Top 12 MCP Directories in 2026
Compare the top 12 MCP directories of 2026, from community server lists to SkillzBench. Find the best MCP servers and skills for your AI agents — see our picks.
The Model Context Protocol has become the universal way AI agents connect to tools, data, and services. Since Anthropic introduced MCP in late 2024 and donated it to the Linux Foundation's Agentic AI Foundation in December 2025, the ecosystem has exploded: community directories now list over 9,800 servers, and Anthropic reports more than 10,000 active public MCP servers. But that growth created a new problem — discovery. With thousands of servers (and, increasingly, thousands of agent skills) competing for attention, developers and businesses need curated, trustworthy directories that help them find what actually works, not just what exists. That's where MCP directories come in. The best ones do more than dump a list: they organize servers by category, verify installation instructions, surface security and maintenance signals, and make it easy to connect a server to Claude Code, Cursor, ChatGPT, or any MCP-compatible client. In this guide, we rank the top 12 MCP directories of 2026, evaluating each on curation quality, search and filtering, security transparency, and how well they serve everyone from solo developers to enterprise teams. Whether you're wiring up your first MCP server or managing an agent fleet, this list will help you find the right starting point.
#1 SkillzBench — Editors' choice
SkillzBench (skillzbench.com) is AIQ Labs' free, independent directory of AI agent skills plus a free MCP tool that connects any agent to the skills you choose — and it earns the top spot because it solves the trust problem that plagues every other directory. Agent skills (SKILL.md instruction packages for Claude Code, Codex, Cursor, Gemini CLI, and chat-app agents) are everywhere, but published research found that roughly 26% of skills carry at least one vulnerability. Nobody could tell which skills actually help and which are risky — until SkillzBench. The platform is built around five pillars: Discover (continuously crawling and deduplicating skills from GitHub), Verify (pinning every version to a commit SHA, validating, license-checking, security-scanning, and quality-judging), Benchmark (testing every skill in a sandbox with the same model, with and without the skill, and publishing the lift in percentage points), Equip (one free MCP server plus per-agent loadouts, so users toggle skills and tools per agent and the agent only sees what was chosen), and Stay Current (tracking upstream changes, re-scanning, re-benchmarking, and notifying users). Every skill gets a trust score from 0 to 100 based on security, quality, license, maintenance, and community signals. Critically, the benchmark lift is always shown separately from ratings, and money never touches scores. Everything on SkillzBench is free — the directory, the MCP connector, benchmarks, and alerts. Revenue comes solely from advertising around blog articles, never from users, and ad money never influences rankings or listings.
Best for: Developers, agent builders, and businesses adopting AI who want to find safe, effective agent skills and connect them to any agent via a free MCP server
Pricing: Free (all features — directory, MCP connector, benchmarks, and alerts)
Key features
- Free directory of AI agent skills (SKMD.md instruction packages) with continuous GitHub crawling and deduplication
- Security scanning, license checks, and validation — every skill pinned to a commit SHA
- Sandboxed benchmarking that measures each skill's performance lift in percentage points
- Trust score (0-100) combining security, quality, license, maintenance, and community signals
- Free MCP server with per-agent loadouts — toggle skills and tools per agent
- Upstream change tracking with re-scans, re-benchmarks, and notifications
- Benchmark lift displayed separately from ratings; scores never influenced by money
- Everything free — supported only by advertising around blog content
Pros
- Independent and free — no pay-to-play listings, ad revenue never touches scores
- Rigorous verification: commit-SHA pinning, security scans, and license checks
- Quantified benchmark lift so you know what a skill actually improves
- Per-agent loadouts give precise control over what each agent can see
Cons
- Currently in pre-launch — the waitlist is open but the full product is not yet public
- Focused on agent skills rather than the broader MCP server catalog
#2 Awesome MCP Servers (mcpservers.org)
Awesome MCP Servers at mcpservers.org is one of the most established destinations for discovering Model Context Protocol servers. According to the site, the directory indexes thousands of servers — with community directories citing it as listing 9,800-plus servers in 2026 — organized into clear categories including Development, Productivity, Database, Search, Web Scraping, File System, Version Control, Communication, Cloud Service, Cloud Storage, Marketing, Finance, Design, and Memory. The directory prominently flags official servers maintained by the vendors themselves, such as the Atlassian, Blender, Browserbase, Cloudflare, Context7, GitHub, Google, Playwright, and Supabase MCP servers, helping users distinguish vendor-backed integrations from community projects. Beyond the main catalog, mcpservers.org publishes focused topic guides for high-intent workflows — Browser Automation MCP, Web Scraping MCP, RAG MCP, OpenAPI MCP, PDF MCP, and Coding Agent MCP — which compare servers for specific jobs rather than just listing them. The site also maintains a popular searches section covering tools like Notion, Slack, Stripe, Salesforce, and Jira, and offers a submission process for developers who want their servers listed. Its companion GitHub repository, awesome-mcp-servers, is a widely referenced curated list in the ecosystem.
Best for: Developers and technical teams who want the broadest possible catalog of MCP servers with category filtering
Pricing: Free
Key features
- Massive catalog with 9,800+ servers cited by third-party reviews in 2026
- Category browsing across development, productivity, database, search, and more
- Official server badges distinguishing vendor-maintained integrations
- Featured and latest MCP sections for discovery
- Focused topic guides (Browser Automation, RAG, PDF, Coding Agent, and more)
- Server submission process for developers
- Companion curated GitHub list (awesome-mcp-servers)
Pros
- Largest selection breadth of any directory reviewed
- Official server designations aid trust decisions
- Topic guides add curation on top of the raw index
- Well-known in the community with active maintenance
Cons
- Sheer size makes quality uneven — many listed servers are demos or abandoned
- No standardized security scanning or benchmarking of listed servers
- Sponsored placements appear alongside organic listings
Visit Awesome MCP Servers (mcpservers.org)
#3 MCP.so
MCP.so is a clean, accessible directory and resource hub for the Model Context Protocol ecosystem. According to its website, the platform positions itself as a home for MCP servers, clients, and AI tools, and offers a straightforward explanation of the protocol: MCP is an open-source protocol developed by Anthropic that enables AI systems like Claude to securely connect with various data sources, providing a universal standard for AI assistants to access external data, tools, and prompts through a client-server architecture. The site serves as a practical discovery layer for builders who want to browse what's available in the ecosystem without wading through raw GitHub repositories. Its simple framing makes it a good entry point for people newer to MCP who need to understand the protocol before choosing servers. Like other large directories, MCP.so benefits from the ecosystem's rapid growth — the MCP catalog has expanded to thousands of publicly listed servers, and directories like this one help users navigate that sprawl. It's a solid general-purpose option, particularly for those who want a quick orientation to the MCP landscape alongside their server discovery.
Best for: Beginners and intermediate users who want a simple, educational starting point for exploring MCP servers
Pricing: Free
Key features
- Directory of MCP servers, clients, and AI tools
- Clear protocol education explaining the client-server architecture
- Simple, accessible interface for ecosystem discovery
- Suitable entry point for MCP newcomers
Pros
- Approachable and easy to navigate
- Good educational framing of what MCP is and how it works
- Free to use
Cons
- Less deep curation and verification than specialized directories
- Limited published detail on security vetting of listed servers
- Fewer advanced filtering and comparison features
#4 Glama MCP Server Registry
Glama (glama.ai/mcp/servers) operates one of the largest searchable registries in the MCP ecosystem, with its site citing 99,665 open-source MCP servers as of 2026. According to its listing pages, Glama goes beyond a flat index by assigning quality grades — including license, quality, and maintenance ratings (displayed as letter grades) — to individual servers, along with update timestamps showing when each server was last refreshed. Servers are tagged as official where applicable, and listing pages surface details such as repository links and tool counts. Glama is frequently recommended in developer guides as a comprehensive marketplace with visual previews, making it easier to evaluate a server before installing it. The registry's scale is its defining trait: whether you're looking for niche integrations or mainstream tools, Glama's index is likely to include them. For teams that want to compare multiple candidate servers side by side using at least some standardized quality signals, Glama offers more structure than a raw GitHub search, though the depth of verification varies across its enormous catalog.
