Source verified · mcp · 20 picks

Source-verified MCP tools and listings

MCP servers and tool listings with visible source metadata for teams that want reviewable install paths and attribution before adoption.

Curated by @heyclaude-editors Updated 2026-07-18

MCP servers and tool listings with visible source metadata for teams that want reviewable install paths and attribution before adoption.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

3 trust signals differ across this comparison (Package trust, Source provenance, Submitter).

Field	GitHub MCP Server for Claude Official GitHub MCP server providing comprehensive GitHub API access for repository management, file operations, and search functionality Open dossier	Cloudflare MCP Server - MCP Servers Build applications, analyze traffic, and manage security settings through Cloudflare Open dossier	Socket MCP Server for Claude Security analysis and vulnerability scanning for dependencies Open dossier	Stytch MCP Server for Claude Configure and manage Stytch authentication services and workspace settings Open dossier	GitMCP Docs Server Remote MCP server that turns any GitHub repository or GitHub Pages site into a documentation and code context source for AI coding assistants. Open dossier
Next steps	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing
Trust
Review status	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed
Package trustDiffers	Package verified	Package verified	Package verified	Package verified	Package not verified
Source provenanceDiffers	No submission link	No submission link	No submission link	No submission link	Source-backed
SubmitterDiffers	—	—	—	—	oktofeesh1
Install risk	Low risk	Low risk	Low risk	Low risk	Review first
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	GitHub	Cloudflare	Socket	Stytch	GitMCP
Category	mcp	mcp	mcp	mcp	mcp
Source	First-party	First-party	First-party	First-party	Source-backed
Author	GitHub	Cloudflare	Socket	Stytch	idosal
Added	2025-09-18	2025-09-18	2025-09-18	2025-09-18	2026-06-05
Platforms	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop
Harness	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop
Source repo	—	—	—	—	—
Safety notes	✓Use a least-privilege GitHub token because repository, issue, pull request, and file operations can modify public or private projects.	✓Use a least-privilege Cloudflare token because DNS, security, Worker, and deployment actions can affect production services.	✓Treat dependency risk findings as triage input and verify impact before blocking releases or changing package policy.	✓Restrict Stytch workspace and admin permissions because auth configuration changes can affect sign-in and account security.	✓Repository-specific endpoints reduce the chance of an agent querying the wrong project, while the dynamic endpoint relies on correct target selection. Verify generated code against the upstream project documentation and changelog before applying it to production systems. Use caution with private, unreleased, or embargoed repositories unless you self-host and have reviewed access controls.
Privacy notes	✓Repository contents, issues, pull requests, comments, org metadata, and user details may be sent through model context.	✓Zone settings, analytics, logs, account identifiers, deployment metadata, and security configuration may be sent through model context.	✓Package names, manifests, dependency graphs, repository context, and security findings may be sent through tool calls.	✓User identities, authentication logs, session details, workspace settings, and security configuration may be sent through tool calls.	✓GitMCP may receive repository choices, documentation queries, tool calls, and surrounding prompts through the MCP client. The README states that the hosted service does not collect personal information or store queries, but teams should still review the current privacy posture before sending proprietary context. Self-hosting may be preferable for private repositories, regulated work, or sensitive customer projects.
Prerequisites	GitHub account (sign up at https://github.com if needed) GitHub Personal Access Token with repo scope (generate from GitHub Settings > Developer Settings > Personal Access Tokens) Docker installed and running (verify with: docker --version) Internet connection (remote GitHub API access required)	Cloudflare account with active zones Cloudflare API Token from https://dash.cloudflare.com/profile/api-tokens Cloudflare Account ID (found in Cloudflare dashboard) Node.js and npm/npx available for running the @cloudflare/mcp-server-cloudflare package	Socket account (free or paid plan) OAuth authentication setup (for mcp.socket.dev MCP connection) Socket API key (for Socket API access, available in Socket Dashboard) Network access to mcp.socket.dev (HTTPS required)	Stytch account (free or paid plan) Stytch API key authentication (for mcp.stytch.dev MCP connection) Stytch project_id and secret from Dashboard (test or live environment) Network access to mcp.stytch.dev (HTTP transport, not HTTPS)	MCP client that supports remote MCP servers or an mcp-remote bridge. GitHub repository owner and repository name, GitHub Pages site, or the dynamic GitMCP docs endpoint. Network access to GitMCP and GitHub. Team agreement on which repositories can be queried through a hosted MCP service.
Install	`claude mcp add github -e GITHUB_PERSONAL_ACCESS_TOKEN=YOUR_TOKEN -- docker run -i --rm -e GITHUB_PERSONAL_ACCESS_TOKEN ghcr.io/github/github-mcp-server && claude mcp list`	`claude mcp add cloudflare --env CLOUDFLARE_API_TOKEN=YOUR_TOKEN --env CLOUDFLARE_ACCOUNT_ID=YOUR_ACCOUNT_ID && claude mcp list`	`claude mcp add --transport http socket https://mcp.socket.dev/ && claude mcp list`	`claude mcp add --transport http stytch http://mcp.stytch.dev/mcp && claude mcp list`	`npx mcp-remote https://gitmcp.io/{owner}/{repo}`
Config	`{ "mcpServers": { "github": { "env": { "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_PERSONAL_ACCESS_TOKEN}" }, "args": [ "run", "-i", "--rm", "-e", "GITHUB_PERSONAL_ACCESS_TOKEN", "ghcr.io/github/github-mcp-server" ], "command": "docker", "type": "stdio" } } }`	`{ "mcpServers": { "cloudflare": { "env": { "CLOUDFLARE_API_TOKEN": "${CLOUDFLARE_API_TOKEN}", "CLOUDFLARE_ACCOUNT_ID": "${CLOUDFLARE_ACCOUNT_ID}" }, "args": [ "-y", "@cloudflare/mcp-server-cloudflare" ], "command": "npx", "type": "stdio" } } }`	`{ "mcpServers": { "socket": { "url": "https://mcp.socket.dev/", "type": "http" } } }`	`{ "mcpServers": { "stytch": { "url": "http://mcp.stytch.dev/mcp", "type": "http" } } }`	`{ "mcpServers": { "gitmcp": { "command": "npx", "args": [ "mcp-remote", "https://gitmcp.io/{owner}/{repo}" ] } } }`
Citations	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Package (SHA-256 pinned)/downloads/mcp/github-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdevelopers.cloudflare.com Package (SHA-256 pinned)/downloads/mcp/cloudflare-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Package (SHA-256 pinned)/downloads/mcp/socket-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationstytch.com Package (SHA-256 pinned)/downloads/mcp/stytch-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Submitted by oktofeesh12026-06-05 Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed	Unclaimed