MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/31

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

721–744 of 2,120 · ranked by trust score, then stars

webcite-mcp-server

strategyconnect/webcite-mcp-server

✓SAFE B

MCP server for fact-checking AI claims against authoritative sources. Works with any MCP-compatible agent — Claude, Cursor, Continue, Cody, Zed, Windsurf, OpenAI Agents, LangChain, and more.

★ 06 writestdio

zonefoundry-mcp

kisssam6886/zonefoundry-mcp

✓SAFE B

Remote MCP server for controlling Sonos from Claude, Cursor, Kimi Code and other AI assistants — https://relay.zonefoundry.dev/mcp

★ 0Not listed in sourcestreamable-http

Notion

makenotion/notion-mcp-server

!CAUTION B

Official Notion MCP Server

★ 4,6411 writestdio

Antigravity Workspace

study8677/antigravity-workspace-template

✓SAFE B

🧠 RepoBrain (formerly Antigravity) — Give your repo a brain. ChatGPT for your codebase: works in Claude Code, Cursor, Codex, Windsurf & more.

★ 1,3261 writestdio

RepoBrain

study8677/repobrain

✓SAFE B

🧠 RepoBrain (formerly Antigravity) — Give your repo a brain. ChatGPT for your codebase: works in Claude Code, Cursor, Codex, Windsurf & more.

★ 1,3261 writestdio

Browser Use

saik0s/mcp-browser-use

!CAUTION B
★ 9671 destructivestdio

Alfanous

alfanous-team/alfanous

✓SAFE B

Alfanous is an Arabic search engine API provides the simple and advanced search in Quran , more features and many interfaces...

★ 289Not listed in sourcestdio

PCTX

portofcontext/pctx

!CAUTION B

pctx is the execution layer for agentic tool calls. It auto-converts agent tools and MCP servers into code that runs in secure sandboxes for token-efficient workflows.

★ 2791 writestdio

Atlassian Bitbucket

aashari/mcp-server-atlassian-bitbucket

!CAUTION B

Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces, repositories, and pull requests via tools (list, get, comment, search). Connects AI directly to version control workflows through the standard MCP interface.

★ 1631 destructivestdio

FHIR

wso2/fhir-mcp-server

!CAUTION B

FHIR MCP Server – helping you expose any FHIR Server or API as a MCP Server.

★ 137Not listed in sourcestdio

LightRAG

shemhamforash23/lightrag-mcp

!CAUTION B
★ 1232 destructivestreamable-http

Prometheus

tjhop/prometheus-mcp-server

!CAUTION B

MCP server for LLMs to interact with Prometheus

★ 119Not listed in sourcestdio

Lara Translate

translated/lara-mcp

!CAUTION B
★ 994 destructivestreamable-http

CircleCI

circleci-public/mcp-server-circleci

!CAUTION B

[DEPRECATED] This package is no longer maintained. Migrate to CircleCI's hosted MCP server or the CircleCI CLI MCP. See https://circleci.com/docs/guides/toolkit/circleci-mcp-overview/

★ 931 readsse

Amazon Shopping

fewsats/amazon-mcp

✓SAFE B

Amazon MCP server to search & buy products using the L402

★ 813 writestreamable-http

Vibe Malware Triage

eversinc33/triagemcp

✓SAFE B

Vibe Malware Triage - MCP server for static PE analysis.

★ 784 writesse

Multi-CLI

osanoai/multicli

✓SAFE B

Gemini, Codex, Claude, and OpenCode all in a single MCP tool for use by any coding agent.

★ 7516 readstdio

GooseTeam

cliffhall/gooseteam

✓SAFE B

Look, a flock of geese! An MCP server and protocol for Goose agent collaboration.

★ 741 destructivesse

Discord Py Self

microck/discord.py-self-mcp

!CAUTION B

comprehensive Discord selfbot MCP server using discord.py-self

★ 71Not listed in sourcestdio

Prefect

prefecthq/prefect-mcp-server

!CAUTION B

Prefect MCP server

★ 541 readstdio

MCPcat

mcpcat/mcpcat-python-sdk

!CAUTION B

AgentCat is an analytics platform for MCP server owners 🐱.

★ 531 writestreamable-http

Sunsama

robertn702/mcp-sunsama

✓SAFE B
★ 522 destructivestdio

Modular

d-kimuson/modular-mcp

✓SAFE B

A Model Context Protocol (MCP) proxy server that enables efficient management of large tool collections across multiple MCP servers by grouping them and loading tool schemas on-demand.

★ 511 readstdio

Chrome Control

lxe/chrome-mcp

✓SAFE B

Allows LLM agents to control a local chrome instance without taking screenshots

★ 491 writesse

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.