Verified MCP Servers: Safe MCP Servers with Trust Score 90+
Every server on this page holds a Trust Score of 90 or higher, the verified tier of ClaudeWave's scoring engine. The score (0 to 100) combines security heuristics, maintenance activity, fork ratio, license presence, owner reputation and README patterns, with an AI review on top. Scores are refreshed daily, so this list reflects the current state of each repository, not a one-time badge.
Installing an unvetted MCP server in 2026 is a real risk, not a theoretical one. A server's tool descriptions are injected straight into your model's context, so a malicious or compromised package can attempt prompt injection or quietly exfiltrate credentials through the very instructions it ships. Abandoned dependencies add a slower kind of danger: of the 2,019 servers we audited for The State of MCP Security 2026, 17% were unmaintained and 25% carried at least one security flag.
Each entry links to the server's full page, where you can see the score breakdown, the repository's activity history and a one-command install. A 90+ score means the engine found no warning signs at the last scan; it is strong evidence of a healthy project, not a guarantee. Read the tool descriptions before you connect anything to credentials or production data, the same way you would review any other dependency.
- 100369.9kmorluto/reaupdated today
- 95156.5kopen-webui/open-webuiLicence file present but not machine-readable
- 100107.6kgoogle-gemini/gemini-cliupdated today
- 10089.3kkoala73/worldmonitorupdated today
- 10089.3kD4Vinci/Scraplingupdated today
- 10081.1knetdata/netdataupdated today
- 9777.6kheadroomlabs-ai/headroomInstall pipes a remote script into a shell (curl | sh)
- 10063.5kupstash/context7updated today
- 10063.1ksansan0/TrendRadarupdated 3d ago
- 10059.7kMemPalace/mempalaceupdated today
- 10055.6kaaif-goose/gooseInstall pipes a remote script into a shell (curl | sh)
- 10054kChromeDevTools/chrome-devtools-mcpupdated today
- 9747.3kDeusData/codebase-memory-mcpInstall pipes a remote script into a shell (curl | sh)
- 10044.7kreactive-resume/reactive-resumeupdated today
- 10044.3kKong/kongupdated 4d ago
- 10044kanthropics/claude-plugins-officialupdated today
- 10040.1kdrawdb-io/drawdbupdated today
- 10039.4kbytedance/UI-TARS-desktopupdated 14d ago
- 10038.5kmicrosoft/playwright-mcpupdated today
- 10036.4kDayuanJiang/next-ai-draw-ioupdated today
- 10033.9kgithub/github-mcp-serverupdated today
- 10033.5kalibaba/nacosupdated today
- 9232.1kahujasid/mcp-for-blenderInstall pipes a remote script into a shell (curl | sh) · README contains suspicious pattern: https?:\/\/(?:bit\.ly|tinyurl|
- 9031.9kmksglu/context-modeLicence file present but not machine-readable
- 10031.8k78/xiaozhi-esp32updated today
- 9530.6koraios/serenaLicence file present but not machine-readable
- 10030.3kassafelovic/gpt-researcherupdated 12d ago
- 9528.3kOtterMind/Chat2DBLicence file present but not machine-readable
- 10028.2kPrefectHQ/fastmcpupdated today
- 10027.6kt8y2/dbxupdated today
- 9525.2kactivepieces/activepiecesLicence file present but not machine-readable
- 10025.1kflipped-aurora/gin-vue-adminupdated yesterday
- 10025.1kpascalorg/editorupdated today
- 10024.7kmodelcontextprotocol/python-sdkupdated 5d ago
- 10024.6kevery-app/open-seoupdated today
- 10023.1kczlonkowski/n8n-mcpREADME contains suspicious pattern: eval\s*\(
- 10023k1Panel-dev/MaxKBupdated today
- 9722.4kwinfunc/opcodeInstall pipes a remote script into a shell (curl | sh)
- 10020.9kEvil0ctal/Douyin_TikTok_Download_APIupdated 2d ago
- 10020.8kmodelscope/FunASRInstall pipes a remote script into a shell (curl | sh)
- 10018.8knukeop/nuclearupdated today
- 10018kwanshuiyin/Auto-claude-code-research-in-sleepupdated yesterday
- 9518kCanner/WrenAILicence file present but not machine-readable
- 10017.7krocketride-org/rocketride-serverupdated today
