MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/58

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,369–1,392 of 2,120 · ranked by trust score, then stars

MCP TypeScript SDK

Alcyone-Labs/mcp-typescript-sdk

✕BLOCK D

The official TypeScript SDK for Model Context Protocol servers and clients

★ 21 writesse

ambit

zz-plant/ambit

✕BLOCK D

See what you and your AI agents can do, and what one more step would unlock. Ambit maps Claude Code, Cursor, OpenCode and nine more agent configs into one local graph: what works, what to set up next, and what breaks if a piece goes.

★ 212 writestdio

documentdb-mcp

Knuckles-Team/documentdb-mcp

✕BLOCK D

DocumentDB A2A + MCP Server

★ 21 readsse

neurostack

Abhinav1234abhinav/neurostack

✕BLOCK D

Index and search Markdown vaults as knowledge graphs to provide AI agents with persistent, structured long-term memory across sessions.

★ 2Not listed in sourcestdio

patchx-freenote-agent

ZsTs119/patchx-freenote-agent

✕BLOCK D

PatchX Freenote Agent: CLI, local MCP bridge and Agent Skill for synced records, AI results and user-approved workflows. Formerly PatchXNote.

★ 2Not listed in sourcestdio

patchxnote-agent

ZsTs119/patchxnote-agent

✕BLOCK D

PatchX Freenote Agent: CLI, local MCP bridge and Agent Skill for synced records, AI results and user-approved workflows. Formerly PatchXNote.

★ 2Not listed in sourcestdio

selenium-flow

kubed-io/selenium-flow

✕BLOCK D

A selenium mcp and http workflow client.

★ 215 readstdio

startup-valuation

simonmak-ascent/startup-valuation

✕BLOCK D

Comprehensive startup valuation library (80+ formulas) with an MCP server and AI-agent skills — scorecard, VC method, Black-Scholes, SaaS metrics, and more

★ 2Not listed in sourcestdio

trippyogi-gitworthy

trippyogi/gitworthy

✕BLOCK D

is it worth your commit? Pre-flight triage for OSS contribution targets.

★ 21 destructivestdio

Kenwea Public MCP Server

kenwea-protocol/kenwea

✕BLOCK D

Kenwea protocol AI marketplace

★ 1Not listed in sourcestdio

macula-mcp

macula-io/macula-mcp

✕BLOCK D

MCP server that gives Claude Code, Cursor, opencode and any agent harness shared memory, identity and messaging over the Macula mesh

★ 15 writestdio

Remcp

getremcp/remcp

✕BLOCK D

Remote MCP access to computers you explicitly pair — files, terminal, desktop UI, browser automation, diagnostics, and documents.

★ 14 destructivestreamable-http

AI-Agent-Email-List

lbesecker195/AI-Agent-Email-List

✕BLOCK D

Free SMTP relay and email API with an MCP server that AI agents can sign up for themselves. Mailgun-compatible, DKIM signing, automatic warmup, inbound mail.

★ 1Not listed in sourcestreamable-http

quant-integrity

abhayjnayakk/quant-integrity

✕BLOCK D

Statistical tests for whether a backtest means anything: deflated Sharpe, PBO, purged CV, reality checks, attestation verification.

★ 1Not listed in sourcestreamable-http

anansi

aboral-bumper926/anansi

✕BLOCK D

Scrape data from unstable websites using automated self-healing scrapers, TLS fingerprinting, and Pydantic validation to ensure reliable extraction.

★ 11 destructivesse

falzmarke

blitzsicht/falzmarke

✕BLOCK D

Auf den Millimeter geprüft, nicht nur behauptet: DIN-5008-Briefe aus Markdown, als PDF/A gesetzt. Skill für KI-Agenten und CLI.

★ 1Not listed in sourcestdio

fennec

plumpslabs/fennec

✕BLOCK D

AI-native developer observability MCP (Model Context Protocol) server that gives AI agents full-stack visibility into your development environment — browser, terminal, and processes — all in one unified interface.

★ 11 destructivesse

intangible-valuation

simonmak-ascent/intangible-valuation

✕BLOCK D

Intangible asset valuation library (124+ formulas) with a 14-tool MCP server and AI-agent skills — IP, technology, customer, goodwill, PPA, impairment

★ 1Not listed in sourcestdio

marian-coach-eng-leadership-toolkit

marian-kamenistak/ai-engineering-leader-toolkit

✕BLOCK D

MCP server: engineering leadership answers from 3,662 mentoring sessions. Benchmarks, 1:1 playbooks, developer value calculator. One URL, no install.

★ 12 readstreamable-http

mcp

fetchsandbox/mcp

✕BLOCK D

A deterministic verification engine for agents. Fires the edge cases your sandbox never sends — duplicate webhooks, declined cards, rate limits — then proves a fix: the same scenario fails on the old code and passes on the new. npm: fetchsandbox-mcp

★ 18 writestdio

mcp-server

223n/mcp-server

✕BLOCK D

ローカルOllmaを参照、公開するMCPサーバー

★ 12 writestreamable-http

memorycrystal

nativist-rossini671/memorycrystal

✕BLOCK D

Store persistent memory for AI agents so every conversation, decision, and session stays informed

★ 13 destructivestdio

onenote-mcp

sandraschi/onenote-mcp

✕BLOCK D

MCP server for Microsoft OneNote via Graph API - notebooks, sections, pages, search, device-code auth, Vite webapp + Tauri desktop app

★ 11 destructivesse

swarm-tips

corsur/swarm-tips

✕BLOCK D

Swarm Tips — AI agent discovery and coordination. Smart contracts, MCP server, shared crates.

★ 1Not listed in sourcestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.