MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/17

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

385–408 of 2,120 · ranked by trust score, then stars

Splunk

splunk/splunk-mcp-server2

✓SAFE B

Unofficial. Splunk MCP server. Implemented in Python and TypeScript/JS. Runs searches, queries Splunk, and outputs data as JSON, CSV, or Markdown for agentic LLM workflows. Includes guardrails for input SPL validation and output sanitization. SSE/stdio transport support. Deployment options: Stdio, l

★ 361 writesse

Tool Filter

respawn-app/tool-filter-mcp

✓SAFE B

MCP proxy server that filters tools from upstream MCP servers via regex-based deny list

★ 361 destructivesse

🎨 UI/UX Pro MCP Server

redf0x1/ui-ux-pro-mcp

✓SAFE B

🎨 AI-powered UI/UX design intelligence - 1519+ curated design resources through MCP | React, Vue, Next.js, Flutter & more

★ 362 readstdio

Aoai Web Browsing

kimtth/mcp-aoai-web-browsing

✓SAFE B

A minimal Model Context Protocol 🖥️ server/client🧑💻with OpenAI and 🌐 web browser control via Playwright.

★ 351 writestreamable-http

Bhived

artkeyai/bhived-mcp

!CAUTION B

bhived is an MCP server that gives AI agents shared memory, skills, and tool discovery. install once, works in Claude Code, Cursor, and 15+ other agents.

★ 355 writestdio

Exa

egoist/exa-mcp

✓SAFE B

MCP server for Exa Search API.

★ 351 readsse

HubSpot

shinzo-labs/hubspot-mcp

✓SAFE B

MCP Implementation for HubSpot

★ 3516 destructivestdio

Review Analyzer

mguozhen/voc-amazon-reviews

✓SAFE B

Review Analyzer — agent-native VOC for e-commerce. 6 MCP tools, ASIN or CSV input, black-gold dashboard. Backed by Shulex VOC OpenAPI (10 markets).

★ 352 writestdio

X Twitter

rafaljanicki/x-twitter-mcp-server

✓SAFE B

X/Twitter MCP server

★ 353 destructivestreamable-http

Ifc

smartaec/ifcmcp

✓SAFE B

MCP server that enables LLM agents to talk with IFC (Industry Foundation Classes) files

★ 348 readsse

Lotus Wisdom

linxule/lotus-wisdom-mcp

✓SAFE B

Contemplative reasoning MCP server — Lotus Sutra wisdom framework with interactive ext-apps journey visualization.

★ 34Not listed in sourcestdio

Maven Dependencies

bigsy/maven-mcp-server

✓SAFE B

An MCP (Model Context Protocol) server that provides tools for checking Maven dependency versions.

★ 341 writesse

Simple Timeserver

andybrandt/mcp-simple-timeserver

!CAUTION B

Simple MCP to give Claude ability to check current time as well as know when holidays are, what is the time distance between dates etc.

★ 347 readstreamable-http

Talivia Agent

talivia-group/agent

✓SAFE B

Revenue-first website analytics installed and verified by AI agents through MCP

★ 34Not listed in sourcestdio

Airflow

abhishekbhakat/airflow-mcp-server

✓SAFE B

MCP Server for Apache Airflow

★ 335 readstdio

Brain.md

mi4uu/brain.md

✓SAFE B

Local-first markdown notes with a first-class MCP server. 16 tools + 2 resources for Claude Code, Claude Desktop, Cursor and any MCP agent. Per-folder permissions, semantic RAG via LanceDB, single Bun binary. AGPL.

★ 331 writestreamable-http

Mcpmarket

cherryhq/mcpmarket

✓SAFE B

MCP Market

★ 339 readstdio

PubNub Model Context Protocol

pubnub/pubnub-mcp-server

✓SAFE B

PubNub MCP Model Context Protocol Server for use in Cursor, Windsurf, Claude Desktop, Claude Code and OpenAI Codex and more!

★ 33Not listed in sourcestdio

Adaptive Cards

vikrantsingh01/adaptive-cards-mcp

✓SAFE B

AI-powered Adaptive Card MCP server — 9 tools for generating, validating, optimizing cards for Teams, Outlook, Copilot, ChatGPT. npm: adaptive-cards-mcp

★ 327 writesse

AnalyticDB for MySQL

aliyun/alibabacloud-adb-mysql-mcp-server

✓SAFE B

AnalyticDB for MySQL MCP Server

★ 321 destructivestreamable-http

Follow Up Boss

mindwear-capitian/followupboss-mcp-server

✓SAFE B

Talk to your Follow Up Boss CRM in plain English. 160-tool MCP server for realtors, built by a working broker (Neuhaus Realty Group, Austin TX). Free self-host, ELv2 licensed.

★ 321 readstdio

ISO 27001

sushegaad/mcp-server-for-iso27001

✓SAFE B

Model Context Protocol (MCP) server for ISO27001: A stateful Model Context Protocol (MCP) server that gives Claude a complete ISO 27001:2022 Information Security Management System (ISMS). Ask Claude to run gap assessments, manage risks, generate policies, track evidence, and run audits — all backed

★ 321 destructivesse

Snipe-IT

jameshgordy/snipeit-mcp

!CAUTION B

MCP server for Snipe-IT asset management. Enables AI assistants to manage assets, consumables, accessories, licenses, users, and system configuration via 39 comprehensive tools.

★ 328 readstreamable-http

Amp

akshayaggarwal99/amp

✓SAFE B

AMP: The Agent Memory Protocol — Open source, MCP-native memory server for AI agents. Give your LLMs a hippocampus.

★ 311 writesse

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.