Add GitHub, Context7 (current library docs) and Playwright (a real browser to test your app) first. Connect Supabase or Neon only to a development project in read-only mode. Treat everything an MCP server returns as untrusted text, give each server the smallest permissions it needs, and never connect an agent to a production database or live payment keys.
The Model Context Protocol lets a coding agent use outside tools: your repository, a browser, a database. That makes agents far more capable and also far riskier, because text returned by a tool can contain instructions aimed at the model. These are the servers worth the effort, with the settings that keep them safe.
The 12 picks
Swipe or use the arrows.
Free, MIT licenceGitHub MCP Server
GitHub's official server: read repositories, manage issues and pull requests, and check Actions runs. Free and MIT licensed. Use a separate minimal-scope token per project and the read-only option when you can.
Free, 1,000 calls a monthContext7
Pulls current, version-specific library docs into the agent's prompt so it stops guessing old APIs. The hosted service is free for 1,000 calls a month. Docs are community-contributed, so treat them as untrusted text.
Free, Apache-2.0Playwright MCP
Gives an agent a real browser to click, type and read pages, so it can test the app it just built. Free under Apache-2.0. Its own README says it is not a security boundary.
Free with your accountSupabase MCP
Lets an agent list tables, run SQL, apply migrations and read logs. Supabase says to use read-only mode, scope it to one project and connect a development project, never production.
Free, MIT licenceNeon MCP
Manage Neon Postgres in plain language: projects, branches, SQL and migrations. Free and MIT licensed. Neon says to use it for development and testing only and never to connect agents to production databases.
Free, Apache-2.0Chrome DevTools MCP
Lets an agent inspect a live Chrome: performance traces, network and console errors, screenshots. Free under Apache-2.0. It exposes browser content to the agent and sends usage statistics unless you opt out.
Free Starter: 20 calls a monthFigma MCP server
Lets an agent read your Figma designs so generated code matches them. On the free Starter plan, view seats get up to 20 tool calls a month, which is tight for a student project.
Free, Apache-2.0Cloudflare MCP
One server for the whole Cloudflare API, replacing the older per-product servers. Free and Apache-2.0, using your own Cloudflare account. Pick the minimum permissions when you authorise it.
Free on all plansVercel MCP
Vercel's hosted server to search docs, manage projects and deployments and read logs. Connecting gives the AI the same access as your Vercel account, so confirm the endpoint is mcp.vercel.com.
Free with a Sentry accountSentry MCP
Lets an agent search errors, analyse performance and triage issues in Sentry. Scope the connection to one organisation and project. Error messages are user-controlled text, so they can carry injected instructions.
Free; sandbox onlyStripe MCP
Stripe's official server for customers, products, payment links and invoices. Use a sandbox, never live mode. From December 2026 it stops accepting full-access secret keys, so migrate to restricted agent keys by 30 November 2026.
Free, MIT licenceshadcn MCP
Lets an agent search and install components from the shadcn registry or your own. Free under the MIT licence. It changes project files, so read the diff, and only add registries you trust.
Compare in a table
Show the full comparison table
| Tool | Best for | Free plan |
|---|---|---|
| GitHub MCP Server | Repos, issues and pull requests | Free, MIT licence |
| Context7 | Up-to-date library docs | Free, 1,000 calls a month |
| Playwright MCP | Letting the agent test your app | Free, Apache-2.0 |
| Supabase MCP | Database work on a dev project | Free with your account |
| Neon MCP | Postgres branches and migrations | Free, MIT licence |
| Chrome DevTools MCP | Debugging and performance | Free, Apache-2.0 |
| Figma MCP server | Design to code | Free Starter: 20 calls a month |
| Cloudflare MCP | Deploying and managing Workers | Free, Apache-2.0 |
| Vercel MCP | Vercel deployments and logs | Free on all plans |
| Sentry MCP | Fixing production errors | Free with a Sentry account |
| Stripe MCP | Practising payments safely | Free; sandbox only |
| shadcn MCP | Installing real UI components | Free, MIT licence |
Get started this week
- Add Context7 to your editor and ask it to use current docs for one library.
- Add Playwright MCP and have the agent test your sign-in page in a browser.
- Connect Supabase MCP to a development project with read-only mode switched on.
How to choose
- Start with three servers, not ten: GitHub, Context7 and Playwright cover most of what a beginner needs.
- Keep manual approval switched on for every tool call and read what it is about to do.
- Point database servers at a development project in read-only mode; never at production.
- Do not commit tokens in a project .mcp.json file; use environment variables.
Free plans change. Limits above were checked on 3 Nov 2026; confirm on each tool's pricing page before relying on them.
Frequently asked questions
What is MCP?
The Model Context Protocol is an open standard that lets AI apps connect to tools and data. A coding agent uses it to read your repository, drive a browser or query a database through small servers.
Which MCP servers should a beginner install first?
GitHub for your code, Context7 so the agent uses current library docs, and Playwright so it can test your app in a real browser.
Are MCP servers safe?
Not automatically. Anything a server returns, such as a web page or a database row, can contain instructions meant for the model. Use read-only modes, minimal permissions, a development project and manual approval, and treat unknown servers as untrusted code.
Can an MCP server delete my data?
Yes, if you give it write access. Researchers have shown an agent connected to a database being tricked by a malicious support ticket into leaking data. Read-only mode and a non-production project remove most of that risk.
Learn this with mentors
Programmes for builders and engineers with admissions open: live classes, mentors and project work.