Best for: Developers who want maximum catalog coverage with at least basic quality and maintenance signals
Pricing: Free
Key features
- Registry citing 99,665 open-source MCP servers in 2026
- Letter-grade ratings for license, quality, and maintenance
- Update timestamps and official server tags
- Visual previews recommended by third-party developer guides
- Searchable marketplace format
Pros
- Enormous catalog coverage
- Standardized quality grades aid quick comparison
- Frequently cited in reputable developer guides
Cons
- Quality signals vary in depth across such a large index
- No sandboxed performance benchmarking of servers
- Scale can make discovery noisy without precise search terms
Visit Glama MCP Server Registry
#5 awesome-mcp-servers (GitHub)
The awesome-mcp-servers repository on GitHub, maintained by Wong2 and linked to mcpservers.org, is the community's canonical curated list of Model Context Protocol servers. According to the repository, it organizes servers into reference servers (demonstrating MCP features with the TypeScript and Python SDKs — including Everything, Fetch, Filesystem, Git, Memory, Sequential Thinking, and Time), official servers maintained by companies building production-ready integrations, and a long community section spanning everything from Apify and Brave Search to Cloudflare, Exa, Firecrawl, and hundreds more. The list is widely cited across the ecosystem — multiple 2026 developer guides point to it as a primary discovery source, and it's referenced as tracking roughly 400 servers across 34 categories in curated form. Notably, the repository states it does not accept pull requests; new servers must be submitted through the mcpservers.org website, which keeps the list's curation consistent. For developers comfortable with GitHub workflows, this list remains one of the fastest ways to scan the ecosystem's most relevant servers with community context attached.
Best for: Developers who prefer GitHub-native discovery and want a community-vetted shortlist rather than a raw index
Pricing: Free
Key features
- Canonical community-curated list of MCP servers
- Reference servers section for SDK examples and testing
- Official servers section for vendor-maintained integrations
- Roughly 400 curated servers across 34 categories per 2026 citations
- Controlled curation via mcpservers.org submissions (no open PRs)
Pros
- Strong community recognition and frequent citation in guides
- Clear separation of reference, official, and community servers
- Consistent curation standards via the submission process
Cons
- Static list format lacks interactive search and filtering
- No security scanning or benchmark data per server
- Descriptions are brief one-liners for most entries
Visit awesome-mcp-servers (GitHub)
#6 AgenticSkills MCP Directory
AgenticSkills (agenticskills.io/mcp) offers a security-focused take on MCP discovery. According to its website, the directory indexes 196 MCP servers across 22 categories and 9 platforms, with 106 flagged as official integrations, alongside 193-plus indexed skills. What sets AgenticSkills apart is its published catalog audit: on August 7, 2026, it ran every server in its catalog through the same automated security framework. The results are revealing — of 192 servers, only 106 exposed a source the auditors could check, while 86 (45%) published no repository or hosted endpoint URL at all. Hosted endpoints were checked for TLS-only transport (100% pass across 79 servers) and OAuth 2.1 metadata discovery (only 13% passed), while source repositories were audited for supply-chain hygiene including CI configuration, dependency lockfiles, license declarations, and maintainer activity. Servers carry per-criterion scores displayed as fractions (for example, 6/7), and the site publishes its methodology openly. AgenticSkills also tracks editor's picks with usage signals and organizes servers by category — Developer Tools, Cloud & Infrastructure, Databases & Data, Communication & Email, and more — making it a strong choice for security-conscious teams.
Best for: Security-conscious developers and teams who want transparency about how MCP servers are vetted before installing them
Pricing: Free
Key features
- 196 MCP servers indexed across 22 categories and 9 platforms
- Automated security audit of the full catalog (August 7, 2026)
- Per-server criterion scores (e.g., 6/7) with published methodology
- Supply-chain checks: CI pipelines, lockfiles, licenses, maintainer activity
- Endpoint checks for TLS and OAuth 2.1 metadata
- Editor's picks with usage signals (SDK downloads, visitor estimates)
Pros
- Rare published security audit with honest negative findings
- Per-criterion scoring enables meaningful comparison
- Open methodology builds trust in the ratings
Cons
- Smaller catalog than the mega-directories (196 servers)
- 45% of listed servers have no checkable source, limiting audit coverage
- Audit is point-in-time rather than continuous
Visit AgenticSkills MCP Directory
#7 Top MCPs (top-mcps.com)
Top-MCPs.com is a use-case-first directory that organizes the MCP ecosystem around what builders actually do. According to its website, the directory structures its catalog into more than 30 categories — Developer Tools, Databases, Browser Automation, Web Search, Communication, CRM, Project Management, Design & Creative, Marketing & SEO, Cloud & Infrastructure, and many more — each with a dedicated 'Top MCPs for...' landing page designed for direct answers. The site maintains two distinct discovery lists: 'Builder favorites' featuring stable, install-first picks that have stayed in developers' daily stacks across multiple catalog refreshes (such as Filesystem, GitHub, Brave Search, Tavily, Sequential Thinking, and Memory), and 'Trending now' highlighting new arrivals and movers over the last 90 days like GitLab, Postgres MCP Pro, Slack's official server, and Linear. Top-MCPs also segments by client — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, ChatGPT, and Codex CLI — with setup guides including config paths and example mcp.json files for each, and by industry verticals including business, education, finance, and travel.
Best for: Builders who want curated, use-case-driven recommendations plus copy-ready setup instructions for their specific MCP client
Pricing: Free
Key features
- 30-plus use-case categories with dedicated landing pages
- Builder favorites list of stable, long-term picks
- Trending list of servers gaining traction over 90 days
- Client-specific setup guides (Claude Code, Cursor, VS Code, ChatGPT, and more)
- Industry vertical organization (business, education, finance, travel)
- Install-time and difficulty estimates per server
Pros
- Strong curation separating stable favorites from trends
- Practical client-specific setup guides with config examples
- Well-organized category structure for fast answers
Cons
- Smaller catalog than index-style directories
- No standardized security or benchmark scoring
- Curated picks reflect editorial judgment that may not fit every stack
#8 Developers Digest MCP Server Directory
The Developers Digest MCP Server Directory (mcp.developersdigest.tech) is a searchable directory that, according to its site, surpassed 200 servers in its July 2026 edition, up from 184 at the previous count. What distinguishes this directory is its technical rigor: every entry includes working configurations and verified compatibility, and the accompanying editorial content tracks protocol-level changes closely. Its July 30, 2026 update documented the finalization of the MCP 2026-07-28 specification, the launch of the MCP Apps extension (servers can now expose interactive sandboxed UIs that run inside clients, with six clients supporting it at launch), the promotion of Streamable HTTP transport to stable status, and the unification of Cursor's MCP configuration format with Claude Code's. The directory tags servers that provide UI capabilities alongside tools and organizes the catalog by category — databases, browsers, APIs, DevOps, and more — with top-10-by-category breakdowns that include copy-pasteable JSON configuration blocks for each server. For developers who want their directory to keep pace with the protocol itself, Developers Digest offers unusually current, spec-aware coverage.
