MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/54

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,273–1,296 of 2,120 · ranked by trust score, then stars

Contentful Management

ivo-toby/contentful-mcp

✕BLOCK D

MCP (Model Context Protocol) server for the Contentful Management API

★ 627 destructivesse

MCP Think Tank

flight505/mcp-think-tank

✕BLOCK D

MCP Think Tank is a powerful Model Context Protocol (MCP) server designed to enhance the capabilities of AI assistants like Cursor and Claude. It provides a structured environment for enhanced reasoning, persistent memory, and responsible tool usage.

★ 623 destructivestreamable-http

Goke

remorses/goke

✕BLOCK D

simple, type safe, elegant command line framework. the CLI framework for agents

★ 612 readstdio

CKAN Server

ondata/ckan-mcp-server

✕BLOCK D

MCP server for querying CKAN open data portals (package search, DataStore SQL, organizations, groups, tags)

★ 6120 readstdio

Context Awesome

bh-rat/context-awesome

✕BLOCK D

awesome-lists now available as CLI & MCP server for your agent.

★ 613 readsse

Xcode

lapfelix/xcodemcp

✕BLOCK D

MCP server for Xcode that wraps its AppleScript interface & uses XCLogParser to return clear build results

★ 596 writesse

Zoteus

oscardvs/zoteus

✕BLOCK D

Zotero MCP server: search, citations, add by DOI, safe writes, semantic search and PDF page images for Claude, ChatGPT and any MCP client. TypeScript, local-first.

★ 555 destructivestdio

buildkite-mcp-server

buildkite/buildkite-mcp-server

✕BLOCK D

Official MCP Server for Buildkite.

★ 55Not listed in sourcestdio

OpenRouter Agents

wheattoast11/openrouter-deep-research-mcp

✕BLOCK D

A multi-agent research MCP server + mini client adapter - orchestrates a net of async agents or streaming swarm to conduct ensemble consensus-backed research. Each task builds its own indexed pglite database on the fly in web assembly. Includes semantic + hybrid search, SQL execution, semaphores, pr

★ 552 writesse

XHS CLI

algovate/xhs-mcp

✕BLOCK D

用于小红书(xiaohongshu.com)的 Model Context Protocol(MCP)服务器与 CLI 工具,支持登录、发布、搜索、推荐等自动化能力

★ 551 destructivesse

Roampal

roampal-ai/roampal-core

✕BLOCK D

Outcome-based persistent memory MCP server for Claude Code and OpenCode. Good advice promoted, bad advice demoted. pip install roampal.

★ 541 destructivestdio

Sitecore Server

antonytm/mcp-sitecore-server

✕BLOCK D

Model Context Protocol server for Sitecore

★ 5313 destructivestdio

Immich Photo Manager

drolosoft/immich-photo-manager

✕BLOCK D

MCP server and Claude Code plugin for self-hosted Immich: CLIP and OCR search, geographic albums, duplicates, people and faces, metadata repair, PDF photobooks. 94 tools, tested live on Immich 2.x and 3.x.

★ 5213 destructivestdio

Matrix

mjknowles/matrix-mcp-server

✕BLOCK D

MCP Server for a Matrix home server integration; chat, manage rooms, etc.

★ 525 writestreamable-http

Binance

analyticace/binance-mcp-server

✕BLOCK D

Unofficial tools and server implementation for Binance's Model Context Protocol (MCP). Designed to support developers building crypto trading AI Agents.

★ 502 writestdio

Binance

analyticace/binancemcpserver

✕BLOCK D

Unofficial tools and server implementation for Binance's Model Context Protocol (MCP). Designed to support developers building crypto trading AI Agents.

★ 502 writestdio

ZenML

zenml-io/mcp-zenml

✕BLOCK D

MCP server to connect an MCP client (Cursor, Claude Desktop etc) with your ZenML MLOps and LLMOps pipelines

★ 491 readstdio

Puppeteer Vision

djannot/puppeteer-vision-mcp

✕BLOCK D
★ 481 readsse

Engram

tstockham96/engram

✕BLOCK D

Universal memory layer for AI agents. Remember, recall, consolidate.

★ 475 writestdio

Rosetta

tikoci/rosetta

✕BLOCK D

MCP Server with RouterOS docs + commands + products + changelogs, using SQLite-as-RAG, sourced from MikroTik

★ 4716 readstdio

Open Notebook

epochal-dev/open-notebook-mcp

✕BLOCK D

MCP server for an Open Source implementation of Notebook LM: Open Notebook

★ 465 destructivestdio

Moo Tasks

dizlexic/moo-tasks

✕BLOCK D

A simple multiuser multiboard task MCP server managed via kanban board interface. Created to allow simple self hosted agent task management.

★ 451 destructivestreamable-http

OpenStack Operations

call518/mcp-openstack-ops

✕BLOCK D

90+ production-safe OpenStack tools for AI agents via MCP. Project-scoped & read-only by default. Works with Claude, Open WebUI & any MCP client. FastMCP + OpenStack SDK. Available on PyPI, Docker Hub & Smithery.

★ 4541 readstdio

Smartbear Mcp

SmartBear/smartbear-mcp

✕BLOCK D

SmartBear's official MCP Server

★ 441 writesse

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.