MCP servers · over the network

Remote MCP servers

2,126 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/remote/page/49

Verdicts · 2,126 servers

✓SAFE708!CAUTION494✕BLOCK924

Transports

A server can list more than one transport.

Tool risk

565

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →
2,126 servers · 1,153–1,176 · ranked by trust score, then stars
Paper Search✕BLOCK D

openags/paper-search-mcp

MCP, CLI, Skills for searching and downloading academic papers from multiple sources like arXiv, PubMed, bioRxiv, etc.

★ 2,682GitHub stars63 readsse
skybridge✕BLOCK D

alpic-ai/skybridge

Skybridge is a full-stack TypeScript framework for MCP Apps and ChatGPT Apps. Type-safe. React-powered. Platform-agnostic.

★ 2,172GitHub stars2 destructivestreamable-http
MCP Server for MySQL✕BLOCK D

benborla/mcp-server-mysql

A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.

★ 2,155GitHub stars1 readstdio
MySQL✕BLOCK D

benborla/mcp-server-mysql

A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.

★ 2,129GitHub stars1 readstdio
mcp-server-kubernetes✕BLOCK D

Flux159/mcp-server-kubernetes

MCP Server for kubernetes management commands

★ 1,597GitHub stars2 destructivesse
LitterBox✕BLOCK D

blacksnufkin/litterbox

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

★ 1,541GitHub stars2 destructivestdio
Nx Console✕BLOCK D

nrwl/nx-console

Nx Console is the user interface for Nx & Lerna.

★ 1,414GitHub starsNot listed in sourcesse
jupyter-mcp-server✕BLOCK D

datalayer/jupyter-mcp-server

🪐 🔧 Model Context Protocol (MCP) Server for Jupyter.

★ 1,286GitHub stars1 writestdio
Google Calendar MCP Server✕BLOCK D

nspady/google-calendar-mcp

MCP integration for Google Calendar to manage events.

★ 1,200GitHub stars1 destructivestdio
Google Calendar✕BLOCK D

nspady/google-calendar-mcp

MCP integration for Google Calendar to manage events.

★ 1,188GitHub stars1 destructivestdio
Better Chatbot✕BLOCK D

better-chatbot/better-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,185GitHub stars19 readstdio
Client Chatbot✕BLOCK D

cgoinglove/mcp-client-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,185GitHub stars19 readstdio
Better Chatbot✕BLOCK D

cgoinglove/better-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,182GitHub stars19 readstdio
Keinsaas Navigator✕BLOCK D

keinsaasforever/better-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,182GitHub stars19 readstdio
Pixelle✕BLOCK D

aidc-ai/pixelle-mcp

An Open-Source Multimodal AIGC Solution based on ComfyUI + MCP + LLM https://pixelle.ai

★ 1,119GitHub stars1 destructivestreamable-http
Smithery CLI✕BLOCK D

smithery-ai/cli

Install, manage and develop MCP servers and skills for agents

★ 837GitHub stars1 destructivestdio
Feishu✕BLOCK D

cso1z/feishu-mcp

Feishu / Lark 飞书文档与任务管理工具,支持 MCP 服务器和 CLI + Skill 两种使用方式,可无缝集成 Cursor、Claude Code、Cline 等 AI 编码工具

★ 741GitHub stars2 destructivesse
Semgrep✕BLOCK D

semgrep/mcp

A MCP server for using Semgrep to scan code for security vulnerabilities.

★ 687GitHub stars1 readsse
Openapi Mcp Generator✕BLOCK D

harsha-iiiv/openapi-mcp-generator

A tool that converts OpenAPI specifications to MCP server

★ 636GitHub stars2 destructivestdio
Cloud Run MCP server and Gemini CLI extension✕BLOCK D

GoogleCloudPlatform/cloud-run-mcp

MCP server to deploy apps to Cloud Run

★ 633GitHub stars4 writesse
Cloud Run✕BLOCK D

googlecloudplatform/cloud-run-mcp

MCP server to deploy apps to Cloud Run

★ 631GitHub stars4 writesse
Proxmox Plus✕BLOCK D

rekklesna/proxmoxmcp-plus

Use MCP and OpenAPI to safely control Proxmox VE VMs, LXCs, backups, and snapshots from LLMs and AI agents.

★ 566GitHub stars5 readstdio
Concierge✕BLOCK D

concierge-hq/concierge

🚀 Universal SDK for building next-gen MCP servers

★ 530GitHub stars7 writestreamable-http
Concierge✕BLOCK D

agentic-web-interfaces/concierge

🚀 Universal SDK for building next-gen MCP servers

★ 528GitHub stars7 writestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,437 of the 2,126 also list stdio, so the same package can run as a local process. 689 are remote only.
Are remote servers safe?
708 are SAFE, 494 CAUTION and 924 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.