MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/175

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,177–4,200 of 4,761 · ranked by trust score, then stars

PDF Reader

sylphxai/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 9361 readstdio

sqz

ojuschugh1/sqz

✕BLOCK F

Context compression for AI coding agents: compresses tool output before it enters the model, dedups repeats to 13-token refs. Claude Code, Cursor, Codex, Kiro, Zed, any MCP client. Rust, zero LLM calls.

★ 644Not listed in sourcestdio

McpStore

ip2a/mcpstore

✕BLOCK F

Elegantly manage your MCP services

★ 4321 readstreamable-http

pgEdge Postgres

pgedge/pgedge-postgres-mcp

✕BLOCK F

pgEdge MCP Server. A PostgreSQL MCP server with a Natural Language Agent CLI and Web UI.

★ 2331 read

mac-mcp

bulutarkan/mac-mcp

✕BLOCK F

Talk to your AI agent and let it work on your Mac. Open source MCP control for browser, files, apps, shell, and agents.

★ 801 destructivestreamable-http

Swagger Gateway

zaizaizhao/mcp-swagger-server

✕BLOCK F

MCP Swagger Server 将任何符合 OpenAPI/Swagger 规范的 REST API 转换为 Model Context Protocol (MCP) 格式,让 AI 助手能够理解和调用您的 API。

★ 7715 readsse

Sendmux

sendmux/sendmux-sdk

✕BLOCK F

Official monorepo of SDKs, CLI, and MCP servers for Sendmux email APIs across TypeScript, Python, Go, PHP, Rust, and Ruby.

★ 651 destructivestdio

browser-mcp

Agent360dk/browser-mcp

✕BLOCK F

The browser tool that can stop and ask you. A 2FA code, a CAPTCHA, a choice only you can make: it asks on your screen, then carries on in the same signed-in Chrome. 40 tools, MCP clients that run local servers, MIT.

★ 532 destructivestdio

Vault

zycaskevin/vault-agent-memory

✕BLOCK F

Local-first memory governance for AI agents: shared, reviewable, auditable memory via SQLite and MCP.

★ 501 write

Vault for LLM

zycaskevin/vault-for-llm

✕BLOCK F

Local-first memory governance for AI agents: shared, reviewable, auditable memory via SQLite and MCP.

★ 501 write

CodeInspectus

synvoya/codeinspectus

✕BLOCK F

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

★ 481 destructivestdio

Memi

sarveshsea/memi

✕BLOCK F

The design layer for agentic AI — design context, interface checks, and verification for coding agents.

★ 471 destructivestdio

Wwmcp

theyahia/wwmcp

✕BLOCK F

MCP servers for Russian, CIS and non-Western APIs — 46 servers: Russia/CIS, Turkey, Gulf, Egypt, Ethiopia, Bangladesh, Latin America. Turborepo monorepo + GitHub Pages catalog.

★ 337 destructivestdio

GitHub Enterprise

containerelic/github-enterprise-mcp

✕BLOCK F

github-enterprise-mcp

★ 292 destructivesse

GitHub Enterprise

ddukbg/github-enterprise-mcp

✕BLOCK F

github-enterprise-mcp

★ 292 destructivesse

openrod

OpenRod/OpenRod

✕BLOCK F

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

★ 173 readstreamable-http

willow-mcp

willow-memory/willow-mcp

!CAUTION F

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

★ 35 writestdio

codemcp

mewisme/codemcp

✕BLOCK F

CodeMCP is a workspace-aware execution, context, and agent orchestration server for AI clients.

★ 23 readstreamable-http

guuey-sdks

withguuey/guuey-sdks

✕BLOCK F

The @guuey/* packages — CLI, chat kit, scaffolder and SDKs for hosting agents on Guuey

★ 11 destructivestreamable-http

statelessagent

rerecoy123/statelessagent

✕BLOCK F

🧠 Provide local-first persistent memory for AI coding workflows, indexing notes to deliver relevant context in new sessions.

★ 1Not listed in sourcestdio

agentic-engineering-harness

JamesMorales04/agentic-engineering-harness

✕BLOCK F
★ 04 write

kleo-mcp

tonnooooo/kleo-mcp

✕BLOCK F

Kleo: remote MCP server that turns a brief into a narrated 4K 60 fps film, realistic or animation, from Claude, ChatGPT, Cursor or any MCP client

★ 02 writestreamable-http

neuralos

DrOlu/RTerm

✕BLOCK F

RTerm — AI-native terminal & agentic-AI operations platform for Forward Deployed Engineers & SREs: AIOps closed-loop remediation, AI SRE, self-healing infrastructure, runbook automation, ChatOps; executes over SSH/WinRM/serial under policy with tamper-evident audit.

★ 04 destructivestreamable-http

relay-companion

davidkariuki123/relay-companion

✕BLOCK F

Auditable source and signed installer for Relay Companion

★ 03 destructivestdio

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.