MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/39

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

913–936 of 2,120 · ranked by trust score, then stars

agentic_services

impanyu/agentic_services

✓SAFE B

Paid claim verification with cited web evidence, source provenance, snapshots, and hashes.

★ 03 readstreamable-http

BaseThread MCP

navbuildz/basethread-mcp

✓SAFE B
★ 0Not listed in sourcestreamable-http

indotender-company-atlas

indotender/thecompanyatlas-mcp

✓SAFE B

Global customs trade data and company registry. Search shipments, and look up legal entities.

★ 0Not listed in sourcestreamable-http

indotender-indocourtatlas

indotender/indocourtatlas-mcp

✓SAFE B

Search and read Indonesian court cases. Filter by court, year, and case type.

★ 0Not listed in sourcestreamable-http

indotender-thaiprocurement

indotender/thaiprocurement-mcp

✓SAFE B

Search Thai government procurement tenders and bidder companies.

★ 0Not listed in sourcestreamable-http

MacWork

gklab/MacWork

✓SAFE B

Open-source computer-use agent and MCP server for macOS — operates any app through the Accessibility API and native interfaces instead of screenshots. No app-specific code.

★ 05 writestreamable-http

mailsift

itswl/mailsift

!CAUTION B

Read-only multi-mailbox triage: watch inboxes and spam, judge what actually matters with an LLM, and push only that to Feishu or a webhook. MCP server and a web view included.

★ 01 readstdio

mailtea-agent-plugin

mailtea-app/mailtea-agent-plugin

!CAUTION B

Portable Agent Plugins 1.0.0 package for Mailtea — skills plus MCP so AI agents can send, schedule, and manage email.

★ 0Not listed in sourcestreamable-http

netatmo-energy-mcp

christophe77/netatmo-energy-mcp

✓SAFE B

Read-only MCP server for Netatmo smart thermostats and radiator valves. Works with any MCP client and LLM: Claude, GPT, Gemini, local models. Room temperatures, setpoints, boiler activity, heating history and analytics.

★ 06 writestdio

ocs-mcp-worker

PostOakLabs/ocs-mcp-worker

!CAUTION B

MCP server for OmegaCentauri.me (evidence-evaluation tools, signed receipts)

★ 01 writestdio

odoo-mcp

ebmurha/odoo-mcp

✓SAFE B

MCP server for Odoo Enterprise

★ 0Not listed in sourcestdio

parlay-api-mcp

JacobiusMakes/parlay-api-mcp

!CAUTION B

Python MCP server for ParlayAPI sports odds and props. Public discovery needs no key; account data uses your own key. Includes signup, login-email, checkout-link and preference actions. MIT code; API data redistribution rights are not included.

★ 02 writestdio

plugrail-jp-calendar

plugrail/servers

✓SAFE B

Japanese holiday and business-day calculations using official Japan Cabinet Office data.

★ 01 writestreamable-http

Wireshark

bx33661/wireshark-mcp

!CAUTION B

Wireshark-MCP,Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.

★ 2851 destructivesse

Repowire

prassanna-ravishankar/repowire

!CAUTION B

May the agents talk . Connect Claude Code, Opencode, Codex, Pi across projects, across machines and with your telegram

★ 2641 readstdio

BrowserStack MCP Server

browserstack/mcp-server

!CAUTION B

BrowserStack's Official MCP Server

★ 15412 writestdio

Auth0 Mcp Server

auth0/auth0-mcp-server

!CAUTION B

Connect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.

★ 12110 writestdio

MySQL

guangxiangdebizi/mysql_mcp

!CAUTION B

这是一个功能强大且易用的MySQL数据库MCP(Model Context Protocol)服务器,让你的AI助手可以安全地进行完整的数据库操作,支持多数据库连接管理、增删改查、事务管理和智能回滚功能。

★ 811 destructivestreamable-http

Obsidian Sync

es617/obsidian-sync-mcp

!CAUTION B

MCP server for Obsidian — access your vault from any AI agent, even when your machine is off. Powered by Self-hosted LiveSync.

★ 591 destructivestreamable-http

Mocxykit

shunseven/mocxykit

!CAUTION B

This is an Frontend development service middleware that can be used with webpack and vite. Its main function is to visualize the configuration, manage http(s)-proxy, and mock data.

★ 391 readsse

AI DirScan

elitewa/ai_dirscan

!CAUTION B

可用于AI进行自动目录扫描的MCP辅助工具

★ 362 readsse

Agentic AI Engineering

zkzkgamal/agentic-ai-engineering

!CAUTION B

Agentic AI Engineering is a production-grade engineering resource for building modern agentic AI systems with LangChain, LangGraph, RAG, MCP, local models, and deployable Python services.

★ 332 writesse

Hyades

apology-is-policy/hyades

!CAUTION B

Unicode/ASCII Mathematical Typesetting Engine with LaTeX Input, VSCode Integration, MCP server, and Automatic Rendering into Source Code Comments

★ 302 readstreamable-http

Distillery

norrietaylor/distillery

✓SAFE B

Team knowledge evaporates daily — pairing sessions, debugging context, architectural rationale lost to Slack. Distillery captures it at the point of creation, connects it into a living graph, and surfaces it conversationally. It monitors feeds, tracks what matters to your projects, and alerts you be

★ 25Not listed in sourcestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.