The 10 Most-Downloaded MCP Servers This Week
This digest ranks MCP servers by weekly download volume across npm and PyPI. Downloads are a useful proxy for reach, but they don't tell the whole story — several high-traffic packages in this list ship with security flags that operators should weigh before deploying. Where our scanner reported a score of 0.0 (PyPI registry items not yet fully profiled), we've left the comparison chart to the npm packages that have full telemetry.
Score Breakdown
| Server | Registry | Weekly DL | Overall | Security | Freshness | Adoption | Quality | Trust | Risk | Secrets |
|---|---|---|---|---|---|---|---|---|---|---|
| fastapi-mcp | pypi | 3,749,473 | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | unknown | 0 |
| chrome-devtools-mcp | npm | 2,108,380 | 65.5 | 100.0 | 30.0 | 60.0 | 60.0 | 50.0 | high | 1 |
| ddgs | pypi | 1,175,275 | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | unknown | 1 |
| mcp-server-qdrant | pypi | 1,106,864 | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | unknown | 0 |
| @upstash/context7-mcp | npm | 1,095,970 | 65.5 | 100.0 | 30.0 | 60.0 | 60.0 | 50.0 | high | 6 |
| @storybook/mcp | npm | 830,566 | 65.5 | 100.0 | 30.0 | 60.0 | 60.0 | 50.0 | high | 5 |
| @modelcontextprotocol/server-filesystem | npm | 331,404 | 65.5 | 100.0 | 30.0 | 60.0 | 60.0 | 50.0 | high | 0 |
| excel-mcp-server | pypi | 210,101 | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | unknown | 0 |
| mcp-server-duckdb | pypi | 208,415 | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | unknown | 0 |
| scrapling | pypi | 203,653 | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | 0.0* | unknown | 0 |
* PyPI entries marked 0.0 have not been fully profiled by our scoring pipeline yet — treat as "unscored" rather than "low quality."
The Highlights
1. fastapi-mcp — 3.75M weekly downloads
The volume leader by a wide margin. It exposes existing FastAPI endpoints as MCP tools, with auth support — a pragmatic shortcut for teams who already have a FastAPI surface and want to make it agent-callable. Licensed, no secrets detected. Profiling pending.
pip install fastapi-mcp2. chrome-devtools-mcp — 2.11M weekly downloads
Official MCP wrapper around Chrome DevTools. Reads and writes the filesystem and makes network calls — expected for a browser automation tool, but it ships with 1 secret found and is classed high risk. Audit before granting it broad filesystem scope.
npx chrome-devtools-mcp3. ddgs — 1.18M weekly downloads
A metasearch aggregator (DuckDuckGo and friends). Two caveats worth noting: no license detected, and 1 secret found in the source. Both are blockers for many enterprise environments.
pip install ddgs4. mcp-server-qdrant — 1.11M weekly downloads
The official Qdrant vector-DB MCP server. No secrets found, but no license metadata detected — verify upstream before redistributing.
pip install mcp-server-qdrant5. @upstash/context7-mcp — 1.10M weekly downloads
Context7's documentation-fetching MCP server. Licensed, but our scanner flagged 6 secrets in the package — the highest count in this digest — and the package reads/writes the filesystem and makes network calls. Risk class: high. Review the findings before deploying with credentials in scope.
npx @upstash/context7-mcp6. @storybook/mcp — 830K weekly downloads
Surfaces Storybook component knowledge to agents — a strong fit for design-system-aware coding assistants. Licensed, but 5 secrets detected and rated high risk. Likely test fixtures, but worth verifying.
npx @storybook/mcp7. @modelcontextprotocol/server-filesystem — 331K weekly downloads
The reference filesystem server from the MCP project itself. Zero secrets, licensed, security score 100. The "high" risk class here reflects capability surface (full filesystem read/write) rather than code hygiene — that's by design for this tool.
npx @modelcontextprotocol/server-filesystem8. excel-mcp-server — 210K weekly downloads
Excel file manipulation over MCP. Clean on secrets, but no license — a problem for redistribution.
pip install excel-mcp-server9. mcp-server-duckdb — 208K weekly downloads
DuckDB query execution over MCP. Licensed, no secrets found. Profiling pending but the surface area is small and well-scoped.
pip install mcp-server-duckdb10. scrapling — 204K weekly downloads
Adaptive web-scraping framework usable via MCP. Licensed, no secrets found. Useful when DDG-style metasearch isn't enough and you need page-level extraction.
pip install scraplingSecurity & Risk Watch
Three packages in this digest carry meaningful security flags that warrant attention before installation:
- @upstash/context7-mcp — 6 secrets found. Highest count in the list. Risk class high.
- @storybook/mcp — 5 secrets found. Risk class high.
- chrome-devtools-mcp — 1 secret found. Risk class high.
- ddgs — 1 secret found, no license. Double flag.
Three PyPI packages are missing license metadata: ddgs, mcp-server-qdrant, and excel-mcp-server. That's a compliance issue regardless of code quality. The cleanest scans (zero secrets, has license) belong to fastapi-mcp, @modelcontextprotocol/server-filesystem, mcp-server-duckdb, and scrapling.
Adoption & Activity
Total weekly downloads across these 10 servers: roughly 11.0 million. The distribution is heavily top-loaded: fastapi-mcp alone accounts for ~34% of that volume, and the top three (fastapi-mcp, chrome-devtools-mcp, ddgs) together account for ~64%.
Star counts and last-commit recency were not available in this snapshot for any of the 10 entries, so commit-velocity comparisons aren't possible here. The four npm packages all carry a freshness score of 30.0 — middling — suggesting room for more frequent releases on the npm side. Official/vendor-backed servers (fastapi-mcp, qdrant, context7, storybook, chrome-devtools, modelcontextprotocol) dominate the top of the chart, which is consistent with the broader pattern: developers gravitate toward maintainer-backed MCP servers over community forks.
Editor's Pick
@modelcontextprotocol/server-filesystem is our pick of the week. It isn't the most downloaded, but among packages with a complete security profile it's the only one that combines a clean scan (0 secrets found), a present license, a perfect security score (100), and provenance directly from the MCP project. Its "high" risk class reflects what filesystem access inherently is — not poor hygiene — and that's an honest signal we'd rather see than hide.
If you need raw reach, fastapi-mcp is the obvious choice for FastAPI teams and worth a profiling pass once our pipeline catches up. Avoid @upstash/context7-mcp and @storybook/mcp in production until their secret-scan findings are reviewed and resolved upstream.
npx @modelcontextprotocol/server-filesystem