MCP servers · connect in Claude Desktop

Claude Desktop MCP servers

3,432 MCP servers have a connect command for Claude Desktop. 1,660 are SAFE, 638 CAUTION and 1,134 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Desktop MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-desktop/page/131

Verdicts · 3,432 servers

✓SAFE1,660!CAUTION638✕BLOCK1,134

Transports

A server can list more than one transport.

Tool risk

1,009

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

3,432 servers for Claude Desktop

3,121–3,144 of 3,432 · ranked by trust score, then stars

Prompts Server

sparesparrow/mcp-prompts

✕BLOCK F

Model Context Protocol server for managing, storing, and providing prompts and prompt templates for LLM interactions.

★ 1182 destructivestdio

Pentest

ramkansal/pentestmcp

✕BLOCK F

pentestMCP: AI-Powered Penetration Testing via MCP, an MCP designed for penetration testers.

★ 1087 writestreamable-http

Vibe Coder

freshtechbro/vibe-coder-mcp

✕BLOCK F

Vibe-Coder-MCP server extends AI assistants with specialized software development tools.

★ 1031 writesse

Swiss Caselaw

jonashertner/caselaw-repo-1

✕BLOCK F

Open Swiss legal corpus + MCP server: 1M+ court decisions (1875–today), 21k laws, 10M-edge citation graph, 42 MCP tools. CC0 data, MIT code. Live at mcp.opencaselaw.ch

★ 72Not listed in sourcesse

Teradata

teradata/teradata-mcp-server

✕BLOCK F

The community development of a MCP server for a Teradata database

★ 571 readstdio

Kali

zebbern/zebbern-kali-mcp

✕BLOCK F

MCP server for Kali toolkit (docker) - 121 tools for AI-assisted security testing give agents access to all it needs!

★ 486 destructive

Profullstack

profullstack/mcp-server

✕BLOCK F

A generic, modular server for implementing the Model Context Protocol (MCP).

★ 459 writestdio

Fastly

fastly/mcp

✕BLOCK F

Model Context Protocol (MCP) server for AI-powered Fastly CDN management.

★ 391 writestreamable-http

Barbacane

barbacane-dev/barbacane

✕BLOCK F

Barbacane API and Bidirectional AI Gateway

★ 289 read

governance-sdk

lua-ai-global/governance

✕BLOCK F

Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)

★ 262 destructive

Agent 007

bill10/agent-007

✕BLOCK F

From web terminals for your coding agents to a self-running agent company: Claude Code and Codex in parallel git worktrees, a job board they pick work from, and one agent that runs the board from a goal.

★ 41 destructive

browser-ipc-cdp

alexis14kl/browser-ipc-cdp

✕BLOCK F

browser-ipc-cdp — Control remoto de navegadores Chromium (Brave, Chrome, Edge) via IPC con CDP dinámico. Abre tu navegador real con todas tus sesiones, detecta o asigna puerto automáticamente, configura portproxy/firewall para WSL, y actualiza el MCP de Claude Code. Sin puertos fijos, sin hacks

★ 39 destructivestdio

hbhqq9-bde-score

hbhqq9/bde-score

✕BLOCK F

🏆 Open-source multi-factor stock scoring API (0-100) | US/HK/A-Share 74 stocks | Zero signup | shields.io badges | GitHub Action | EU AI Act compliant

★ 35 readstdio

limetry

limetry/limetry

!CAUTION F

Limetry is open-source agent action governance: check tool intents against policy before irreversible runs. Returns allow, deny, or approval_required with signed receipts and privacy-safe audit. TypeScript SDK, CLI, and MCP for IDE like Cursor, VS Code, GitHub Copilot, Claude. Optional CI, SQL, and

★ 16 writestdio

sfdt

scoobydrew83/sfdt

✕BLOCK F

Salesforce DevTools — CLI, VS Code extension, sf plugin, MCP server, and web dashboard for Salesforce DX deploy, test, org health, and release management. AI-optional, CI-ready.

★ 12 destructivestdio

Synorive

arturoaeriform174/Synorive

✕BLOCK F

Search your files by meaning and fact-check the web, fully offline.

★ 026 readstdio

GPT Researcher

assafelovic/gpt-researcher

✕BLOCK F

An autonomous agent that conducts deep research on any data using any LLM providers

★ 29,5232 readstreamable-http

vMLX

jjang-ai/vmlx

✕BLOCK F

vMLX - Use MLX models easily - JANGQ (GGUF for MLX) - Not dependant on mlx_vlm

★ 8721 destructivesse

FLUJO

mario-andreschak/FLUJO

!CAUTION F

Multi-Agent + Automation Harness: Graph-based Workflows, MCP, Self-Improving Agents. NextJs+React

★ 62910 destructivestdio

Canonry <img src="https://raw.githubusercontent.com/Canonry/

Canonry/canonry

!CAUTION F

Agent-first AI SEO (AEO/GEO) operating platform

★ 17513 destructivestdio

agents-can-communicate

automatis-tools/agents-can-communicate

✕BLOCK F

Messages between AI coding sessions in different vendors' clients, such as Claude Code and Codex. Local, open source, no lead agent.

★ 1302 write

OrionBelt

ralforion/orionbelt-semantic-layer

✕BLOCK F

Source-available semantic and context layer, rule engine, and semantic sidecar for agentic AI and governed analytics. Compiles declarative YAML models into optimized SQL, KPIs, and semantic context across 8 SQL dialects.

★ 9910 destructive

OrionBelt Semantic Layer

ralfbecher/orionbelt-semantic-layer

✕BLOCK F

Source-available semantic and context layer, rule engine, and semantic sidecar for agentic AI and governed analytics. Compiles declarative YAML models into optimized SQL, KPIs, and semantic context across 8 SQL dialects.

★ 9910 destructive

DeployStack

deploystackio/deploystack

✕BLOCK F

Open source MCP hosting - deploy MCP servers to HTTP endpoints for n8n, Dify, Voiceflow, and any MCP client.

★ 644 writestdio

More about Claude Desktop

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Desktop?
Paste the JSON block shown on the server's page into the mcpServers section of Claude Desktop's configuration file.
Which Claude Desktop MCP servers are safe?
Of the 3,432 servers with a Claude Desktop connect command, 1,660 are SAFE, 638 CAUTION and 1,134 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,261 of the 3,432 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.