MCP servers · connect in Claude Desktop

Claude Desktop MCP servers

3,432 MCP servers have a connect command for Claude Desktop. 1,660 are SAFE, 638 CAUTION and 1,134 BLOCK. Every one was read in full before it was listed.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Claude Desktop MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/for/claude-desktop/page/140

Verdicts · 3,432 servers

✓SAFE1,660!CAUTION638✕BLOCK1,134

Transports

A server can list more than one transport.

Tool risk

1,009

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

3,432 servers for Claude Desktop

3,337–3,360 of 3,432 · ranked by trust score, then stars

Kappa Graph

aaronsb/knowledge-graph-system

✕BLOCK F

Kappa Graph — κ(G). A semantic knowledge graph where knowledge has weight. Extracts concepts, measures grounding strength, preserves disagreement, traces everything to source.

★ 1282 destructivestdio

ApiTap

n1byn1kt/apitap

✕BLOCK F

CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.

★ 1271 writestdio

Dida365

zh1754629545/dida365-mcp-servers

✕BLOCK F

基于滴答官方文档生成的日程待办增删改查MCP服务

★ 342 destructivesse

memory-cloud

kagura-ai/memory-cloud

✕BLOCK F

Adaptive memory for AI agents & teams — beyond RAG. Self-hosted MCP server that gets smarter every time you search: hybrid search + a neural memory graph that learns. Works with Claude, ChatGPT & any MCP client.

★ 12Not listed in sourcestreamable-http

nomoreide

Rorogogogo/nomoreide

✕BLOCK F

AI-native service workbench: MCP server + shared daemon for Claude Code, Codex, and Gemini. CLI, TUI, and web dashboard for running services, logs, git, and databases.

★ 71 writestreamable-http

Archon

coleam00/archon

✕BLOCK F

The first open-source harness builder for AI coding. Make AI coding deterministic and repeatable.

★ 23,5055 write

Memory Service

doobidoo/mcp-memory-service

✕BLOCK F

Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.

★ 1,9541 destructivestdio

Smart Tree

8b-is/smart-tree

✕BLOCK F

Smart Tree: not just a tree, a philosophy. A context-aware, AI-crafted replacement for 20+ tools with MEM8 quantum compression, semantic search, AST-smart editing, and partnership memory. Crafted with care by human + AI—accept no knock-offs.

★ 2707 read

Pentest

dmontgomery40/pentest-mcp

✕BLOCK F

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

★ 14719 readsse

Sema

sema-lisp/sema

✕BLOCK F

A Lisp with first-class LLM primitives, implemented in Rust

★ 501 destructivestdio

Agent Security Harness

msaleme/red-team-blue-team-agent-fabric

✕BLOCK F

AI agent security harness, adversarial testing: 640 executable tests in the v4.26.1 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17,

★ 326 readstdio

agentix-cli

anis-marrouchi/agentx

✕BLOCK F

Self-hosted AI agents for small teams. Route Telegram, WhatsApp, GitHub, GitLab, crons, webhooks and mesh tasks to agents on Claude Code, Codex, OpenCode or any LLM API. Web dashboard + CLI. MIT.

★ 132 destructive

Faxbot

DMontgomery40/Faxbot

✕BLOCK F

Self-hosted, open source, fax-sending API. HIPAA compliant. This fax API includes MCP (Model Context Protocol) support for AI assistant integration.

★ 11 writestdio

Better Auth

better-auth/better-auth

✕BLOCK F

The most comprehensive authentication framework

★ 30,26612 readstreamable-http

claudish

MadAppGang/claudish

✕BLOCK F

Claude Code. Any Model. The most powerful AI coding agent now speaks every language.

★ 1,00511 writestdio

MemClaw

caura-ai/caura-memclaw

✕BLOCK F

Caura (formerly MemClaw) — governed shared memory for AI agent fleets. Multi-agent, multi-tenant, MCP-native. Trust tiers, keystone policies, audit trails, knowledge graph, self-improving retrieval. Apache 2.0.

★ 5442 writestreamable-http

Open Computer Use

yambr/open-computer-use

✕BLOCK F

ARCHIVED — superseded by Wide Moat

★ 1261 writestreamable-http

Travel Planner

gongrzhe/travel-planner-mcp-server

✕BLOCK F
★ 991 writesse

HealthClaw Guardrails

aks129/healthclawguardrails

✕BLOCK F

Open-source guardrails between AI agents and FHIR clinical data — PHI redaction, immutable audit, step-up auth, tenant isolation. MCP server + OpenAI/Gemini adapters. A healthclaw.io project.

★ 306 writesse

Symaira Vault

danieljustus/symaira-vault

✕BLOCK F

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

★ 3027 writestdio

shieldcortex

Drakon-Systems-Ltd/ShieldCortex

✕BLOCK F

Memory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.

★ 255 destructivestdio

MCP Any

mcpany/core

✕BLOCK F
★ 224 writesse

trackyourtime

trebeljahr/trackyourtime

✕BLOCK F

Self-hostable time tracker for freelancers. Track time from the web app, your browser or Raycast, then turn the hours into reports and invoices.

★ 28 writestdio

rfauto

geer1895/rfauto

✕BLOCK F

RF/microwave CAD automation + LLM orchestration: multi-solver tuning loop (HFSS/ADS/openEMS/Palace), calibration-anchored surrogate optimization, 71 EM templates, 254 CLI commands, 149 MCP tools, deterministic-kernel physics. GPL-3.0

★ 011 writestdio

More about Claude Desktop

Other client hubs

By risk

Questions

How do I add an MCP server to Claude Desktop?
Paste the JSON block shown on the server's page into the mcpServers section of Claude Desktop's configuration file.
Which Claude Desktop MCP servers are safe?
Of the 3,432 servers with a Claude Desktop connect command, 1,660 are SAFE, 638 CAUTION and 1,134 BLOCK. Cards are ranked by trust score, so the safest are first; open one to read its findings before you connect it.
Are any of these servers remote?
1,261 of the 3,432 list a remote transport (streamable HTTP or SSE). The rest run as a local process your client starts.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.