MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/36

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

841–864 of 2,120 · ranked by trust score, then stars

Ratel

ratel-ai/ratel

!CAUTION B

Context engineering for AI agents. ~80% fewer tokens. Fix tool overload. Skills and memory with in-process BM25 and semantic retrieval. Progressive Disclosure. No vector DB.

★ 46212 writestreamable-http

Monarch Money

robcerda/monarch-mcp-server

!CAUTION B

MCP Server for use with Monarch Money

★ 4083 destructivestreamable-http

Cloudflare Playwright

cloudflare/playwright-mcp

!CAUTION B

Playwright MCP fork that works with Cloudflare Browser Rendering

★ 2581 destructivesse

Zen7 Payment Agent

zen7-labs/zen7-payment-agent

!CAUTION B

Zen7 Payment Agent is the first implementation project of DePA (Decentralized Payment Agent), pioneers next-generation intelligent payment infrastructure.

★ 1781 writesse

MCP.science: Open Source MCP Servers for Scientific Research

pathintegral-institute/mcp.science

!CAUTION B

Open Source MCP Servers for Scientific Research

★ 1524 destructivestdio

Figma

timholden/figma-mcp-server

!CAUTION B

Model Context Protocol server implementation for Figma API

★ 1501 destructivesse

Dynatrace

dynatrace-oss/dynatrace-mcp

✓SAFE B

MCP server for Dynatrace Observability

★ 137Not listed in sourcestdio

LINE OA

wasintoh/line-oa-mcp-ultimate

!CAUTION B

Talk to your LINE Official Account through AI — broadcasts, Flex & tappable Rich Messages, Thai-ready rich menus, coupons, insights, LINE Shopping. New in 2.2: attach a picture, say send — zero hosting setup, verified before success. 51 tools (37+14), multi-OA. Works with Claude Cowork, Claude Code,

★ 1003 destructivestdio

SmartDB

wenb1n-dev/smartdb_mcp

!CAUTION B

Universal database MCP server connecting to MySQL, PostgreSQL, SQL Server, MariaDB,DM8,Oracle,not only provides basic database connection such as OAuth 2.0 authentication , health checks, SQL optimization, and index health detection

★ 7718 readstdio

Ollama

nighttrek/ollama-mcp

!CAUTION B
★ 741 destructivesse

TriliumNext

tan-yong-sheng/triliumnext-mcp

!CAUTION B

MCP server for TriliumNext Notes

★ 692 destructivestdio

Codebase Context

patricksys/codebase-context

!CAUTION B

Codebase Context gives AI agents understanding of your codebase through semantic code search, team conventions, patterns, and memory, so they use fewer tokens, spend less time, and produce better, more familiar output.

★ 651 writestdio

Suno

acedatacloud/sunomcp

!CAUTION B

MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.

★ 6410 readstdio

Fast Filesystem

efforthye/fast-filesystem-mcp

!CAUTION B

A high-performance Model Context Protocol (MCP) server that provides secure filesystem access for Claude and other AI assistants.

★ 631 destructivestdio

Obsidian Multivault

bepitulaz/obsidian-multivault-mcp

!CAUTION B

Multi-vault and multiuser Obsidian MCP

★ 621 destructivestdio

Redmine CLI

aarondpn/redmine-cli

!CAUTION B

A powerful command-line interface for Redmine, enhanced with first-class AI agent capabilities via Skills and MCP integration.

★ 52Not listed in sourcestdio

Handler

alduncanson/handler

!CAUTION B

A2A protocol client for your terminal

★ 452 destructivestreamable-http

Withings

akutishevsky/withings-mcp

!CAUTION B

MCP server for Withings health data integration

★ 4314 readstreamable-http

File Context

bsmi021/mcp-file-context-server

✓SAFE B

A Model Context Protocol (MCP) server that provides file system context to Large Language Models (LLMs). This server enables LLMs to read, search, and analyze code files with advanced caching and real-time file watching capabilities.

★ 391 writestdio

C64 Bridge

chrisgleissner/c64bridge

!CAUTION B

MCP server to control and program the Commodore 64 Ultimate, Ultimate 64, Ultimate II, or VICE.

★ 378 destructivestdio

Better Godot

n24q02m/better-godot-mcp

✓SAFE B

Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.

★ 361 writestdio

ChessAgine

jalpp/chessagine-mcp

!CAUTION B

ChessAgine MCP is a MCP server that gives AI agents access to chess domain knowledge.

★ 336 writestdio

macOS UI Automation

mb-dev/macos-ui-automation-mcp

✓SAFE B
★ 338 readsse

Professional SEO Checker

hostinger/selfhosted-mcp-server-template

✓SAFE B
★ 293 readstreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.