MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/60

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,417–1,440 of 2,120 · ranked by trust score, then stars

vcenter-mcp

buenapp/vcenter-mcp

✕BLOCK D

VMware vCenter MCP server on the Enchilada Framework

★ 03 destructivestreamable-http

verifiable-science-envs

jasonbrelsford/verifiable-science-envs

✕BLOCK D

Verifiable-reward RL environments and evals for scientific domains, starting with HLA/immunogenetics

★ 03 writestreamable-http

wamcp

Lilsmur/wamcp

✕BLOCK D

Integrate WhatsApp with AI agents using a native MCP server that offers tools, resources, and real-time notifications through TypeScript and Docker.

★ 08 destructivestdio

wiki-formant

tutmoses/wiki-formant

✕BLOCK D

The portable half of a wiki: derived taxonomy, a spec-correct MCP transport, markdown twins, and conditional-GET plumbing. Zero runtime dependencies.

★ 02 writestreamable-http

Context7

upstash/context7-mcp

!CAUTION D

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

★ 62,5103 readstdio

Context7

upstash/context7

!CAUTION D

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

★ 62,1903 readstdio

paper-search-mcp

openags/paper-search-mcp

✕BLOCK D

MCP, CLI, Skills for searching and downloading academic papers from multiple sources like arXiv, PubMed, bioRxiv, etc.

★ 2,7301 destructivesse

Kubernetes Manager

flux159/mcp-server-kubernetes

✕BLOCK D

MCP Server for kubernetes management commands

★ 1,5942 destructivesse

Memora

agentic-box/memora

✕BLOCK D

Give your AI agents persistent, collective memory — with deduplicating absorb, supersession lineage, semantic search, and a graph UI. Speaks MCP.

★ 7298 destructivestreamable-http

actual-mcp-server

agigante80/actual-mcp-server

✕BLOCK D

Talk to your self-hosted Actual Budget from any MCP client: a remote HTTP server for LibreChat/LobeChat or a local stdio process for Claude Desktop, with 71 tools for transactions, budgets, rules, and bank sync. No Docker needed for local use.

★ 6611 destructivestdio

AutoMem

verygoodplugins/mcp-automem

✕BLOCK D

MCP client for AutoMem — give Claude, Cursor, Codex, and other MCP tools durable graph+vector memory across conversations.

★ 652 destructivesse

Huly

dearlordylord/huly-mcp

✕BLOCK D

Huly MCP and CLI: Feature-complete MCP server and CLI for Huly platform. Intabia partially compatible.

★ 5894 destructivestdio

relay

valtors/relay

✕BLOCK D

MCP server with 40 tools for AI agents. Memory, web fetch, search, file ops, screenshots, and multi-agent coordination in one Go binary.

★ 128 writestdio

robinhood-toolkit

nirholas/robinhood-toolkit

!CAUTION D

Build on Robinhood Chain and Robinhood Crypto: verified network constants, a chain SDK, a read-only MCP server, runnable examples, and 64 build prompts.

★ 78 writestdio

Armature MCP Analytics for TypeScript

armature-tech/mcp-analytics

!CAUTION D

V0 architecture plan for MCP analytics SDK

★ 11 writestdio

figma-console-mcp

southleft/figma-console-mcp

✕BLOCK D

Your design system as an API. Connect AI to Figma for extraction, creation, and debugging.

★ 2,4659 destructivestdio

LetsFG

letsfg/letsfg

✕BLOCK D

Agent-native flight & hotel search and booking — MCP server, CLI, and Python/JS SDKs. Every airline in the world, major booking sites and OTAs, with per-flight reliability history.

★ 2,11014 readstdio

StashBase

liliu-z/stashbase

!CAUTION D

An open-source, local-first writing workspace where you can write with Claude Code and Codex, drawing on your own sources and past work.

★ 9182 destructivestdio

Elementor

msrbuilds/elementor-mcp

✕BLOCK D

WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.

★ 7262 readstreamable-http

hostinger-api-mcp

hostinger/api-mcp-server

✕BLOCK D

MCP server for Hostinger API

★ 160Not listed in sourcestdio

Hostinger API

hostinger/api-mcp-server

✕BLOCK D

MCP server for Hostinger API

★ 159Not listed in sourcestdio

ABAP ADT

fr0ster/mcp-abap-adt

✕BLOCK D

MCP server for SAP BTP ABAP Cloud and On-Premise ECC/S/4HANA ABAP ADT with full CRUD, JWT/XSUAA, and service-key auth.

★ 972 writesse

Starter

turboml-inc/mcp-starter

✕BLOCK D

Starter code to add MCPs to Puch AI #BuildWithPuch

★ 591 writestreamable-http

ServiceNow

happy-technologies-llc/mcp-servicenow-nodejs

!CAUTION D

Happy Platform MCP v5.1 - Multi-Instance ServiceNow MCP Server

★ 5423 writesse

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.