mcpso
directory for Awesome MCP Servers
No outside reports on file
mcpso is a directory tool itself, but the real risk comes from installing unvetted MCP servers from it—each one can potentially access or exfiltrate data depending on its permissions and the source's trustworthiness.
Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesReads & writes local foldersREVIEW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsRequires API key or tokenREVIEW
- Package sourceGitHub (chatmcp/mcpso)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/chatmcp/mcpso ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: B (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Mcpso
mcpso is an open-source MCP server focused on Cloud & infrastructure. directory for Awesome MCP Servers. Source code and documentation are published on GitHub at chatmcp/mcpso.
Who it’s for
Developers and teams building AI applications who need to discover and evaluate MCP server options. Organizations looking for standardized connectors between AI systems and external tools or databases.
Alternatives
- Anthropic's MCP documentation and official registry — official MCP server recommendations from Claude's creators
- OpenAI plugins marketplace — similar connector ecosystem for ChatGPT integrations
- LangChain integrations — curated third-party tool connectors for AI applications
- Zapier — established service for connecting apps and automating workflows
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README on the GitHub repository for installation and usage instructions specific to this directory tool.
Why this grade
Signal-based grade (4/7 points): well starred on GitHub, listed in several sources, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 2.1k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Data exposure through connectors: MCP servers listed here can access external APIs, databases, or file systems; running them grants the AI access to whatever those services can reach
- Malicious server listings: Because this is a community directory, an attacker could contribute fake MCP servers designed to steal credentials or exfiltrate data when installed
- Hidden permissions in integrations: Some listed servers may request broad permissions (like file system access) that could leak sensitive files or environment variables to the AI or external services
- Supply chain risk: Depending on how this directory is maintained, listed projects could become compromised or abandoned without security updates
- Confusion about server trustworthiness: Users might assume all listed servers are vetted, when they may not be
How to lower the risk
Least-privilege permissions
- Only install MCP servers you actively need; disable others
- Review what data or APIs each server is allowed to access before enabling
Network isolation
- Run MCP servers in sandboxed environments or containers when possible
- Restrict outbound network access to only required endpoints
Monitoring
- Log all API calls and data access made by installed MCP servers
- Watch for unexpected outbound connections or large data transfers
Red flags to watch for
- Servers with no clear maintainer, documentation, or recent updates
- Requests for overly broad file system or credential access
- Closed-source or obfuscated server code
Questions
How do I install Mcpso?
Mcpso does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/chatmcp/mcpso.
Are there security reports about Mcpso?
No reports found for this package in our research (last checked 2026-10-30). Mcpso currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include data exposure through connectors, malicious server listings, hidden permissions in integrations.
Is Mcpso actively maintained?
Mcpso has 2.1k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/chatmcp/mcpso before pinning it in production.
What are alternatives to Mcpso?
Notable alternatives to Mcpso include Anthropic's MCP documentation and official registry (official MCP server recommendations from Claude's creators), OpenAI plugins marketplace (similar connector ecosystem for ChatGPT integrations), LangChain integrations (curated third-party tool connectors for AI applications), Zapier (established service for connecting apps and automating workflows). You can also compare Mcpso side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Mcpso? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/chatmcp-mcpso)HTML embed:
<a href="https://agentarmorhq.com/skills/chatmcp-mcpso"><img src="https://agentarmorhq.com/api/badge/chatmcp-mcpso" alt="AgentArmorHQ Risk Grade for Mcpso" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "chatmcp-mcpso"Share with your security lead
Need sign-off to use mcpso? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: mcpso
- **Listing URL:** https://agentarmorhq.com/skills/chatmcp-mcpso
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 2.1k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** Reads & writes local folders
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** GitHub (chatmcp/mcpso)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/chatmcp/mcpso
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- chatmcp
- Source code
- github.com/chatmcp/mcpso
- Est. context load
- ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
- Popularity
- 2.1k GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-21
Community
Discussions for Mcpso
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude