MCP servers · every one read in full

MCP servers, checked before you connect them

5,176 Model Context Protocol servers, audited from source. See which tools each one hands your agent (read, write or destructive) and copy a connect command for the package version recorded in its source.

Submit a server

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “MCP servers”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp

Verdicts · 5,176 servers

✓SAFE2,379!CAUTION1,002✕BLOCK1,795

Transports

stdio, runs locally3,716
Streamable HTTP, remote1,966
SSE, legacy remote423
Not declared771

A server can list more than one transport.

Tool risk

1,409

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

Servers by client

Each page carries a connect command for that client

Claude Code4,770Claude Desktop3,437

Only clients with a connect config in our data get a hub; today that is Claude Code and Claude Desktop.

Servers by risk

Start here if you want least privilege

Read-only servers1,622Every tool only reads. Nothing can change or delete your data.Read only No destructive tools3,151May create and edit, but nothing deletes, overwrites or runs commands.Read + write Remote servers2,126Connect over the network, so nothing runs on your machine and your data leaves it.HTTP · SSE

Highest trust

Ranked by trust score, then stars

Where several servers share a name, the best pick of the group is shown; copies of another page are left out.
Server	Verdict	Tools	Transport	Popularity	Clients
Playwrightmicrosoft/playwright-mcp	✓SAFE B	Not listed in source	stdio	★ 37,315GitHub stars	Claude Code
Graphitigetzep/graphiti	✓SAFE B	3 destructive	streamable-http	★ 31,002GitHub stars	Claude Code · Claude Desktop
figma-developer-mcpGLips/Figma-Context-MCP	✓SAFE B	2 read	stdio · streamable-http	★ 15,973GitHub stars	Claude Code
Einocloudwego/eino	!CAUTION B	1 write	Not declared	★ 13,103GitHub stars	No config yet
Ghidralauriewired/ghidramcp	!CAUTION B	8 write	sse	★ 10,129GitHub stars	No config yet
Graftnanonets/graft	!CAUTION B	2 write	Not declared	★ 8,839GitHub stars	Claude Code · Claude Desktop
Cursor Talk to Figmagrab/cursor-talk-to-figma-mcp	✓SAFE B	2 destructive	stdio	★ 7,031GitHub stars	Claude Code · Claude Desktop
Mobile Nextmobile-next/mobile-mcp	!CAUTION B	1 read	stdio · streamable-http	★ 6,779GitHub stars	Claude Code
Godot MCPCoding-Solo/godot-mcp	✓SAFE B	6 write	stdio	★ 6,021GitHub stars	Claude Code · Claude Desktop
Magic21st-dev/magic-mcp	✓SAFE B	Not listed in source	streamable-http	★ 5,904GitHub stars	Claude Code · Claude Desktop

Questions

What is an MCP server?

A small program that gives an AI agent tools: read a database, drive a browser, file a ticket. Clients such as Claude Code, Claude Desktop and Cursor connect to it over the Model Context Protocol.

What do read, write and destructive mean?

Read tools only look. Write tools create or change things. Destructive tools delete, overwrite or run commands. We class every tool the source declares.

Why are so many servers blocked?

1,795 of 5,176 servers are BLOCK. Each BLOCK page shows the findings behind the verdict, with the file and line, and says whether they sit in code that ships or in tests and docs.

How many MCP servers run remotely?

2,126 of 5,176 list a remote transport (streamable HTTP or SSE). A remote server needs no install, but whatever you send it leaves your machine.

Browse A–Z

Every server, alphabetically · 100 per page

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.

What is an MCP server?
GChatGPT CClaude PPerplexity
What do read, write and destructive mean?
GChatGPT CClaude PPerplexity
Why are so many servers blocked?
GChatGPT CClaude PPerplexity