MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/194

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,633–4,656 of 4,761 · ranked by trust score, then stars

nomoreide

Rorogogogo/nomoreide

✕BLOCK F

AI-native service workbench: MCP server + shared daemon for Claude Code, Codex, and Gemini. CLI, TUI, and web dashboard for running services, logs, git, and databases.

★ 71 writestreamable-http

Archon

coleam00/archon

✕BLOCK F

The first open-source harness builder for AI coding. Make AI coding deterministic and repeatable.

★ 23,5055 write

Memory Service

doobidoo/mcp-memory-service

✕BLOCK F

Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.

★ 1,9541 destructivestdio

Smart Tree

8b-is/smart-tree

✕BLOCK F

Smart Tree: not just a tree, a philosophy. A context-aware, AI-crafted replacement for 20+ tools with MEM8 quantum compression, semantic search, AST-smart editing, and partnership memory. Crafted with care by human + AI—accept no knock-offs.

★ 2707 read

KSail

devantler-tech/ksail

✕BLOCK F

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

★ 1663 readstdio

Pentest

dmontgomery40/pentest-mcp

✕BLOCK F

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

★ 14719 readsse

Sema

sema-lisp/sema

✕BLOCK F

A Lisp with first-class LLM primitives, implemented in Rust

★ 501 destructivestdio

Agent Security Harness

msaleme/red-team-blue-team-agent-fabric

✕BLOCK F

AI agent security harness, adversarial testing: 640 executable tests in the v4.26.1 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17,

★ 326 readstdio

agentix-cli

anis-marrouchi/agentx

✕BLOCK F

Self-hosted AI agents for small teams. Route Telegram, WhatsApp, GitHub, GitLab, crons, webhooks and mesh tasks to agents on Claude Code, Codex, OpenCode or any LLM API. Web dashboard + CLI. MIT.

★ 132 destructive

darktrace-mcp

nuoframework/darktrace-mcp

✕BLOCK F

Unofficial Darktrace MCP server for SOC investigations and incident response in Claude, Cursor, Codex and VS Code.

★ 1Not listed in sourcestdio

Faxbot

DMontgomery40/Faxbot

✕BLOCK F

Self-hosted, open source, fax-sending API. HIPAA compliant. This fax API includes MCP (Model Context Protocol) support for AI assistant integration.

★ 11 writestdio

Better Auth

better-auth/better-auth

✕BLOCK F

The most comprehensive authentication framework

★ 30,26612 readstreamable-http

claudish

MadAppGang/claudish

✕BLOCK F

Claude Code. Any Model. The most powerful AI coding agent now speaks every language.

★ 1,00511 writestdio

TouchDesigner

8beeeaaat/touchdesigner-mcp

✕BLOCK F

MCP server for TouchDesigner

★ 556Not listed in sourcestdio

MemClaw

caura-ai/caura-memclaw

✕BLOCK F

Caura (formerly MemClaw) — governed shared memory for AI agent fleets. Multi-agent, multi-tenant, MCP-native. Trust tiers, keystone policies, audit trails, knowledge graph, self-improving retrieval. Apache 2.0.

★ 5442 writestreamable-http

Open Computer Use

yambr/open-computer-use

✕BLOCK F

ARCHIVED — superseded by Wide Moat

★ 1261 writestreamable-http

Travel Planner

gongrzhe/travel-planner-mcp-server

✕BLOCK F
★ 991 writesse

Kiln

codeofaxel/kiln

✕BLOCK F

Describe it or draw it — Kiln makes it real. The open-source MCP server for 3D printing: AI agents (Claude, Codex, Cursor, or any MCP client) design, generate, slice & print on Bambu Lab, Creality, Prusa, Elegoo, Klipper/Moonraker, OctoPrint, Duet/RepRapFirmware & any Marlin printer.

★ 916 destructivestdio

HealthClaw Guardrails

aks129/healthclawguardrails

✕BLOCK F

Open-source guardrails between AI agents and FHIR clinical data — PHI redaction, immutable audit, step-up auth, tenant isolation. MCP server + OpenAI/Gemini adapters. A healthclaw.io project.

★ 306 writesse

Symaira Vault

danieljustus/symaira-vault

✕BLOCK F

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

★ 3027 writestdio

shieldcortex

Drakon-Systems-Ltd/ShieldCortex

✕BLOCK F

Memory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.

★ 255 destructivestdio

MCP Any

mcpany/core

✕BLOCK F
★ 224 writesse

artifact-site

lexmount/artifact-site

✕BLOCK F

A self-hosted home for your team’s AI-generated pages and documents. Publish HTML, build folders, ZIPs and PDFs as sandboxed, versioned links. CLI + remote MCP for AI agents.

★ 182 readstdio

Clade

shenxingy/Clade

✕BLOCK F

Turn Claude Code and Codex from chat assistants into autonomous coding systems

★ 101 readstdio

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.