- 10017.5kmicrosoft/mcp-for-beginnersupdated today
- 10016.7kgoogleapis/mcp-toolboxupdated today
- 9516.7kudecode/plateLicence file present but not machine-readable
- 10016.6ktriggerdotdev/trigger.devupdated today
- 10016.5kxpzouying/xiaohongshu-mcpupdated 4d ago
- 10016.1kGLips/Figma-Context-MCPupdated 7d ago
- 9516kbudtmo/docker-androidLicence file present but not machine-readable
- 10015.8kYishenTu/claudianupdated today
- 10015.6kopen-metadata/OpenMetadataupdated today
- 10015.4kelecterm/electermupdated today
- 10015.3kCoplayDev/unity-mcpupdated 3d ago
- 10015.2kyusufkaraaslan/Skill_Seekersupdated 22d ago
- 10015.1kDuarteSantos8/openGymupdated today
- 9714.9kmiuuyy/codex-chatgpt-webInstall pipes a remote script into a shell (curl | sh)
- 10014.6kpalmier-io/palmier-proupdated 18d ago
- 10013.6kmodelcontextprotocol/typescript-sdkLicence file present but not machine-readable
- 10013.4kccfos/nightingaleupdated yesterday
- 9713.3kxerj-org/xerjInstall pipes a remote script into a shell (curl | sh)
- 10013.3kPortkey-AI/gatewayupdated 5mo ago
- 10013.1kseleniumbase/SeleniumBaseupdated yesterday
- 10013.1kmrexodia/ida-pro-mcpREADME contains suspicious pattern: eval\s*\(
- 10013.1kJoeanAmier/XHS-Downloaderupdated today
- 9713kOpenByteInc/QuantDingerInstall pipes a remote script into a shell (curl | sh)
- 10013k0x4m4/hexstrike-aiupdated 2mo ago
- 10012.7kapify/apify-mcp-serverupdated today
- 10012.6kzilliztech/claude-contextupdated 3mo ago
- 9012ktadata-org/fastapi_mcpInactive (>180d)
- 10011.7k0xJacky/nginx-uiupdated today
- 10011.1kmodelcontextprotocol/inspectorLicence file present but not machine-readable
- 10011kxinnan-tech/xiaozhi-esp32-serverupdated today
- 10011kjub0t/Concatupdated today
- 9510.9kTykTechnologies/tykLicence file present but not machine-readable
- 10010.8kx-hw/amazing-qrupdated 1mo ago
- 10010.8kmcp-use/mcp-useupdated yesterday
- 10010.7ktrailhq/Trail-Codeupdated today
- 10010.6kgenspark-ai/genofficeupdated today
- 10010.3kAgents365-ai/drawio-skillupdated 12d ago
- 10010.1kwonderwhy-er/DesktopCommanderMCPInstall pipes a remote script into a shell (curl | sh)
- 10010.1kCursorTouch/Windows-MCPInstall pipes a remote script into a shell (curl | sh)
- 1009.9kmobile-next/mobile-mcpupdated 4d ago
- 1009.8kawslabs/mcpupdated today
- 929.6kpacifio/atlasupdated today
- 1009.6kusekaneo/kaneoupdated today
- 1009.5kmodelcontextprotocol/modelcontextprotocolLicence file present but not machine-readable
- 1009.2kopenstatusHQ/openstatusupdated today
- 1009kmaximhq/bifrostupdated today
- 1008.9khomarr-labs/dashboard-iconsupdated today
- 1008.7kfirerpa/lamdaupdated 26d ago
- 1008.6kvastsa/FileCodeBoxupdated 3d ago
- 928.5kidosal/git-mcpupdated 5mo ago
- 1008.1kosaurus-ai/osaurusupdated today
- 977.9krepowise-dev/repowiseupdated today
- 1007.8kyzfly/Awesome-MCP-ZHupdated 7d ago
- 1007.7kfirecrawl/firecrawl-mcp-serverupdated today
- 1007.7kdevlikeapro/wahaupdated yesterday
- 977.5kXiaoDuoYa/codex-with-chatgptupdated 22d ago
- 977.4kmodelcontextprotocol/registryLicence file present but not machine-readable
- 1007.3kAgentDeskAI/browser-tools-mcpupdated 6d ago
- 1007.3kZipstack/unstractupdated today
- 976.6kRyze-AI-Adgent/open-seo-mcp-skillsupdated today
- 1006.5kgetsentry/MobileBuildMCPupdated today
- 976.4kkucherenko/jscpdupdated today
- 1006.4kapache/camelupdated today
- 1006.4kThinkInAIXYZ/deepchatupdated today
- 926.3kMinishLab/sembleupdated 7d ago
- 976.2k21st-dev/magic-mcpupdated 1mo ago
- 976.1koomol-lab/open-connectorupdated today
- 976ksooperset/mcp-atlassianupdated 1mo ago
- 1006klemonade-sdk/lemonadeupdated today
- 1005.9kbethington/ghidra-mcpupdated today
- 925.8kKlavis-AI/klavisupdated 4mo ago
- 1005.7kOpenBMB/UltraRAGupdated yesterday
- 975.6kirinabuht12-oss/google-ads-meta-ads-mcpupdated today
- 1005.5k54yyyu/zotero-mcpupdated 6d ago
- 1005.5kagentgateway/agentgatewayupdated today
- 1005.5kJerBouma/FinanceToolkitupdated today