MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/20

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

457–480 of 2,120 · ranked by trust score, then stars

Medical APIs

pascalwhoop/medical-mcps

✓SAFE B

A collection of MCP tools for AI agents to interact with major biomedical databases

★ 231 readstreamable-http

Meta Discovery

wojtyniak/mcp-mcp

✓SAFE B

Meta-MCP Server that acts as a tool discovery and provisioning service for the Model Context Protocol

★ 231 readstreamable-http

SecurityCopilot

jguimera/securitycopilotmcpserver

✓SAFE B

MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testing and uploading Security Copilot artifacts.

★ 233 writesse

SpotDB

aliengiraffe/spotdb

✓SAFE B

Give your agents a secure, containerized SQL sandbox with MCP or API access enabled with DuckDB. No infra required, quick spin-up cycle. Push any CSV — query, analyze, and move on.

★ 22Not listed in sourcestdio

microCMS

microcmsio/microcms-mcp-server

✓SAFE B
★ 223 destructivestdio

Nova

bigduu/Nova

!CAUTION B

Cross-platform Rust computer-use MCP server for macOS and Windows: AX/UIA, screenshots, OCR, pointer and keyboard input, clipboard, stdio, and HTTP.

★ 22Not listed in sourcestdio

google-search-mcp

HasData/google-search-mcp

✓SAFE B

Hosted Google Search / SERP MCP server from HasData, no Google Cloud project. Organic results, AI Overview, People Also Ask, AI Mode, news and shopping for Claude, Cursor and any MCP client.

★ 17Not listed in sourcestdio

instagram-mcp

HasData/instagram-mcp

✓SAFE B

Hosted Instagram MCP server from HasData. Public profile and post-feed tools by handle, structured JSON, for Claude, Cursor and any MCP client.

★ 16Not listed in sourcestdio

call-a-human-mcp

nishantmodak/call-a-human-mcp

✓SAFE B

MCP server that gives any AI phone a friend options : ask a human or request approval via Slack or macOS dialogs before taking irreversible actions.

★ 152 readsse

medical-terminologies-mcp

SidneyBissoli/medical-terminologies-mcp

✓SAFE B

Unified MCP server for six medical terminologies (ICD-11, LOINC, RxNorm, MeSH, ATC, CID-10) with authoritative WHO ICD-10→ICD-11 mapping and provenance on every response. Hosted endpoint: no install, no credentials.

★ 1533 readstdio

pubcrawl

nickjlamb/pubcrawl

✓SAFE B

MCP server giving AI assistants verifiable access to PubMed, Europe PMC, US/UK drug labelling, and ClinicalTrials.gov. Built by PharmaTools.AI.

★ 1515 readstdio

whoop-mcp-server

yuridivonis/whoop-mcp-server

!CAUTION B

Your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted.

★ 145 readstdio

Elgato MCP Server

elgatosf/elgato-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that provides automation capabilities with Elgato apps.

★ 131 destructivestdio

htmldrop

vin-spiegel/htmldrop

✓SAFE B

Publish HTML for agents — one API call, MCP server included

★ 131 writestdio

mssql-mcp

BYMCS/mssql-mcp

✓SAFE B

MCP server for Microsoft SQL Server — query, schema, and stored-procedure access for Claude Desktop, Cursor, Windsurf, and VS Code.

★ 134 writestdio

openhammer-api

EshanPrakash/openhammer-api

✓SAFE B

Comprehensive Warhammer 40K API with 2,748 units across 35 factions and 2 game editions (10th and 11th). Built with FastAPI, featuring 29 endpoints. Also available as a live MCP server.

★ 139 readstreamable-http

Nest Openapi

ts-oas/nest-openapi

✓SAFE B

A modern, modular set of utilities for building OpenAPI-driven NestJS apps.

★ 121 writestdio

glassdoor-mcp

HasData/glassdoor-mcp

✓SAFE B

MCP server for Glassdoor: search job listings by keyword and location, read one posting in full with the employer rating and the salary figure with its provenance. 1,000 free credits every month.

★ 12Not listed in sourcestdio

ibge-br-mcp

SidneyBissoli/ibge-br-mcp

✓SAFE B

MCP Server for IBGE APIs - Brazilian geographic, demographic and statistical data

★ 1221 readstdio

ato-mcp

william-laverty/ato-mcp

!CAUTION B

Your AI agent, fluent in Australian tax.

★ 11Not listed in sourcestdio

facebook-mcp

HasData/facebook-mcp

✓SAFE B

MCP server for Facebook: a public page or profile by handle with likes, followers, contact details and the post feed with reactions. No Meta developer app. 1,000 free credits every month.

★ 11Not listed in sourcestdio

indeed-mcp

HasData/indeed-mcp

✓SAFE B

Indeed MCP server by HasData: search job listings and read full postings, as JSON.

★ 11Not listed in sourcestdio

oauth-callback

kriasoft/oauth-callback

✓SAFE B

OAuth 2.0 login for CLI tools and desktop apps: opens the browser and captures the authorization code on a loopback redirect (RFC 8252). Node.js, Deno, Bun. One-line MCP client auth.

★ 111 readstreamable-http

redfin-mcp

HasData/redfin-mcp

✓SAFE B

MCP server for Redfin: search for-sale, for-rent and sold listings with the full filter set, and read one property page in full. No MLS licence. 1,000 free credits every month.

★ 11Not listed in sourcestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.