MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/40

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

937–960 of 2,120 · ranked by trust score, then stars

artel

NicolasPrimeau/artel

!CAUTION B

Your fleet's smart notepad — one that learns. Shared memory your agents write to and get back at the right moment, plus a ledger showing what the work cost and which chores keep getting done by hand. Self-hosted, MIT.

★ 9Not listed in sourcestdio

convex-mcp-gateway

tfohlmeister/convex-mcp-gateway

!CAUTION B

Auth-aware Convex component that exposes selected Convex functions as MCP tools

★ 92 destructivestreamable-http

dsh-skills-anywhere

noteflowai/dsh-skills-anywhere

!CAUTION B

Check Agent Skills before reuse: find missing local resources in browser or CI, review pinned examples, and serve skills through DeepSeek Harness or MCP.

★ 69 readstdio

echelongraph-mcp

echelongraph/echelongraph-mcp

!CAUTION B

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-CVE exposure from Shodan data (© Shodan). Free and keyless.

★ 213 readstdio

rustpanosmcp

mechubsec/rustpanosmcp

✓SAFE B

Async Rust MCP server for Palo Alto Networks PAN-OS firewalls — bearer-token auth, per-token device/tool scopes, guarded candidate-config lifecycle

★ 1Not listed in sourcestdio

indexagentica-mcp

Drudley/indexagentica-mcp

!CAUTION B

Read-only remote MCP server (Streamable HTTP) and REST search for indexagentica.com

★ 04 readstreamable-http

microsoft-agent

Knuckles-Team/microsoft-agent

✓SAFE B

Microsoft A2A / AG-UI Agent

★ 03 writesse

oszillation-mixing-buddy

WizardofTryout/oszillation-mixing-buddy

!CAUTION B

Universal AI Co-Producer for DAWs · Bit-transparent ITU-R BS.1770-4 telemetry, 128-band RTA & zero-latency native accessibility bridges (macOS / Logic Pro & Steinberg).

★ 010 writesse

saybooks

alviso/saybooks

!CAUTION B

Saybooks — open-source books an AI agent can keep: invoicing, order to cash, CRM, job hunt and personal finances over one MCP connector, with rules the agent cannot break and one audit trail for people and agents. AGPL-3.0.

★ 0Not listed in sourcestdio

Ghidra

bethington/ghidra-mcp

!CAUTION B

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

★ 3,9483 readstdio

Azure DevOps

microsoft/azure-devops-mcp

!CAUTION B

The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents.

★ 2,0273 readstdio

LLM Wiki

lucasastorian/llmwiki

!CAUTION B

Open Source Implementation of Karpathy's LLM Wiki. Upload documents, connect your Claude account via MCP, and have it write your wiki !

★ 1,6432 readstreamable-http

Coding Tools

xytom/coding-tools-mcp

!CAUTION B

Give any AI agent the ability to code

★ 1,1582 writestdio

ClickHouse

clickhouse/mcp-clickhouse

!CAUTION B

Connect ClickHouse to your AI assistants.

★ 880Not listed in sourcesse

Mem0

mem0ai/mem0-mcp

!CAUTION B
★ 6621 readstdio

Notion

awkoy/notion-mcp-server

!CAUTION B

Notion MCP server for Claude, Cursor, ChatGPT & Claude Desktop. Connect AI agents to Notion via Model Context Protocol — pages, databases, blocks, comments, files.

★ 1731 readstdio

Outline Connector

vortiago/mcp-outline

!CAUTION B

A Model Context Protocol (MCP) server enabling AI assistants to interact with Outline documentation services.

★ 1561 readsse

SPARQL-LLM

sib-swiss/sparql-llm

!CAUTION B

🦜✨ Chat system, MCP server, and reusable components to improve LLMs capabilities when generating SPARQL queries

★ 1271 writesse

Yingdao RPA

ying-dao/yingdao_mcp_server

!CAUTION B

影刀RPA MCP Server

★ 1077 readsse

Codesearch

flupkede/codesearch

!CAUTION B

Multi-repo semantic code search MCP server in Rust — hybrid vector + BM25 retrieval, tree-sitter AST chunking, fully offline. For OpenCode, Claude Code, Cursor, and any MCP client.

★ 884 readstreamable-http

Firebird Integration

purodelphi/mcpfirebird

!CAUTION B

Implementation of Anthropic's MCP protocol for Firebird databases.

★ 693 writesse

Whois

kincaidyang/whois

!CAUTION B

Self-hosted WHOIS/RDAP API and MCP server for domains, IPv4/IPv6, CIDRs and ASNs.

★ 64Not listed in sourcestreamable-http

Yby6 Video Parser

yangbuyiya/yby6-crawling-short-video-mcp

!CAUTION B

本项目是一个基于 FastMCP 的全网短视频去水印解析服务,支持多平台视频分享链接的解析,自动提取视频真实地址及相关信息。 适用于需要批量解析、去水印、采集短视频的场景。本项目还支持视频内容文本提取功能,可以通过语音识别将视频内容转为文本。

★ 633 readsse

OrionBelt Analytics

ralfbecher/orionbelt-analytics

!CAUTION B

Ontology-based MCP server that analyzes database schemas (PostgreSQL, Snowflake, ClickHouse, Dremio) and generates RDF/OWL ontologies with SQL mappings for fan-trap-free Text-to-SQL.

★ 49Not listed in sourcestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.