MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/15

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

337–360 of 2,120 · ranked by trust score, then stars

MCP Playground

elkhn/mcp-playground

✓SAFE B

A Streamlit-based chat app for LLMs with plug-and-play tool support via Model Context Protocol (MCP), powered by LangChain, LangGraph, and Docker.

★ 464 readsse

Telegram AI

mcp-telegram/mcp-telegram

✓SAFE B

Telegram MCP server: connect your personal Telegram account to Claude, ChatGPT, Cursor and any MCP client. 182 tools over MTProto. Self-host with npx or Docker, or use the hosted version.

★ 4614 destructivestdio

Unreal-MCP

IvanMurzak/Unreal-MCP

!CAUTION B

AI Game Developer for Unreal Engine — MCP plugin (C++ editor plugin + .NET bridge), unreal-cli, connects Unreal Editor to AI agents via ai-game.dev or a local MCP server

★ 468 writestreamable-http

WWeb

pnizer/wweb-mcp

✓SAFE B

WhatsApp Web MCP Server

★ 465 writesse

Agentic Developer

teabranch/agentic-developer-mcp

!CAUTION B

An MCP server that scales development into controllable agentic, recursive flows, and build a feature from bottom-up

★ 452 readsse

Syplugin-an

opaqueglass/syplugin-anmcpserver

!CAUTION B

A plugin that provide simple MCP service for Siyuan-note

★ 447 destructivestdio

WebScraping.AI

webscraping-ai/webscraping-ai-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server implementation that integrates with WebScraping.AI for web data extraction capabilities.

★ 449 readstdio

Whistle

7gugu/whistle-mcp

!CAUTION B

A Whistle proxy management tool based on Model Context Protocol that allows AI assistants to directly control local Whistle proxy servers, simplifying network debugging, API testing, and proxy rule configuration through natural language interaction.

★ 4434 readstreamable-http

CN Financial

ccq1/cn-financial-mcp

✓SAFE B

cn金融数据 MCP 服务器 — 工具包覆盖 A 股行情、财报、估值、板块、市场全景、新闻及宏观指标。

★ 4342 readsse

Lucide Icons

seeyangzhi/lucide-icons-mcp

✓SAFE B

A Model Context Protocol (MCP) server exposing Lucide icons as resources and tools for LLMs and agentic applications. Built with Bun and the MCP TypeScript SDK.

★ 437 readstdio

Telegram

kfastov/telegram-mcp-server

!CAUTION B

Telegram user console client and archiver

★ 431 writestreamable-http

Tgcli

kfastov/tgcli

!CAUTION B

Telegram user console client and archiver

★ 431 writestreamable-http

Copilot Security

robotti-io/copilot-security-instructions

✓SAFE B

✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.

★ 423 readstreamable-http

Flowbite

themesberg/flowbite-mcp

✓SAFE B

Convert Figma design to code with the official Flowbite MCP server

★ 422 readstdio

LibreCrawl Technical SEO Audit

adityaarsharma/librecrawl-technical-seo-audit-mcp

✓SAFE B

Sitewalk: Technical SEO Site Audit. Open-source technical SEO crawler and MCP server for Claude, Cursor and Codex. 50+ checks, PDF and CSV reports, self-hosted. Built on LibreCrawl. MIT.

★ 423 destructivestreamable-http

Qonto

qonto/qonto-mcp-server

✓SAFE B

Qonto MCP Server

★ 421 writestreamable-http

VSCode LSP

beixiyo/vsc-lsp-mcp

✓SAFE B

Expose VS Code language intelligence to AI agents via MCP, with automatic routing across multiple windows

★ 422 writestreamable-http

Browser

browsermcp-com/mcp

✓SAFE B

Cloud Browser MCP server

★ 411 destructivesse

BuiltWith

builtwith/mcp

✓SAFE B

BuiltWith MCP Server

★ 411 writestdio

FalkorDB

falkordb/falkordb-mcpserver

✓SAFE B

FalkorDB-MCPServer is an MCP (Model Context Protocol) server that connects LLMs to FalkorDB

★ 411 destructivestdio

FalkorDB-MCPServer

FalkorDB/FalkorDB-MCPServer

✓SAFE B

FalkorDB-MCPServer is an MCP (Model Context Protocol) server that connects LLMs to FalkorDB

★ 411 destructivestdio

AntV

antvis/mcp-server-antv

✓SAFE B

🧑🏻💻 MCP Server for @antvis visualization development, which provides documentation context and examples for visualization developers.

★ 4010 readstdio

Atlan Agent Toolkit

atlanhq/agent-toolkit

!CAUTION B

Atlan AI Agent Toolkit

★ 401 destructivestreamable-http

ESignatures

esignaturescom/mcp-server-esignatures

✓SAFE B

MCP server for eSignatures (https://esignatures.com)

★ 405 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.