MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/180

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,297–4,320 of 4,761 · ranked by trust score, then stars

sendmux-sdk

Sendmux/sendmux-sdk

✕BLOCK F

Official monorepo of SDKs, CLI, and MCP servers for Sendmux email APIs across TypeScript, Python, Go, PHP, Rust, and Ruby.

★ 651 destructivestdio

Teradata

teradata/teradata-mcp-server

✕BLOCK F

The community development of a MCP server for a Teradata database

★ 571 readstdio

Heimdall App Store Connect

erayendes/app-store-connect-mcp

✕BLOCK F

Heimdall — MCP server for the Apple App Store Connect API and App Store Server API (StoreKit 2). 890 tools across 13 profiles, generated from Apple's OpenAPI spec, plus one-call macros for worldwide pricing, submission readiness and metadata diffs, and confirm-before-write safety. Works with Claude,

★ 5110 writestdio

Kali

zebbern/zebbern-kali-mcp

✕BLOCK F

MCP server for Kali toolkit (docker) - 121 tools for AI-assisted security testing give agents access to all it needs!

★ 486 destructive

Profullstack

profullstack/mcp-server

✕BLOCK F

A generic, modular server for implementing the Model Context Protocol (MCP).

★ 459 writestdio

Fastly

fastly/mcp

✕BLOCK F

Model Context Protocol (MCP) server for AI-powered Fastly CDN management.

★ 391 writestreamable-http

Janee

rsdouglas/janee

✕BLOCK F

Secrets management for AI agents via MCP • @janeesecure

★ 307 writestdio

Barbacane

barbacane-dev/barbacane

✕BLOCK F

Barbacane API and Bidirectional AI Gateway

★ 289 read

governance-sdk

lua-ai-global/governance

✕BLOCK F

Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)

★ 262 destructive

ai-dossier

imboard-ai/ai-dossier

✕BLOCK F

An open standard for signed, versioned agent skills. Model-driven orchestration with a deterministic shell — host anywhere, verify who wrote it. CLI, registry, MCP, VS Code.

★ 96 writestdio

Agent 007

bill10/agent-007

✕BLOCK F

From web terminals for your coding agents to a self-running agent company: Claude Code and Codex in parallel git worktrees, a job board they pick work from, and one agent that runs the board from a goal.

★ 41 destructive

hn-mcp-server

cyanheads/hn-mcp-server

✕BLOCK F

Browse Hacker News feeds, threads, and user profiles with full-text search via MCP. STDIO or Streamable HTTP.

★ 4Not listed in sourcestdio

browser-ipc-cdp

alexis14kl/browser-ipc-cdp

✕BLOCK F

browser-ipc-cdp — Control remoto de navegadores Chromium (Brave, Chrome, Edge) via IPC con CDP dinámico. Abre tu navegador real con todas tus sesiones, detecta o asigna puerto automáticamente, configura portproxy/firewall para WSL, y actualiza el MCP de Claude Code. Sin puertos fijos, sin hacks

★ 39 destructivestdio

hbhqq9-bde-score

hbhqq9/bde-score

✕BLOCK F

🏆 Open-source multi-factor stock scoring API (0-100) | US/HK/A-Share 74 stocks | Zero signup | shields.io badges | GitHub Action | EU AI Act compliant

★ 35 readstdio

Trazum

Davmunrey/Trazum

✕BLOCK F

Know what your AI agents cost, per project, without your prompts leaving the machine. CLI, MCP server and CI gate. Zero dependencies, offline.

★ 17 readstdio

limetry

limetry/limetry

!CAUTION F

Limetry is open-source agent action governance: check tool intents against policy before irreversible runs. Returns allow, deny, or approval_required with signed receipts and privacy-safe audit. TypeScript SDK, CLI, and MCP for IDE like Cursor, VS Code, GitHub Copilot, Claude. Optional CI, SQL, and

★ 16 writestdio

sfdt

scoobydrew83/sfdt

✕BLOCK F

Salesforce DevTools — CLI, VS Code extension, sf plugin, MCP server, and web dashboard for Salesforce DX deploy, test, org health, and release management. AI-optional, CI-ready.

★ 12 destructivestdio

Synorive

arturoaeriform174/Synorive

✕BLOCK F

Search your files by meaning and fact-check the web, fully offline.

★ 026 readstdio

GPT Researcher

assafelovic/gpt-researcher

✕BLOCK F

An autonomous agent that conducts deep research on any data using any LLM providers

★ 29,5232 readstreamable-http

vMLX

jjang-ai/vmlx

✕BLOCK F

vMLX - Use MLX models easily - JANGQ (GGUF for MLX) - Not dependant on mlx_vlm

★ 8721 destructivesse

FLUJO

mario-andreschak/FLUJO

!CAUTION F

Multi-Agent + Automation Harness: Graph-based Workflows, MCP, Self-Improving Agents. NextJs+React

★ 62910 destructivestdio

Coolify

stumason/coolify-mcp

✕BLOCK F

MCP server for Coolify — 42 optimized tools for managing self-hosted PaaS through AI assistants

★ 6031 writestdio

Beever Atlas

beever-ai/beever-atlas

✕BLOCK F

Your First LLM-Wiki Conversation Knowledge Base

★ 4482 writestdio

Canonry <img src="https://raw.githubusercontent.com/Canonry/

Canonry/canonry

!CAUTION F

Agent-first AI SEO (AEO/GEO) operating platform

★ 17513 destructivestdio

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.