRicher tools but leans on an external beta mcp-core dep — extra trust hop.
+
NAJEMWEHBE/unreal-ai-connection143 Unreal editor tools over a local socket. Off-stack.
+
guimatheus92/mcp-video-analyzerVideo → transcript/frames/OCR; heavy deps (browser+ffmpeg). MAYBE only on a concrete need.
+
j-east/pixel-surgeon-mcpGemini image gen/repair; 5★, committed dist/. Off-stack.
+
cfpramod/open-museum-mcpLowest-risk in its bucket, but a niche domain with no tie to your work.
+
+ +
+
Off-domain — misc
+
lacausecrypto/mcp-sports-hubMost hardened server in its bucket (127.0.0.1 bind, DNS-rebind protection) — just no use here.
+
PaSympa/discord-mcpFull Discord control; broad bot-token scope not worth it absent a need.
+
jkiley129/steam-mcpGame-library trivia; committed tarball (build from source if ever).
+
afshinator/mcp-server-pexelsClean stock-media search; irrelevant unless the notes app needs stock imagery.
+
arikusi/nakkasAnimated-SVG generator; off-topic.
+
+ +
+
Over-engineered or licensing
+
l33tdawg/sageMemory run through a BFT consensus node + federation — massive attack surface for solo use.
+
sheawinkler/ContextLatticeBSL-1.1 — source-available, not OSS, with paid tiers and cross-machine network surface.
+
fabio-rovai/open-ontologiesWell-made OWL/RDF ontology engineering — outside your workflow.
+
+ +
+
Right category, wrong fit
+
gamosoft/NoteDiscovery2.6k★, but overlaps your own Flutter notes app — a competitor, not a tool.
+
HasanJahidul/git-insight-mcpOn-topic (semantic git queries) but only 2★ — audit source before trusting.
+
+ +
+
Different job — reconsider if the need arises
+
sitbon/maggMCP aggregator that lets the model auto-install servers — privilege-escalation surface; only with auto-add disabled.
+
hidai25/eval-viewAgent regression/snapshot testing — genuinely useful if you build agents.
+
+ +
+ +
+ Keep — run today, clean & high-fit + Conditional — gated by a key, setup, or trust call + Skip — off-stack or worse trade-off + ▲ source-level security caveat +
+ + + +