Verified MCP Servers: Safe MCP Servers with Trust Score 90+
Every server on this page holds a Trust Score of 90 or higher, the verified tier of ClaudeWave's scoring engine. The score (0 to 100) combines security heuristics, maintenance activity, fork ratio, license presence, owner reputation and README patterns, with an AI review on top. Scores are refreshed daily, so this list reflects the current state of each repository, not a one-time badge.
Installing an unvetted MCP server in 2026 is a real risk, not a theoretical one. A server's tool descriptions are injected straight into your model's context, so a malicious or compromised package can attempt prompt injection or quietly exfiltrate credentials through the very instructions it ships. Abandoned dependencies add a slower kind of danger: of the 2,019 servers we audited for The State of MCP Security 2026, 17% were unmaintained and 25% carried at least one security flag.
Each entry links to the server's full page, where you can see the score breakdown, the repository's activity history and a one-command install. A 90+ score means the engine found no warning signs at the last scan; it is strong evidence of a healthy project, not a guarantee. Read the tool descriptions before you connect anything to credentials or production data, the same way you would review any other dependency.
- 95151.6kopen-webui/open-webuiLicence file present but not machine-readable
- 100106.9kgoogle-gemini/gemini-cliupdated today
- 10086kkoala73/worldmonitorupdated today
- 10080.5knetdata/netdataupdated today
- 10080.1kD4Vinci/Scraplingupdated 6d ago
- 9771.4kheadroomlabs-ai/headroomInstall pipes a remote script into a shell (curl | sh)
- 10062.2ksansan0/TrendRadarInstall pipes a remote script into a shell (curl | sh)
- 10061.9kupstash/context7updated today
- 10059kMemPalace/mempalaceupdated 2d ago
- 10054.2krohitg00/ai-engineering-from-scratchupdated 3d ago
- 10054.1kaaif-goose/gooseInstall pipes a remote script into a shell (curl | sh)
- 10051.6kChromeDevTools/chrome-devtools-mcpupdated today
- 10048.8kheygen-com/hyperframesupdated today
- 10044.1kKong/kongupdated 3d ago
- 9742.9kDeusData/codebase-memory-mcpInstall pipes a remote script into a shell (curl | sh)
- 10042.4kreactive-resume/appupdated today
- 10038.9kbytedance/UI-TARS-desktopupdated 1mo ago
- 10037kmicrosoft/playwright-mcpupdated yesterday
- 10036.1kanthropics/claude-plugins-officialupdated today
- 10033.4kalibaba/nacosupdated today
- 10032.9kgithub/github-mcp-serverupdated today
- 10029.8k78/xiaozhi-esp32updated today
- 10029.4kassafelovic/gpt-researcherupdated 14d ago
- 10029.1koraios/serenaupdated 2d ago
- 9228.1kahujasid/blender-mcpInstall pipes a remote script into a shell (curl | sh) · README contains suspicious pattern: https?:\/\/(?:bit\.ly|tinyurl|
- 9528.1kOtterMind/Chat2DBLicence file present but not machine-readable
- 10027.6kPrefectHQ/fastmcpupdated today
- 10025kflipped-aurora/gin-vue-adminupdated yesterday
- 9524.4kactivepieces/activepiecesLicence file present but not machine-readable
- 10024.3kmodelcontextprotocol/python-sdkupdated today
- 10023.3kpascalorg/editorupdated today
- 10022.9kczlonkowski/n8n-mcpREADME contains suspicious pattern: eval\s*\(
- 10022.8k1Panel-dev/MaxKBupdated today
- 9022kmksglu/context-modeLicence file present but not machine-readable
- 10020.3kmodelscope/FunASRInstall pipes a remote script into a shell (curl | sh)
- 10019kt8y2/dbxupdated today
- 10018.4knukeop/nuclearupdated today
- 10018.3kevery-app/open-seoupdated 7d ago
- 10017.2kmicrosoft/mcp-for-beginnersupdated today
- 9516.6kudecode/plateLicence file present but not machine-readable
- 10016.4kgoogleapis/mcp-toolboxupdated today
- 10016.3ktriggerdotdev/trigger.devupdated today
- 9515.8kbudtmo/docker-androidLicence file present but not machine-readable
- 10015.8kGLips/Figma-Context-MCPupdated today