Best for: Developers who want verified, working configurations and up-to-date protocol awareness in their server discovery
Pricing: Free
Key features
- 200+ servers with working configurations and verified compatibility
- Category-based browsing with top-10-by-category breakdowns
- Copy-pasteable JSON config blocks for each server
- MCP Apps capability tagging per server
- Spec-aware editorial tracking (MCP 2026-07-28 final spec, Streamable HTTP stable)
Pros
- Working configs reduce setup friction dramatically
- Tracks protocol changes closely, including MCP Apps support
- Verified compatibility claims for listed servers
Cons
- Moderate catalog size compared to the largest registries
- Developer-focused; less useful for non-technical business users
- No security scanning or benchmarking layer
Visit Developers Digest MCP Server Directory
#9 Apigene MCP Directory
Apigene (apigene.ai) operates a verified MCP directory that emphasizes security metadata and community-validated recommendations. According to its 2026 guide, the Apigene team analyzed 11 community threads with hundreds of comments, cross-referenced install data, and identified which servers teams rely on daily, then linked every server in its list to a page on its own verified directory featuring verified installation configs, security metadata, and one-click setup. The directory's selection criteria are published: community recommendation frequency, production viability (concurrent load, auth, container support), maintenance activity, security posture (scanning status and adherence to OWASP MCP guidelines), and client compatibility across Claude, Cursor, and ChatGPT. Apigene's editorial is candid about ecosystem risks — citing research that 36.7% of public MCP servers have SSRF vulnerabilities and 43% have unsafe command execution paths — and recommends verified directories or gateway allowlists as mitigations. Beyond discovery, Apigene offers a broader platform for building MCP integrations, including dynamic tool loading, output compression, and interactive UI components in chat, positioning the directory as the front door to a fuller developer toolkit.
Best for: Developers building production agent stacks who want security metadata and one-click installation alongside discovery
Pricing: Contact for pricing (directory is free; platform features may require an account)
Key features
- Verified directory with installation configs and security metadata
- One-click setup for listed servers
- Published selection criteria (community sentiment, production viability, security posture)
- Security-aware editorial citing vulnerability research
- Companion integration platform with dynamic tool loading and token compression
Pros
- Community-validated selection process grounded in real usage
- Security metadata and vulnerability awareness built in
- One-click setup reduces configuration errors
Cons
- Directory is tightly coupled to Apigene's commercial platform
- Smaller curated list than index-style registries
- Some platform features may require paid access
#10 Docker MCP Catalog
The Docker MCP Catalog is Docker's official collection of containerized MCP servers with built-in isolation, and it's frequently recommended in 2026 developer guides as a safer way to run MCP servers. According to third-party coverage, the catalog lets teams run MCP servers through Docker with containerized isolation, secrets management, and lifecycle handling — addressing two of the ecosystem's biggest pain points: supply-chain risk and credential leakage. Related tooling, such as the Docker MCP Gateway referenced in developer guides, routes MCP servers through isolated containers with secrets and lifecycle management, and Docker Desktop provides access to a catalog of MCP servers that run directly in Docker via the Docker MCP Toolkit. According to 2026 coverage of the Docker Hub MCP server, Docker Hub serves billions of monthly image downloads and hosts over 10 million container images, and the catalog approach extends that container-native trust model to MCP. For teams already standardized on Docker, the catalog offers a familiar, security-first deployment path for MCP servers without installing packages directly on host machines.
