Discover Awesome MCP Servers

opencode-chromium

Provides Chromium browser automation for MCP clients and AI agents, enabling background tab control, observation, session management, and performance diagnostics through tools like browser_run and browser_observe.

@volter/tunnel-mcp

Enables AI agents to manage account, usage, and abuse operations for the Volter tunnel relay.

Doco

Doco is an open-source collaborative document workspace where humans and AI agents write together. Its MCP server gives Claude Code and Cursor stable block-level addressing, version-protected writes, Markdown round-trip, and shared access to the same live documents.

gdrive-rag-mcp

Enables Google# MyData from (JSON (server name is

Awesome MCP Security

Okay, here's a translation of "Security Threats related with MCP (Model Context Protocol), MCP Servers and more" into Chinese, along with some expanded explanations of the potential security threats to help you understand the context better: **Translation:** **中文 (Chinese):** 与 MCP (模型上下文协议)、MCP 服务器及相关内容相关的安全威胁 **Explanation of Potential Security Threats (to help with understanding and context):** To fully understand the security threats, it's important to consider what MCP is and how it's used. Since "Model Context Protocol" isn't a widely known or standardized term, I'll assume it refers to a protocol used to share context or data related to machine learning models. Based on that assumption, here are some potential security threats: * **Data Poisoning:** * **中文 (Chinese):** 数据投毒 (Shùjù tóudú) * **Explanation:** If an attacker can inject malicious data into the MCP server or the data used to train or evaluate the models, they can corrupt the models' behavior. This could lead to the model making incorrect predictions or decisions, potentially causing harm. * **Model Inversion Attacks:** * **中文 (Chinese):** 模型反演攻击 (Móxíng fǎnyǎn gōngjí) * **Explanation:** An attacker might try to reconstruct sensitive training data by querying the model through the MCP server. If the model reveals too much information about the training data, it could compromise privacy. * **Model Extraction Attacks:** * **中文 (Chinese):** 模型提取攻击 (Móxíng tíqǔ gōngjí) * **Explanation:** An attacker could try to create a copy of the model by observing its behavior through the MCP server. This is especially concerning if the model is proprietary or contains valuable intellectual property. * **Denial of Service (DoS) Attacks:** * **中文 (Chinese):** 拒绝服务攻击 (Jùjué fúwù gōngjí) * **Explanation:** An attacker could flood the MCP server with requests, making it unavailable to legitimate users. * **Unauthorized Access:** * **中文 (Chinese):** 未授权访问 (Wèi shòuquán fǎngwèn) * **Explanation:** If the MCP server is not properly secured, unauthorized users could gain access to sensitive data or models. This could involve exploiting vulnerabilities in the server software or using stolen credentials. * **Man-in-the-Middle (MitM) Attacks:** * **中文 (Chinese):** 中间人攻击 (Zhōngjiān rén gōngjí) * **Explanation:** An attacker could intercept communication between clients and the MCP server, potentially eavesdropping on sensitive data or modifying requests and responses. * **Vulnerabilities in MCP Server Software:** * **中文 (Chinese):** MCP 服务器软件中的漏洞 (MCP fúwùqì ruǎnjiàn zhōng de lòudòng) * **Explanation:** The MCP server software itself might contain security vulnerabilities that attackers could exploit to gain control of the server or access sensitive data. * **Injection Attacks (e.g., SQL Injection, Command Injection):** * **中文 (Chinese):** 注入攻击 (Zhùrù gōngjí) (例如，SQL 注入，命令注入) * **Explanation:** If the MCP server uses user-supplied input without proper sanitization, attackers could inject malicious code into the server's database queries or operating system commands. * **Authentication and Authorization Issues:** * **中文 (Chinese):** 身份验证和授权问题 (Shēnfèn yànzhèng hé shòuquán wèntí) * **Explanation:** Weak authentication mechanisms or flawed authorization policies could allow unauthorized users to access or modify data and models. **In summary, the security threats related to MCP, MCP servers, and related content are diverse and depend heavily on the specific implementation and use case. It's crucial to implement robust security measures to protect against these threats.** If you can provide more details about the specific context of MCP in your situation, I can provide a more tailored and accurate translation and explanation.

AgentBraid

A local-first MCP orchestration server that uses Codex as lead planner and Antigravity as host to delegate and review bounded tasks with Git integration and persistent SQLite state.

mcp-osint

MCP server that provides access to 14 OSINT data sources including government, research, corporate, and news APIs, enabling search, preview, and retrieval of public intelligence data.

theo-van-gogh-mcp

MCP server that lets AI assistants manage an art catalogue — find paintings, post to social media, upload to galleries, schedule posts, and update metadata.

audio-mastering-mcp

An MCP server that masters audio with a professional signal chain using ffmpeg, enabling loudness analysis, vocal-over-beat mixing, full mastering to target LUFS, and Dolby codec export.

WebMCP Contract Portfolio

An MCP server that lets Claude directly operate a commercial insurance contracts app through WebMCP, enabling natural-language queries, renewals, updates, and reporting against live React state and Postgres.

LinkedIn Agent MCP

Enables AI assistants to connect to LinkedIn, accessing profiles and companies, searching for jobs and people, managing saved jobs, updating job-search profile settings, and inspecting analytics.

NoteBook MCP

Enables AI agents to query personal Google NotebookLM notebooks using a persistent browser session for instant queries without an official API.

Odybook MCP Server

Enables AI assistants to search tours, check availability, and manage bookings via Odybook's experience management platform.

postgres-mcp-server

A Model Context Protocol server that provides secure database access to PostgreSQL through Kysely ORM, enabling natural language interaction with PostgreSQL databases. It offers 40+ MCP tools for querying, schema inspection, diagnostics, and Java backend monitoring.

HERO MCP

MCP server for HERO handyman software, providing 34 OAuth-secured read/write tools with multi-tenant support and built-in API correctness checks.

Law Office SQLite MCP Server

A Model Context Protocol server for law office database management that enables tracking clients, cases, billable time, and invoices.

CME Prediction Markets MCP Server

Enables verification of natural language claims against CME prediction market data, with tools to query historical trading data, get contract information, and automatically verify claims using NLP-powered parsing.

fec-mcp-server

Query FEC campaign finance data — search candidates, track donations, analyze spending, and monitor Super PAC activity via the OpenFEC API.

Instahyre MCP

Provides MCP tools for job search, inbound recruiter activity triage, conversation inbox access, and guarded profile updates.

Blender MCP

Enables AI assistants to control Blender 3D software through natural language, with tools for modeling, materials, animation, rendering, and rigging.

qa-ai-mcp-server-gits

MCP server for end-to-end QA automation: generates test scenarios, discovers Playwright locators, creates TypeScript test code, executes tests, and creates GitHub issues for failures.

Snowflake MCP Server

Enables AI assistants to securely connect to Snowflake data warehouses and execute SQL queries through natural language interactions. Supports multiple authentication methods and provides formatted query results with built-in security controls.

FusionSearch MCP

把五个搜索源熔进一个 MCP —— 一次调用，多源取证 · 交叉验证 · AI 汇总

Meta Kaggle MCP Server

Searches and retrieves information from Meta Kaggle dataset, including competitions, discussions, users, and forums, enabling data exploration and analysis through natural language queries.

automatelab-ai-seo

Vendor-agnostic MCP server that audits, scores, and rewrites web pages for AI-citation eligibility. No API keys. No registration. Works in Claude Desktop, Cursor, Cline, Windsurf, VS Code (Copilot / Continue), and any client that speaks the Model Context Protocol.

mcp-mbta

Enables real-time access to Boston MBTA transit data (subway, bus, commuter rail, etc.) via the MBTA v3 API.

AQICN MCP Server

Enables querying real-time air quality index (AQI) data for Chinese cities, including PM2.5, PM10, and other pollutant information with health recommendations from the World Air Quality Index Project API.

akshare-mcp

An MCP server that gives AI assistants direct, structured access to China A-share market data.

vision-mcp

Helps non-vision models extract and understand images and screenshots via OpenRouter multimodal models.