Analysis Agent Frameworks & Automation
Beyond GitHub and Playwright: 18 MCP servers that earn their place
By Sheela ·

Most “best MCP servers” lists repeat the same handful: GitHub, Playwright, a search engine, the filesystem. We review those too. This post covers the servers that do something less obvious, and the catch with each one. Ratings are out of 5.
Understanding code
- Serena (4.4) gives agents IDE-style tools backed by language servers: find a symbol, follow its references, edit by symbol. It is worth the setup on large multi-language codebases and overkill on small ones.
- Semble (4.1) is fast local semantic code search that runs on a CPU with no API keys. Its benchmarks are the authors’ own.
- code-review-graph (4.0) builds a graph of your code so a reviewing agent reads only the files a change can affect. Its 30 tools add weight.
- GitNexus (3.9) has the richest code graph, but its noncommercial licence rules it out for most work use without a paid deal.
Data and documents
- DBHub (4.3) from Bytebase covers Postgres, MySQL, MariaDB, SQL Server, Oracle and SQLite in one small server. Its SQL tool can write and drop tables by default, so connect it with a read-only database user.
- MarkItDown MCP (3.9) turns PDFs, Office files and web pages into Markdown. It has no authentication and can read any file the user can.
- Qdrant MCP (3.7) gives an agent searchable memory in a Qdrant database, but only store and find.
- Zotero MCP (4.2) searches, reads and annotates your research library. Its tool definitions take about 17,000 tokens by default.
Automation and email
- n8n’s built-in MCP server (4.2) is the first thing to try if you already run n8n: first-party and opt-in per workflow. The community n8n-MCP (4.1) knows far more about n8n’s nodes, but switch off its write tools and telemetry before pointing it at a real instance.
- AgentMail (4.1) gives an agent its own inbox. Inbound mail is a prompt-injection channel and the agent can send real email, so add guardrails. Atomic Mail (3.4) is a standards-based alternative that is still early.
Security, hardware and the physical world
- Snyk’s MCP server (4.0) checks AI-written code and dependencies. On the free plan, 100 code tests a month run out fast if every edit triggers a scan.
- GhidraMCP (4.1) lets a model decompile and annotate binaries in Ghidra. Use it only on software you own or are allowed to analyse.
- Home Assistant’s MCP Server (4.3) is built in and protected by OAuth. Limit which devices it can touch.
Creative and browser
- Excalidraw MCP (3.8) draws editable diagrams in chat, but the model cannot go back and tweak what it drew.
- Higgsfield MCP (3.7) generates images and video from many models, paid in credits with no hard spending cap.
- OpenTabs (3.6) lets an agent use web apps through your logged-in Chrome. That hands it the keys to every account you are signed into.
What we left out
OpenMemory was removed from Mem0’s repository in July 2026. Remotion’s MCP server is deprecated in favour of an agent skill. LegalMCP is a thin wrapper that asks for your PACER password in an environment variable.
Every server adds tools to your agent’s context and another set of permissions. Five you use beat forty you don’t.