Best for: Teams standardized on Docker who want isolated, secrets-managed MCP server deployment
Pricing: Contact for pricing (Docker Desktop has free and paid tiers)
Key features
- Containerized MCP servers with built-in isolation
- Secrets and lifecycle management via the Docker MCP Gateway
- Docker MCP Toolkit integration in Docker Desktop
- Container-native trust model for supply-chain safety
- Familiar Docker deployment workflows
Pros
- Strong isolation model reduces security risk
- Secrets management keeps credentials out of config files
- Backed by Docker's established infrastructure
Cons
- Requires Docker expertise and infrastructure
- Catalog is smaller than general-purpose MCP registries
- Primarily a deployment mechanism rather than a full discovery experience
#11 Smithery
Smithery is a hosted deployment and discovery platform for MCP servers that appears repeatedly in 2026 ecosystem coverage. According to vendor documentation cited in research, Smithery provides a hosted option for MCP servers — for example, Decodo's MCP server can be deployed via Smithery as a hosted alternative to running it locally as a Node.js server — and its compatibility model lets servers plug into any Smithery-enabled workflow, pairing real-time tools with AI assistants, automation platforms, or custom agents without building complex integrations from scratch. In practice, Smithery functions as both a registry and a hosting layer: developers can find servers, then run them hosted rather than managing local installs and API keys in config files. This aligns with the broader 2026 shift toward remote, OAuth-secured MCP servers, where hosted endpoints from vendors like GitHub, Notion, Stripe, and Figma are becoming the default. For developers who prefer not to manage local server processes, Smithery offers a middle path between raw registries and vendor-hosted official endpoints.
Best for: Developers who want hosted MCP server deployment without managing local installs
Pricing: Contact for pricing
Key features
- Hosted deployment option for MCP servers
- Compatibility layer for Smithery-enabled workflows
- Registry and hosting combined in one platform
- Reduces local install and credential-management overhead
Pros
- Hosting eliminates local process management
- Broad compatibility with popular AI tools and agents
- Simplifies credential handling versus local config files
Cons
- Less emphasis on deep security vetting or benchmarking in discovery
- Hosting model may not suit servers that need local machine access
- Pricing details are not publicly itemized in reviewed sources
#12 Official MCP Registry
The Official MCP Registry is the protocol project's own listing of public MCP servers, maintained under the Model Context Protocol organization now governed by the Linux Foundation's Agentic AI Foundation. According to 2026 coverage, the current MCP specification is version 2026-07-28, and the official registry lists public servers with their versions, making it the canonical source of truth for what exists in the ecosystem. Anthropic reports more than 10,000 active public MCP servers with support in ChatGPT, Cursor, Gemini, Microsoft Copilot, and Visual Studio Code, and the protocol project also maintains reference implementations and official SDKs on GitHub. The official repository and registry are repeatedly cited in developer guides as the starting point for MCP discovery — the source of truth for reference implementations — even though the registry itself is intentionally minimal compared to commercial directories. For teams that want to verify a server's provenance or check whether an integration is listed at the protocol level, the Official MCP Registry is the authoritative reference, best used alongside a curated directory for day-to-day discovery.
Best for: Teams that need the authoritative, protocol-level source of truth for MCP servers and SDKs
Pricing: Free
Key features
- Canonical registry of public MCP servers with version listings
- Maintained under the Linux Foundation's Agentic AI Foundation
- Reference implementations and official SDKs (TypeScript and Python)
- Aligned with the final MCP 2026-07-28 specification
- Authoritative provenance verification for servers
Pros
- Authoritative and neutral — governed by the protocol project itself
- Version-accurate listings tied to the current spec
- Free and vendor-neutral
Cons
- Minimal curation, search, and comparison features
- No security scoring, benchmarking, or quality signals
- Better as a verification source than a primary discovery tool
Conclusion
The MCP ecosystem in 2026 is enormous — over 10,000 active public servers by Anthropic's count — and choosing where to start matters more than ever. If you're wiring up coding agents, the mega-directories like mcpservers.org and Glama give you breadth, while security-focused options like AgenticSkills and verified directories like Apigene add vetting. But there's a bigger shift underway: packaged knowledge is migrating from MCP servers to agent skills, and that's where trust becomes critical. Research found that roughly 26% of agent skills carry at least one vulnerability, and no other directory tackles that problem head-on. That's why SkillzBench tops our list. It's building a free, independent directory of agent skills with security scanning, license checks, commit-SHA version pinning, and sandboxed benchmarking that measures each skill's actual performance lift — plus a free MCP server with per-agent loadouts so your agent only sees the skills you choose. Scores are never for sale, and everything is free. Want to go further with your agent stack? Skills, proven. Explore the free agent skills directory and join the SkillzBench waitlist at skillzbench.com to be first in line when it launches — and start building an agent stack you can actually trust.
Frequently asked questions
What is an MCP directory and why do I need one?
An MCP directory is a catalog of Model Context Protocol servers — the adapters that let AI agents like Claude Code, Cursor, ChatGPT, and Codex connect to external tools and data. With over 10,000 active public MCP servers in 2026 and most being demos or abandoned projects, a directory helps you discover, compare, and select servers that actually work. Good directories add curation, category organization, setup instructions, and increasingly, security and quality signals on top of the raw list.
What makes SkillzBench different from other MCP directories?
SkillzBench focuses on agent skills — SKMD.md instruction packages — and solves the trust problem no other directory addresses: published research found about 26% of skills carry at least one vulnerability. SkillzBench verifies every skill (pinning versions to commit SHAs, security-scanning, license-checking), benchmarks each one in a sandbox to measure its actual performance lift in percentage points, and publishes a 0-100 trust score from security, quality, license, maintenance, and community signals. It also provides a free MCP server with per-agent loadouts, and everything is free — revenue comes only from ads around blog content, which never influence scores or listings.
Are MCP directories free to use?
Most are. mcpservers.org, mcp.so, Glama, the awesome-mcp-servers GitHub list, AgenticSkills, Top-MCPs, the Developers Digest directory, and the Official MCP Registry are all free. SkillzBench is entirely free — directory, MCP connector, benchmarks, and alerts. Platforms like Apigene, Smithery, and the Docker MCP Catalog offer free discovery but may charge for hosting, platform features, or enterprise tooling, so check their pricing pages for specifics.
How many MCP servers should I actually install?
Fewer than you might think. Multiple 2026 guides converge on the same advice: three to six well-chosen servers beats fifteen, because every server adds tool-call latency, token overhead, and potential tool-name collisions in your agent's context window. Some agents, like Pi, use adapters that load tools on demand to keep context small. Start with the servers that solve your biggest bottleneck — commonly Context7 for documentation, GitHub for repository work, and Playwright for browser automation — then add more only when a real workflow demands it.
Are MCP servers safe to connect to my accounts?
Security is the ecosystem's biggest concern. Research cited in 2026 found that 36.7% of public MCP servers have SSRF vulnerabilities and 43% have unsafe command execution paths, and one audit found 24% of surveyed servers run with no authentication at all. Best practices: start read-only, prefer official vendor-maintained servers, scope credentials tightly, keep secrets out of config files, review what servers return to guard against prompt injection, and use directories that publish security audits — or run servers through isolated gateways like Docker's MCP tooling.
What's the difference between an MCP server and an agent skill?
An MCP server provides live tool calls against external systems — querying a database, opening a pull request, scraping a webpage. An agent skill is a packaged instruction set (SKMD.md) that teaches an agent reusable knowledge and workflows — library conventions, processes, best practices. A widely discussed 2026 consensus: use MCP for live tool calls against external systems, and skills for reusable knowledge. The two are complementary, which is why SkillzBench's free MCP connector that attaches verified skills to any agent is useful alongside a traditional MCP server stack.
Which MCP directory should a beginner start with?
Beginners should start with a directory that combines curation with education. MCP.so offers a simple protocol explanation alongside its catalog, and Top-MCPs.com provides client-specific setup guides with copy-ready config examples for Claude Desktop, Claude Code, Cursor, VS Code, ChatGPT, and more. The Developers Digest directory includes working JSON configurations for every server, which dramatically reduces setup friction. Once you're comfortable, graduate to security-audited directories like AgenticSkills — and for agent skills specifically, SkillzBench's verified, benchmarked directory is the trustworthy starting point.