A curated collection of production-ready MCP servers. Plug-and-play tools for Claude, Cursor, Windsurf & more.
MCP Hub provides 25 tools across 8 domains with explicit schemas and descriptions. However, quality is inconsistent. Strengths: all tools have descriptions (10-200 chars) and input schemas with type definitions. Weaknesses: (1) Many descriptions are generic or lack actionable context (e.g., 'Run a shell command and return output. Use with caution.' for run_command). (2) Parameter descriptions are sparse or missing context (e.g., 'filter' in csv_query lacks format guidance). (3) No output schemas documented, LLMs cannot predict response structure. (4) Error handling is absent, no recovery guidance, no categorization. (5) No tool annotations (readOnlyHint, destructiveHint, idempotentHint) despite clear risk levels. (6) Security concerns: run_command is DESTRUCTIVE with no validation or dry-run; http_post accepts arbitrary JSON bodies; csv_query accepts Python expressions (code injection risk). (7) Composition issues: http_get and fetch_url overlap; get_price and get_market_data could be unified. Average tool score: 52/100.
Cancel a reminder by ID.
Check if a URL is reachable and get status code.
Create a new Markdown note.
Get CSV file info: columns, row count, data types, sample data.
Query CSV with SQL-like operations (filter, sort, aggregate).
Fetch content from a URL and return readable text.
Find files matching a pattern.
No output schemas documented. LLMs cannot predict response structure, forcing them to guess field names and types. This breaks tool chaining and increases hallucination risk.
run_command (DESTRUCTIVE) lacks validation, dry-run, or confirmation. Description is vague ('Use with caution'). No error guidance. Agents can execute arbitrary shell commands without safeguards.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 56 | 2026-07-28+ | v2 |
Get current weather for any location worldwide. No API key needed.
Get disk usage for all mounted filesystems.
Get weather forecast for up to 7 days.
Get detailed market data: price, market cap, volume, 24h change.
Get current price of a cryptocurrency in USD.
Get system information: OS, CPU, memory, disk.
Get currently trending cryptocurrencies.
Make an HTTP GET request and return the response.
Make an HTTP POST request with JSON body.
List all notes in the vault.
List running processes sorted by CPU or memory usage.
List all active reminders.
Read a CSV file and return its contents.
Read a note by title or path.
Run a shell command and return output. Use with caution.
Search notes by content or title.
Set a reminder that fires after a specified number of seconds.
Search the web using DuckDuckGo. No API key required.
csv_query accepts Python expressions in 'filter' parameter without validation. This is a code injection vector, malicious or confused LLM input could execute arbitrary Python.
Parameter descriptions lack format guidance. E.g., 'filter' in csv_query says 'Python expression' but does not explain syntax, constraints, or examples. 'headers' in http_post/http_get says 'JSON object' but does not clarify structure.
Tool overlap: http_get and fetch_url both fetch URLs; get_price and get_market_data both retrieve crypto data. LLMs waste reasoning cycles deciding between similar tools. Consolidate or clarify distinctions.