- 10015.7kxpzouying/xiaohongshu-mcpupdated today
- 10015.3kYishenTu/claudianupdated today
- 10015.2kopen-metadata/OpenMetadataupdated today
- 10015.1kelecterm/electermupdated today
- 10015kyusufkaraaslan/Skill_Seekersupdated 4d ago
- 10014.3kpalmier-io/palmier-proupdated yesterday
- 10014.1kCoplayDev/unity-mcpupdated 5d ago
- 10013.4kmodelcontextprotocol/typescript-sdkLicence file present but not machine-readable
- 10013kPortkey-AI/gatewayupdated 3mo ago
- 10012.7kJoeanAmier/XHS-Downloaderupdated today
- 10012.5kzilliztech/claude-contextupdated 1mo ago
- 9012ktadata-org/fastapi_mcpInactive (>180d)
- 10012kmrexodia/ida-pro-mcpREADME contains suspicious pattern: eval\s*\(
- 10011.8k0x4m4/hexstrike-aiupdated 1mo ago
- 10011.5k0xJacky/nginx-uiupdated today
- 9711.5kOpenByteInc/QuantDingerInstall pipes a remote script into a shell (curl | sh)
- 10010.9kmodelcontextprotocol/inspectorNo license declared
- 10010.6kmcp-use/mcp-useupdated today
- 10010.5kxinnan-tech/xiaozhi-esp32-serverupdated today
- 1009.7kawslabs/mcpupdated today
- 1009.5kwonderwhy-er/DesktopCommanderMCPInstall pipes a remote script into a shell (curl | sh)
- 1009.2kAgents365-ai/drawio-skillupdated yesterday
- 1009.2kmodelcontextprotocol/modelcontextprotocolLicence file present but not machine-readable
- 1009.1kopenstatusHQ/openstatusupdated today
- 1009kusekaneo/kaneoInstall pipes a remote script into a shell (curl | sh)
- 908.5klastmile-ai/mcp-agentInactive (>180d)
- 1008.4krocketride-org/rocketride-serverupdated today
- 1008.4kidosal/git-mcpupdated 4mo ago
- 1008.3kfirerpa/lamdaupdated 11d ago
- 998.1kanthropics/claude-agent-sdk-pythonNo description · Install pipes a remote script into a shell (curl | sh)
- 958kwebiny/webiny-jsLicence file present but not machine-readable
- 1008kmaximhq/bifrostupdated today
- 1007.8kosaurus-ai/osaurusupdated today
- 1007.6kyzfly/Awesome-MCP-ZHupdated 3d ago
- 1007.4kfirecrawl/firecrawl-mcp-serverupdated today
- 1007.3kAgentDeskAI/browser-tools-mcpupdated 29d ago
- 977.2kmodelcontextprotocol/registryLicence file present but not machine-readable
- 1007.2kZipstack/unstractupdated today
- 977ktrailhq/Graftupdated today
- 1007kCursorTouch/Windows-MCPupdated today
- 976.7kapify/apify-mcp-serverupdated today
- 1006.6kmobile-next/mobile-mcpupdated today
- 976.4krepowise-dev/repowiseupdated today
- 976.4kgetsentry/XcodeBuildMCPupdated today
- 1006.3kThinkInAIXYZ/deepchatupdated today
- 1006.3kapache/camelupdated today
- 976.3kmiuuyy/codex-chatgpt-webupdated 2d ago
- 976.2kkucherenko/jscpdupdated today
- 926kMinishLab/sembleupdated 2d ago
- 1005.9ksooperset/mcp-atlassianupdated 5d ago
- 1005.8k21st-dev/magic-mcpupdated yesterday
- 925.8kKlavis-AI/klavisupdated 3mo ago
- 1005.7kOpenBMB/UltraRAGupdated yesterday
- 1005.7klemonade-sdk/lemonadeupdated today
- 975.7koomol-lab/open-connectorupdated today
- 925.6kCoding-Solo/godot-mcpupdated 4mo ago
- 1005.3kJerBouma/FinanceToolkitupdated today
- 975.1kMCP-UI-Org/mcp-uiupdated 2mo ago
- 1005.1kopenclaw/Peekabooupdated 2d ago
- 1005.1kvitali87/code-graph-ragupdated today
- 975.1kmodelcontextprotocol/go-sdkLicence file present but not machine-readable
- 975kclidey/whodbupdated today
- 975kopenclaw/mcporterupdated 5d ago
- 1005kexa-labs/exa-mcp-serverupdated 20d ago
- 1005k54yyyu/zotero-mcpupdated 17d ago
- 1005kmock-server/mockserver-monorepoupdated today
- 974.9kTabularisDB/tabularisupdated today
- 924.9kaipotheosis-labs/aciupdated 3mo ago
- 1004.8kagentgateway/agentgatewayupdated today
- 924.7khomeassistant-ai/ha-mcpupdated today
- 974.7ku14app/deep-researchupdated 2mo ago
- 1004.6kprest/prestupdated today
- 1004.5kmodelcontextprotocol/csharp-sdkLicence file present but not machine-readable
- 1004.5kIBM/mcp-context-forgeupdated today
- 1004.4katilaahmettaner/tradingview-mcpupdated 9d ago
- 924.4kopen-webui/mcpoupdated 3mo ago