MCP servers · connect in Claude Code

Claude Code MCP servers

4,761 MCP servers have a connect command for Claude Code. 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Code MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-code/page/198

Verdicts · 4,761 servers

✓SAFE2,135!CAUTION935✕BLOCK1,691

Transports

A server can list more than one transport.

Tool risk

1,342

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 10 tools.

Servers with no destructive tools →

4,761 servers for Claude Code

4,729–4,752 of 4,761 · ranked by trust score, then stars

Unraid

dinglebear-ai/unraid-mcp

✕BLOCK F

Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.

★ 1355 readstdio

Unraid

dinglebear-ai/unraid

✕BLOCK F

Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.

★ 1355 readstdio

Unraid

jmagar/unraid-mcp

✕BLOCK F

Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.

★ 1355 readstdio

knowledge-graph-system

aaronsb/knowledge-graph-system

✕BLOCK F

Kappa Graph — κ(G). A semantic knowledge graph where knowledge has weight. Extracts concepts, measures grounding strength, preserves disagreement, traces everything to source.

★ 1282 destructivestdio

VibeShell

veithly/vibeshell

✕BLOCK F

Local-first SSH/SFTP workspace for humans and coding agents: visible operations, shared sessions, integrated files and discoverable plugins.

★ 8420 read

hackmyagent

opena2a-org/hackmyagent

✕BLOCK F

Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.

★ 831 writestdio

Zscaler

zscaler/zscaler-mcp-server

✕BLOCK F

Zscaler Integration MCP Server is a Model Context Protocol (MCP) server designed for managing Several Zscaler Products using Large Language Models (LLMs).

★ 49Not listed in sourcesse

Dollhouse

dollhousemcp/mcp-server

✕BLOCK F

A Free, Open Source MCP server for dynamic custom persona management with public a GitHub collection of personas, skills, templates, and other elements for AI models.

★ 457 destructivesse

mcp-server

DollhouseMCP/mcp-server

✕BLOCK F

A Free, Open Source MCP server for dynamic custom persona management with public a GitHub collection of personas, skills, templates, and other elements for AI models.

★ 457 destructivesse

cybara

metaspartan/cybara

✕BLOCK F

Cybara - Your agents. Your tools. Your runtime. Harness the power of AI

★ 314 destructivestreamable-http

GraphFlow

Roarpeng/GraphFlow

✕BLOCK F

Local-first code knowledge graph and context harness for coding agents. MCP + DeepSeek Harness (dsh) plugin.

★ 194 writestdio

Apx

agentprojectcontext/apx

✕BLOCK F

Meet your crew. APX is an open-source Agent OS for running AI agents on your own machine — memory in plain files, agents that work together, Claude Code, Codex, Telegram, WhatsApp and MCP.

★ 164 destructivestdio

AgenticOS-Workbench

zzoretich/AgenticOS-Workbench

✕BLOCK F

UniDeX Agent Harness: a second brain and supervised Chief of Staff for Claude Code and Codex CLI, with persistent memory, recall and session capture, plus proposals you approve before anything changes. Lives in a plain-Markdown vault, with the UniDeX macOS app as its live dashboard.

★ 32 writestdio

cli

getmcpm/cli

✕BLOCK F

MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.

★ 31 destructivestdio

exceptd Security

blamejs/exceptd-skills

✕BLOCK F

AI security skills grounded in mid-2026 threat reality, not stale framework documentation

★ 011 read

great-cto

avelikiy/great_cto

✕BLOCK F

You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 70 specialist agents — an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether i

★ 1039 read

remembra

remembra-ai/remembra

✕BLOCK F

Remembra Relay: one agent stops, the next one already knows. Session handoffs built from git facts, for the next coding agent in any MCP tool, on any machine. MCP server + CLI. MIT.

★ 164 writestdio

bv-mcp

MadaBurns/bv-mcp

✕BLOCK F

Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.

★ 99 readstreamable-http

tribunal-kit

Harmitx7/tribunal-kit

✕BLOCK F

A universal, native-Rust governance layer for AI coding agents. Enforces Subagent-Driven Development (SDD) to stop hallucinations before they hit disk.

★ 51 destructive

BreachPilot

braydos-h/BreachPilot

✕BLOCK F

Autonomous Offensive Security Agent for Red Team Operations

★ 48 writestdio

aishield

lm203688/aishield

✕BLOCK F

🛡️ Agent-native AI tool security scanner. Scan MCP/Skill/GPT/Prompt for security risks. 4-dimensional scoring. Certified badges. Guardrail MCP for auto-protection.

★ 21 destructivestdio

sequant

sequant-io/sequant

✕BLOCK F

AI coding agent orchestrator — resolve GitHub issues end-to-end with isolated git worktrees, quality gates, and an MCP server. Works with Claude Code or Aider.

★ 11 writesse

xavier

iberi22/xavier

✕BLOCK F

Xavier — Rust vector memory & knowledge graph for AI agents (HTTP/CLI/MCP). Powers SWAL communal context

★ 11 destructive

Jarela

CircuitWall/jarela

✕BLOCK F

Jarela is a lightweight, full‐featured multi‐agent application that runs locally on your machine.

★ 029 destructivestreamable-http

More about Claude Code

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Code?
Run the claude mcp add command shown on the server's page; it names the package and its version.
Which Claude Code MCP servers are safe?
Of the 4,761 servers with a Claude Code connect command, 2,135 are SAFE, 935 CAUTION and 1,691 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,937 of the 4,761 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.