MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/195

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,657–4,680 of 4,761 · ranked by trust score, then stars

trackyourtime

trebeljahr/trackyourtime

✕BLOCK F

Self-hostable time tracker for freelancers. Track time from the web app, your browser or Raycast, then turn the hours into reports and invoices.

★ 28 writestdio

rfauto

geer1895/rfauto

✕BLOCK F

RF/microwave CAD automation + LLM orchestration: multi-solver tuning loop (HFSS/ADS/openEMS/Palace), calibration-anchored surrogate optimization, 71 EM templates, 254 CLI commands, 149 MCP tools, deterministic-kernel physics. GPL-3.0

★ 011 writestdio

who2be

luetzey/who2be

✕BLOCK F

Self-hosted hub for AI agent configuration: versioned personas, playbooks and knowledge with a mandatory review step, served to agents over MCP. Agent configuration you review — not behavior you hope for.

★ 05 readstdio

Genkit

genkit-ai/genkit

✕BLOCK F

Open-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google

★ 6,5091 destructivesse

SoloMD

zhitongblog/solomd

✕BLOCK F

A markdown editor — and the bridge to your LLM. Local-first, MIT, ~15 MB. Bundled MCP server lets Claude Code / Codex / Cursor drive your vault directly. 14 AI providers BYOK.

★ 1,130Not listed in sourcestdio

AGI Memory

cognitivecomputations/agi-memory

✕BLOCK F
★ 6173 readstdio

caura

caura-ai/caura

✕BLOCK F

Caura (formerly MemClaw) — governed shared memory for AI agent fleets. Multi-agent, multi-tenant, MCP-native. Trust tiers, keystone policies, audit trails, knowledge graph, self-improving retrieval. Apache 2.0.

★ 5442 writestreamable-http

One MCP

1mcp-app/agent

✕BLOCK F

A unified Model Context Protocol server implementation that aggregates multiple MCP servers into one.

★ 5093 destructivesse

Thoughtbox

kastalien-research/thoughtbox

✕BLOCK F

Thoughtbox is an intention ledger for agents. Evaluate AI's decisions against its decision-making.

★ 664 destructivestreamable-http

jazz-ai

lvndry/jazz

✕BLOCK F

One agent. Every surface. Your rules.

★ 541 destructivestreamable-http

claude-autopm

rafeekpro/ClaudeAutoPM

✕BLOCK F

Autonomous Project Management Framework for Claude Code - Advanced AI-powered development automation

★ 395 writestdio

unitares

cirwel/unitares

✕BLOCK F

Accountability infrastructure for long-running AI agents. Self-hosted MCP server: identity, claims and evidence, review, outcomes, and reconstruction across agent runtimes.

★ 55 readstdio

viboplr

outcast1000/viboplr

✕BLOCK F

Plugin-first desktop music player for macOS and Windows — local library, streaming services, lyrics, and radio. Built with Tauri 2, React, and Rust.

★ 31 write

token-enhancer

Footshaped-friction742/token-enhancer

✕BLOCK F

Reduce web pages to clean text before they reach your AI agent’s context window, saving tokens and cutting noise

★ 26 readstdio

N8n

czlonkowski/n8n-mcp

✕BLOCK F

A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you

★ 22,9493 destructivesse

AgentRecall

goldentrii/agentrecall-mcp

✕BLOCK F

Correction-first persistent memory for AI agents. MCP server + SDK + CLI. Compounds across sessions.

★ 37111 writestdio

AgentRecall

goldentrii/agentrecall-x

✕BLOCK F

Correction-first persistent memory for AI agents. MCP server + SDK + CLI. Compounds across sessions.

★ 37111 writestdio

AgentRecall

goldentrii/agentrecall

✕BLOCK F

Correction-first persistent memory for AI agents. MCP server + SDK + CLI. Compounds across sessions.

★ 37111 writestdio

App Store Connect

joshuarileydev/app-store-connect-mcp-server

✕BLOCK F
★ 3311 destructivestdio

AgenticMail

agenticmail/agenticmail

✕BLOCK F

Email, SMS & phone-call infrastructure for AI agents — send and receive real email and text messages, and place agent-driven outbound voice calls, all programmatically

★ 2329 destructivestdio

jev-judge-mcp

PyModel/jev-judge-mcp

✕BLOCK F

Typed judgment tools for MCP agents. TypeSafe's Jev model as verify, screen, find, classify, rerank, decide, compare, extract, review, gate, and score: the model judges, policy decides auto, review, or escalate.

★ 711 readstdio

Digital Twins

pome-sh/digital-twins

✕BLOCK F

Test mode for your integrations, built for the way agents build

★ 211 destructivestreamable-http

agent-bounties

NSPG13/agent-bounties

✕BLOCK F

Open-source bounty network where AI agents post, fund, claim, solve, verify, and get paid for digital work.

★ 185 writestreamable-http

obsidian-tc

The-40-Thieves/obsidian-tc

✕BLOCK F

Obsidian Turbocharged — governed, agent-ready Obsidian MCP server. 163 tools across 31 domains, multi-vault native, pluggable embeddings. TypeScript + Rust. AGPL-3.0-only.

★ 96 destructivestdio

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.