MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/53

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,249–1,272 of 2,120 · ranked by trust score, then stars

OPNSense

vespo92/opnsensemcp

✕BLOCK D

MCP Server for OPNSense to act as IaC proxy

★ 8823 destructivesse

agent-skills

youdotcom-oss/agent-skills

✕BLOCK D

You.com skills and plugins for web search, content extraction, research, finance, and integration discovery, helping AI agents build with up-to-date web context.

★ 861 readstreamable-http

Codebase

dedeveloper23/codebase-mcp

✕BLOCK D

Model Context Protocol implementation for retrieving codebases using RepoMix

★ 841 writesse

Kibana

tocharianou/mcp-server-kibana

✕BLOCK D

MCP server for Kibana, Access search and manage Kibana in MCP Client.

★ 841 destructivestdio

Podman

manusa/podman-mcp-server

✕BLOCK D

Model Context Protocol (MCP) server for container runtimes (Podman and Docker)

★ 84Not listed in sourcestdio

Stability AI

tadasant/mcp-server-stability-ai

✕BLOCK D

MCP Server integrating MCP Clients with Stability AI-powered image manipulation functionalities: generate, edit, upscale, and more.

★ 841 destructivesse

Pdfmux

nameetp/pdfmux

✕BLOCK D

PDF extraction that audits its own output — and certifies any other extractor's, catching pages they silently dropped. Verify signed manifests offline: free, MIT, no account. 0.903 on opendataloader-bench, #2 of 8 engines. 7-tool MCP server.

★ 838 readstdio

Yorishiro

sktkkoo/Yorishiro

✕BLOCK D

A terminal that gives AI a body and a living space.

★ 824 writestreamable-http

AutoMobile

zillow/auto-mobile

✕BLOCK D

Mobile automation suite of tools including an MCP and libraries for test authoring & execution

★ 8016 readsse

Discourse

discourse/discourse-mcp

✕BLOCK D

MCP client for Discourse sites

★ 7712 destructivestdio

Pond

tenequm/pond

!CAUTION D

Lossless storage and search for AI agent sessions, across every agentic client.

★ 771 readstdio

Better Code Review Graph

n24q02m/better-code-review-graph

✕BLOCK D

Knowledge graph for token-efficient code reviews -- semantic search and call-graph resolution across your codebase.

★ 76Not listed in sourcestdio

crg

n24q02m/crg

✕BLOCK D

Knowledge graph for token-efficient code reviews -- semantic search and call-graph resolution across your codebase.

★ 76Not listed in sourcestdio

dsh-mcp-panel

PerryLink/dsh-mcp-panel

✕BLOCK D

MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and pipeline trial calls, a Settings MCP tab with server CRUD (approval-gated writes, automatic backups) and a tool trial console over the official tool pipeline (Apache-2.0, dsh-plugin).

★ 744 writestreamable-http

MyKG

senolisci/mykg

✕BLOCK D

MyKG Knowledge Graph Engine: Turn raw files into knowledge graphs with induced ontology

★ 7415 readstdio

AskDB

mgorabbani/askdb

✕BLOCK D

Give AI agents safe access to your database.

★ 732 writestreamable-http

OpenMSX

nataliapc/mcp-openmsx

✕BLOCK D

A Model Context Protocol (MCP) server for automating openMSX emulator instances. This server provides comprehensive tools for MSX software development, testing, and automation through standardized MCP protocols.

★ 738 readstdio

Mikro

alikarami/mikromcp

✕BLOCK D

Production-grade MCP server for MikroTik RouterOS with secure AI-native network automation.

★ 7235 destructivesse

Image Gen

lansespirit/image-gen-mcp

✕BLOCK D

An MCP server that integrates with gpt-image-1 & Gemini imagen4 model for text-to-image generation services

★ 702 readsse

Debugg AI

debugg-ai/debugg-ai-mcp

✕BLOCK D

Zero-Config, Fully AI-Managed End-to-End Testing for all code gen platforms.

★ 6810 readstdio

Netlify

netlify/netlify-mcp

✕BLOCK D

Netlify's Official MCP server

★ 673 readstreamable-http

Paper Distill

eclipse-cj/paper-distill-mcp

✕BLOCK D

MCP server for academic paper search, curation, and multi-platform push

★ 671 destructivestdio

CTF Solver

foxibu/ctf-solver

✕BLOCK D
★ 649 writestdio

Weibo

qinyuanpei/mcp-server-weibo

✕BLOCK D

基于 Model Context Protocol 的微博数据接口服务器 - 实时获取微博用户信息、动态内容、热搜榜单、粉丝关注数据。支持用户搜索、内容搜索、话题分析,为 AI 应用提供完整的微博数据接入方案。

★ 631 readstdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.