MCP servers · over the network

Remote MCP servers

2,126 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/remote/page/42

Verdicts · 2,126 servers

✓SAFE708!CAUTION494✕BLOCK924

Transports

A server can list more than one transport.

Tool risk

565

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →
2,126 servers · 985–1,008 · ranked by trust score, then stars
Google Apps Script!CAUTION B

mohalmah/google-appscript-mcp-server

★ 55GitHub stars1 destructivesse
VibeCoding!CAUTION B

hyunjunjeon/vibecoding-lg-mcp-a2a

ttimes 바이브코딩 컨퍼런스 라이브 코딩 - 리서치 / 보고서 작성 Multi Agent 프로젝트

★ 23GitHub stars3 readstreamable-http
agent-cold-email!CAUTION B

YS-projectcalc/agent-cold-email

Coldrig — cold email infrastructure run entirely by your coding agent (Claude Code / Codex / Cursor / Cline). One token, 28 intent-level MCP + HTTP tools and an npm CLI: domain purchase, mailboxes, warmup, sequences, replies, deliverability guardrails. Free fault-injecting sandbox.

★ 0GitHub stars1 readstdio
dsh-saturday!CAUTION B

toki0413/dsh-saturday

Materials computing tools for AI agents: structures, engines, phonons, EOS, NEB, sampling, lineage.

★ 0GitHub stars7 writestdio
mcp!CAUTION B

SpekoAI/mcp

Hosted MCP server for Speko - manage voice AI agents, sessions, and calls from Claude Code, Cursor, and any MCP client

★ 0GitHub starsNot listed in sourcestreamable-http
Apify Actors!CAUTION B

apify/actors-mcp-server

The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.

★ 9,422GitHub stars5 writestdio
Apify!CAUTION B

apify/apify-mcp-server

The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.

★ 7,983GitHub stars5 writestdio
mailcheap!CAUTION B

marclou/mailcheap

Newsletters where you pay for the emails you send, not for dormant subscribers, at a fraction of the price of beehiiv and the like. Open source: self-host it, or use mailcheap.ai.

★ 1,312GitHub stars2 readstreamable-http
Konnect!CAUTION B

mixelpixx/Konnect

AI-assisted PCB design for KiCAD 10. Native KiCAD plugin — a single Rust binary exposing 217 schematic, layout, routing, placement, design-review, and manufacturing tools to Claude, or the LLM of your choosing

★ 724GitHub stars3 destructivestreamable-http
polymarket-paper-trader!CAUTION B

agent-next/polymarket-paper-trader

Paper trading simulator for Polymarket

★ 406GitHub starsNot listed in sourcestdio
Kindly Web Search!CAUTION B

shelpuk-ai-technology-consulting/kindly-web-search-mcp-server

Kindly Web Search MCP Server: Web search + robust content retrieval for AI coding tools (Claude Code, Codex, Cursor, GitHub Copilot, Gemini, etc.) and AI agents (Claude Desktop, OpenClaw, Hermes, etc.). Supports Serper, Tavily, and SearXNG.

★ 395GitHub stars2 readstreamable-http
Affine!CAUTION B

dawncr0w/affine-mcp-server

Model Context Protocol server for AFFiNE. Connect AI assistants to AFFiNE workspaces, documents, databases, and collaboration APIs over stdio or HTTP.

★ 297GitHub stars16 destructivesse
MacOS!CAUTION B

cursortouch/macos-mcp

Lightweight MCP server for computer use in MacOS

★ 195GitHub starsNot listed in sourcestdio
Confluent!CAUTION B

confluentinc/mcp-confluent

★ 167GitHub stars1 readsse
Vessel!CAUTION B

unmodeled-tyler/vessel-browser

Built from the ground-up for agents, Vessel Browser is an open source AI browser for Linux/Mac/Windows that provides a durable state, MCP control, and BYOK with full autonomous browsing. Use with Hermes Agent, OpenClaw, or connect to your favorite API provider.

★ 137GitHub stars12 destructivestreamable-http
LangCare FHIR!CAUTION B

langcare/langcare-mcp-fhir

Enterprise-grade MCP Server for FHIR-based EMRs, designed for robust deployments in agentic AI platforms.

★ 67GitHub starsNot listed in sourcestdio
mcp-mux!CAUTION B

mcpmux/mcp-mux

Configure MCP servers once, connect every AI client through a single local gateway

★ 24GitHub stars1 destructivestdio
seamless!CAUTION B

arctop/seamless

Local-first shared memory and task coordination for AI coding agents. One Go binary, MCP server, markdown files you own. Hooks for Claude Code and Codex CLI (and their desktop apps).

★ 6GitHub stars3 readstreamable-http
Coltrane✓SAFE B

eir-labs/coltrane

★ 3GitHub stars1 destructivestdio
dart-risk-mcp!CAUTION B

anboyu-alt/dart-risk-mcp

★ 1GitHub stars1 destructivesse
genesispay-js!CAUTION B

GenesisTechAT/genesispay-js

GenesisPay JavaScript SDKs and MCP server: x402 payments in USDC on Base for sellers and AI agents (@genesis-tech/genesispay-*)

★ 1GitHub stars2 writestdio
impreza-mcp!CAUTION B

imprezahost/impreza-mcp

MCP server for Impreza Host: deploy custom apps to managed VPSes from your AI editor.

★ 0GitHub stars15 destructivestdio
mapizarro1-foragex402!CAUTION B

mapizarro1/foragex402

Meta-search MCP for x402 agent-payable services -- find paid APIs across every registry.

★ 0GitHub stars2 readstreamable-http
nutri!CAUTION B

vryahn/nutri

Production nutrition-tracking PWA (React, Supabase) built and operated inside Claude Code: production RAG pipeline, hybrid semantic search (pgvector), self-built remote MCP server (OAuth 2.1 + PKCE, RLS-enforced), three-model AI fallback chain, and an LLM eval harness gating every release.

★ 0GitHub stars1 destructivestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,437 of the 2,126 also list stdio, so the same package can run as a local process. 689 are remote only.
Are remote servers safe?
708 are SAFE, 494 CAUTION and 924 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.