MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/11

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

241–264 of 2,120 · ranked by trust score, then stars

Bitcoin Lightning Network

abdelstark/bitcoin-mcp

✓SAFE B

Bitcoin & Lightning Network MCP Server.

★ 771 writesse

Figma To React

studentofjs/mcp-figma-to-react

✓SAFE B

MCP server for converting Figma designs to React components

★ 778 readsse

BitDive

bitdive/mcp-server

✓SAFE B

BitDive Model Context Protocol (MCP) server. The Autonomous Quality Loop for AI agents. Provides real runtime context, before/after trace comparison, and integration testing workflows.

★ 751 readstdio

Ipybox

gradion-ai/ipybox

✓SAFE B

Unified execution environment for Python code, shell commands, and programmatic MCP tool calls.

★ 75Not listed in sourcestdio

Flutter

adamsmaka/flutter-mcp

✓SAFE B
★ 748 readsse

Kroger

cupofowls/kroger-mcp

✓SAFE B

A FastMCP server that provides AI assistants like Claude with access to Kroger's grocery shopping functionality through the Model Context Protocol (MCP). This server enables AI assistants to find stores, search products, manage shopping carts, and access Kroger's comprehensive grocery data via the k

★ 743 destructivesse

Boilerplate

aashari/boilerplate-mcp-server

✓SAFE B

TypeScript Model Context Protocol (MCP) server boilerplate providing IP lookup tools/resources. Includes CLI support and extensible structure for connecting AI systems (LLMs) to external data sources like ip-api.com. Ideal template for creating new MCP integrations via Node.js.

★ 732 readstdio

Appwrite

appwrite/mcp-for-api

✓SAFE B

Appwrite’s MCP server. Operating your backend has never been easier.

★ 721 writestdio

Appwrite

appwrite/mcp

✓SAFE B

Appwrite’s MCP server. Operating your backend has never been easier.

★ 721 writestdio

Tavily Load Balancer

yatotm/tavily-mcp-loadbalancer

!CAUTION B

Load-balanced Tavily MCP server with API key pool management

★ 723 readstdio

Pinecone Developer

pinecone-io/pinecone-mcp

✓SAFE B

Connect your Pinecone projects to Cursor, Claude, and other AI assistants

★ 711 readstdio

Xiaozhi AutoGLM

xinnan-tech/xiaozhi-autoglm-mcp

✓SAFE B

小智基于智谱Phone Agent复刻豆包手机

★ 711 writestdio

Web Search

uk0/web-search-fast

!CAUTION B

一个简单的本地 web search mcp ,可以集群规模化进行对外提供服务。

★ 701 readstdio

Neo4j Agent Memory

knowall-ai/mcp-neo4j-agent-memory

!CAUTION B

Memory management MCP server for AI agents using Neo4j knowledge graphs

★ 692 destructivestdio

Yuque

henryhaoson/yuque-mcp-server

✓SAFE B

Yuque mcp server

★ 691 destructivesse

agentmail-mcp

agentmail-to/agentmail-mcp

✓SAFE B

Email inboxes for AI agents: send, receive, reply, search, and manage threaded email over MCP.

★ 684 readstdio

HackMD

yuna0x0/hackmd-mcp

✓SAFE B

A Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants.

★ 682 destructivestdio

Filesystem

safurrier/mcp-filesystem

✓SAFE B

ARCHIVED: Pre-harness MCP filesystem experiment. Do not use for new projects; modern agent harnesses provide these capabilities directly.

★ 671 destructivesse

Public.com

publicdotcom/publicdotcom-mcp-server

✓SAFE B

Connect AI assistants to your Public.com brokerage account. Trade stocks, options, and crypto — get quotes, manage orders, and view your portfolio.

★ 6713 writestdio

Real Estate

agentic-ops/real-estate-mcp

✓SAFE B

A Model Context Protocol server for real estate workflows — search, valuation, mortgage math, and investment analysis.

★ 672 writestreamable-http

AgentMail

agentmail-to/agentmail-mcp

✓SAFE B

Email inboxes for AI agents: send, receive, reply, search, and manage threaded email over MCP.

★ 663 readstdio

Alby Bitcoin Payments

getalby/mcp

✓SAFE B

Connect a bitcoin lightning wallet to your LLM using Nostr Wallet Connect and Model Context Protocol

★ 661 writesse

Astro Docs

withastro/docs-mcp

✓SAFE B

Astro Docs MCP Server

★ 661 readstreamable-http

Google Health

davidmosiah/google-health-mcp

!CAUTION B

Local-first MCP server for Google Health API v4 (Fitbit + Pixel Watch) — Claude/Cursor/Hermes

★ 661 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.