MCP servers · over the network

Remote MCP servers

2,126 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/remote/page/46

Verdicts · 2,126 servers

✓SAFE708!CAUTION494✕BLOCK924

Transports

A server can list more than one transport.

Tool risk

565

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →
2,126 servers · 1,081–1,104 · ranked by trust score, then stars
pi-mcp-adapter!CAUTION C

nicobailon/pi-mcp-adapter

Token-efficient MCP adapter for Pi coding agent

★ 1,588GitHub stars3 writestdio
Yandex Tracker!CAUTION C

aikts/yandex-tracker-mcp

Yandex Tracker MCP Server with OAuth2 support

★ 121GitHub starsNot listed in sourcestdio
fastmcp-ts!CAUTION C

PrefectHQ/fastmcp-ts

The official FastMCP TypeScript library for building MCP servers, clients, and apps 🏎️ 🏎️ 🏎️

★ 75GitHub stars6 destructivestdio
Toutiao!CAUTION C

chemany/toutiao_mcp_server

★ 69GitHub stars1 destructivesse
Better Email!CAUTION C

n24q02m/better-email-mcp

IMAP/SMTP email for AI agents -- read, send, organize folders, and manage attachments across multiple accounts, with auto-discovery.

★ 33GitHub stars1 writestdio
artist-mcp!CAUTION C

ManudotaORG/artist-mcp

Read your OneNote pages in Claude Desktop or Codex. An npm-published MCP server that signs in on your own machine, with Gmail and Calendar as supporting evidence, opt-in writes, and editable workflow playbooks.

★ 1GitHub stars1 destructivestdio
OpenOSINT!CAUTION C

openosint/openosint

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

★ 1,631GitHub stars10 readstdio
Octocode!CAUTION C

muvon/octocode

Structural code intelligence for AI agents — semantic search, knowledge graphs, and a built-in MCP server in one Rust binary. Give Claude, Cursor, and any MCP client a deep understanding of your codebase.

★ 477GitHub starsNot listed in sourcestreamable-http
OpenZIM!CAUTION C

cameronrye/openzim-mcp

OpenZIM MCP is a modern, secure, and high-performance MCP (Model Context Protocol) server that enables AI models to access and search ZIM format knowledge bases offline.

★ 144GitHub stars4 readsse
CodeAlive!CAUTION C

codealive-ai/codealive-mcp

Context engine for large codebases, exposed through MCP. Gives AI coding agents precise repository context; benchmarked at frontier-agent quality with ~25x lower model cost and 45% fewer tokens with semantic search.

★ 91GitHub starsNot listed in sourcestdio
Atlas!CAUTION C

richschefren/atlas

Open-source local-first cognitive memory. AGM-compliant belief revision (49/49 postulates). When a fact changes, downstream beliefs are automatically re-evaluated, not just flagged.

★ 85GitHub stars1 destructivestdio
Norman Finance!CAUTION C

norman-finance/norman-mcp-server

AI-powered bookkeeping and tax filing automation for entrepreneurs at the heart of the European economy

★ 60GitHub stars2 destructivesse
Slack Explorer!CAUTION C

shibayu36/slack-explorer-mcp

MCP server specialized in retrieving information from Slack messages and threads

★ 50GitHub starsNot listed in sourcestdio
Agent Gateway!CAUTION C

roddutra/agent-mcp-gateway

Provides per-subagent MCP access controls to Claude Code (or any MCP client) across all your MCPs and prevents context window bloat. Loads only 3 tools instead of all your MCP Server's tool definitions. Agents discover tools on-demand, only when needed. Control which servers and individual tools eac

★ 41GitHub stars2 destructivestdio
LightCMS!CAUTION C

jonradoff/lightcms

Self-hosted CMS that works human or headless: full admin UI plus REST and MCP APIs, built-in semantic search and site chat, and content forking, versioning, diff/merge review, templates, approvals, and static page generation.

★ 31GitHub starsNot listed in sourcestdio
ADK Redis!CAUTION C

redis-developer/adk-redis

Redis integration for Google Agent Development Kit (ADK) - Memory, Sessions, Search Tools, MCP

★ 30GitHub stars2 readstreamable-http
PGTuner!CAUTION C

isdaniel/pgtuner_mcp

provides AI-powered PostgreSQL performance tuning capabilities.

★ 29GitHub starsNot listed in sourcestdio
ymm4MCP!CAUTION C

SCPgamerscp/ymm4MCP

ゆっくりムービーメーカー4のMCPです。将来的にはゆっくり動画を全自動で作れるようにしたいです。

★ 26GitHub stars1 readstdio
Thally!CAUTION C

thallylabs/thally

Open-source docs platform and product knowledge layer that turns merged product changes into evidence-backed updates for human review.

★ 5GitHub stars9 writestdio
dgui-hypermem!CAUTION C

ctaxnagomi/dgui-hypermem

DGUI-HyperMem (DeckerGUI HyperMemory) - self-hosted hybrid memory MCP server on Cloudflare Workers with a JEV (Choice/Noul/Score) reasoning layer and a HuggingFace training-brain flywheel.

★ 2GitHub stars3 writestreamable-http
mailbox!CAUTION C

benethos-hub/mailbox

Self-hosted REST API and web UI for all your mailboxes (IMAP, JMAP, POP3, Gmail, Microsoft 365, Outlook.com), with a Python client and an MCP server so AI agents read, sort, draft and send mail, only within the rights, folders and send limits you grant. Change feed, signed webhooks, audit.

★ 2GitHub starsNot listed in sourcestdio
seo!CAUTION C

110kc3/seo

Open registry and discovery API for AI products, agent tools, and MCP services.

★ 1GitHub stars5 readstreamable-http
rapier-html!CAUTION C

jackskip22/rapier-plugins

Stuff that doesn't belong in the main Rapier repo including letter sets, the Claude plugin, the OpenAI app package, the MCP server, and the npm packages rapier-html, rapier-markdown-kit and rapier-embed.

★ 0GitHub starsNot listed in sourcestreamable-http
GitHub!CAUTION C

github/github-mcp-server

GitHub's official MCP Server

★ 33,051GitHub starsNot listed in sourcestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,437 of the 2,126 also list stdio, so the same package can run as a local process. 689 are remote only.
Are remote servers safe?
708 are SAFE, 494 CAUTION and 924 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.