MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/185

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,417–4,440 of 4,761 · ranked by trust score, then stars

Task Orchestrator

echoingvesper/mcp-task-orchestrator

✕BLOCK F

A Model Context Protocol server that provides task orchestration capabilities for AI assistants

★ 284 destructivestdio

rag-rat

cq27-dev/rag-rat

✕BLOCK F

Local repo-intelligence index + MCP server: semantic search, symbol/graph navigation, impact-surface preflight, git + GitHub papertrail, and a source-anchored memory graph.

★ 24Not listed in sourcestdio

SAME

sgx-labs/statelessagent

✕BLOCK F

Your AI forgets everything between sessions. SAME fixes that. Local-first, no API keys, single binary.

★ 23Not listed in sourcestdio

@zibby/skills

ZibbyDev/skills

✕BLOCK F

Pluggable MCP tool modules that give agent workflows their capabilities — GitHub, GitLab, Sentry, Slack, Jira, Notion, memory, datasets, and more.

★ 711 destructivestdio

impri

sekera-radim/impri

✕BLOCK F

Human-in-the-loop approval inbox for AI agents. An agent proposes an action, a human approves or rejects it, then it runs. Watchers + approval inbox, MCP + REST, self-hostable (MIT).

★ 53 writestdio

AiFinPay — payment infrastructure for AI agents

AiFinPay/sdk

✕BLOCK F

Payment infrastructure for AI agents: wallet, passport, owner-enabled Polygon and Base payments.

★ 35 writestdio

stitchkit

max-listov/stitchkit

✕BLOCK F

Contract-first backend framework for Bun and Node — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client.

★ 31 destructivestreamable-http

Tisty

rgdevment/Tisty

!CAUTION F

Free, open source task manager and Markdown notes for Windows and macOS. An archive that keeps what each task taught you: plain files, no account, no server, MCP for your assistant.

★ 3Not listed in sourcestdio

puenteo

mano7onam/puenteo

✕BLOCK F

Let your coding agents talk to each other: search every Claude Code / Codex / Gemini / Cursor session and message live sessions. CLI · MCP · hooks · HTTP/SSE · A2A.

★ 11 readstdio

Scopebond

avouro-com/scopebond

✕BLOCK F

Free, open-source guardrails and verifiable evidence for AI coding agents: Claude Code, Cursor, Codex, MCP, and GitHub. Scopebond Cloud is a separate proprietary hosted workspace.

★ 01 destructive

caveman-shrink

JuliusBrussee/caveman

✕BLOCK F

🪨 why use many token when few token do trick. Viral skill + proxy for coding agents that cuts 65% of tokens by talking like a caveman.

★ 111,2134 write

Reactive Resume

amruthpillai/reactive-resume

✕BLOCK F

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

★ 43,1812 readstreamable-http

Reactive Resume

reactive-resume/app

✕BLOCK F

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

★ 43,1812 readstreamable-http

Reactive Resume

reactive-resume/reactive-resume

✕BLOCK F

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

★ 43,1812 readstreamable-http

Mex

mex-memory/mex

✕BLOCK F

Team memory for engineers and their AI agents. Lives in your repo. Shared through Git.

★ 1,7032 writestdio

Snowluma

SnowLuma/SnowLuma

✕BLOCK F

Next Remote Protocol Framework.

★ 1,6111 writestdio

PrismerCloud

prismer-ai/prismercloud

✕BLOCK F

Prismer Cloud

★ 1,5598 destructivestdio

Sentry

getsentry/sentry-mcp

✕BLOCK F

An MCP server for interacting with Sentry via LLMs.

★ 8643 readstdio

Flyto Core

flytohub/flyto-core

✕BLOCK F

AI said it finished. Flyto2 shows the proof.

★ 4833 readstdio

Entroly

juyterman1000/entroly

✕BLOCK F

Cut AI context cost without trusting the compressor. Every reduction is reversible, byte-exact recoverable, and carries an auditable receipt. Local-first, works through proxy, MCP, SDK, or agent wrapper.

★ 4713 destructivesse

Claude Delegator

antonbabenko/claude-delegator

✕BLOCK F

Ask Codex, Gemini, Grok, and 400+ OpenRouter models (Qwen, Kimi, DeepSeek) for second opinions or arbiter-mediated consensus. One MCP server for Claude Code, Codex, Cursor, Kiro, OpenCode. Measures the models' usefulness, too.

★ 1697 writestdio

Deliberation

antonbabenko/deliberation

✕BLOCK F

Ask Codex, Gemini, Grok, and 400+ OpenRouter models (Qwen, Kimi, DeepSeek) for second opinions or arbiter-mediated consensus. One MCP server for Claude Code, Codex, Cursor, Kiro, OpenCode. Measures the models' usefulness, too.

★ 1697 writestdio

mcp-observatory

KryptosAI/mcp-observatory

✕BLOCK F

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

★ 1403 destructivestdio

Superdesign

jonthebeef/superdesign-mcp-claude-code

✕BLOCK F
★ 761 destructivesse

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.