MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/196

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,681–4,704 of 4,761 · ranked by trust score, then stars

Theokit Sdk

usetheokit/theokit-sdk

✕BLOCK F

Open-source TypeScript SDK and agent runtime you own end to end. Agent.create / prompt / stream / resume, 43 LLM providers on your own keys, MCP with OAuth PKCE, subagents, workflows, evals, memory, and a bubblewrap+seccomp kernel sandbox for tool execution. Local-first, opt-in cloud, Apache-2.0.

★ 313 writestdio

KXM

kontextmind/kxm

✕BLOCK F

Pi extensions for multi-agent communication and orchestration

★ 22 writestdio

n.360

resper1965/n.360

✕BLOCK F

n.iso — plataforma de adequação ISO 27001/27701 da ness.

★ 011 writestdio

Genkit

firebase/genkit

✕BLOCK F

Open-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google

★ 6,4521 destructivesse

ReverseLab

ling71671/open-reverselab

✕BLOCK F

Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.

★ 1,1826 destructive

open-reverselab

LING71671/open-reverselab

✕BLOCK F

Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.

★ 1,1486 destructive

FlAPI

datazoode/flapi

✕BLOCK F

API Framework heavily relying on the power of DuckDB and DuckDB extensions. Ready to build performant and cost-efficient APIs on top of BigQuery or Snowflake for AI Agents and Data Apps

★ 744 readstreamable-http

Circuit

snowfort-ai/circuit-mcp

✕BLOCK F

Computer use-like MCP for webapps and electron apps, to enable AI agents to test their changes

★ 607 writesse

Nora

solomon2773/nora

✕BLOCK F

Open-source, self-hosted control plane for OpenClaw and Hermes AI-agent fleets on Docker/Kubernetes — REST, CLI, and MCP.

★ 571 destructivestdio

m3-memory

skynetcmd/m3-memory

✕BLOCK F

Local-first Memory Framework for AI Agents · 99.2% LongMemEval-S retrieval @ k=10 · Supports Claude · Antigravity · LangChain · Hermes · Gemini · OpenCode · OpenClaw · MCP-native and plugins · Hybrid search (FTS5 + vector + MMR) · GDPR · FIPS 140-3 ready · 100% local (fully offline) or cloud capable

★ 262 destructivestdio

AFD — Agent-First Development

lushly-dev/afd

✕BLOCK F
★ 416 destructivestdio

kernl

fastslack/kernl

✕BLOCK F

Self-hosted agent teams that do your work — and hand any LLM your real data (tasks, mail, calendar, finance) over MCP. No account, no cloud, nothing leaves your machine.

★ 336 destructivestdio

SAP Joule — S/4HANA Cloud Procurement & Finance Copilot

kalyanjanumpally/sap-joule-ai-plugin

✕BLOCK F

Reference implementation: SAP Joule procurement copilot backed by a CAP AI service and an LLM-agnostic plugin (Anthropic / Ollama / SAP Generative AI Hub).

★ 22 destructivestreamable-http

FastMCP

jlowin/fastmcp

✕BLOCK F

🚀 The fast, Pythonic way to build MCP servers and clients.

★ 27,7663 destructivesse

Vexa

vexa-ai/vexa

✕BLOCK F

Open-source meeting transcription API for Google Meet, Microsoft Teams & Zoom. Auto-join bots, real-time WebSocket transcripts, MCP server for AI agents. Self-host or use hosted SaaS.

★ 2,809Not listed in sourcestreamable-http

Apra Fleet

apra-labs/apra-fleet

✕BLOCK F

AI agents that write code, review each other's work, and coordinate across your machines

★ 1015 destructivestdio

Token Enhancer

xelektron/token-enhancer

✕BLOCK F

A local proxy that strips web pages down to clean text before they enter your AI agent's context window. 704K tokens → 2.6K tokens. No LLM required.

★ 686 readstdio

HLedger

iiatlas/hledger-mcp

✕BLOCK F

A local MCP server for interacting with the HLedger cli

★ 651 destructivesse

mcp-server

iris-eval/mcp-server

✕BLOCK F

Stop shipping agents on vibes. Score every agent output for quality, safety, and cost.

★ 94 destructivestdio

CodeSampleX

r2cuerdame/CodeSampleX

✕BLOCK F

An open compatibility testing network: does this library API actually run on your version, OS and runtime? Real build evidence, verified samples, and the environment each result came from.

★ 21 readstdio

samarth-gtm-mcp

samarthanalytics-sj/samarth-analytics-mcp

✕BLOCK F

MCP server for Samarth Analytics Google Tag Manager operations

★ 221 destructivestdio

security-gate-x402

nohosa001-pixel/security-gate-x402

✕BLOCK F

The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic guardrails, key leak defense, and cryptographic Proof-of-Safety attestations via x402 on Base ($0.002).

★ 23 read

polka

artkruglov/polka

✕BLOCK F

Полка — a shelf for everything your AI agents make: pages, prototypes and projects by link, agent session memory, self-hosted. MCP · AGPL-3.0

★ 12 destructivestreamable-http

Home Assistant AI

homeassistant-ai/ha-mcp

✕BLOCK F

The Unofficial and Awesome Home Assistant MCP Server

★ 4,8024 writesse

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.