MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/61

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,441–1,464 of 2,120 · ranked by trust score, then stars

Uiautomator2

tanbro/uiautomator2-mcp-server

✕BLOCK D

A MCP (Model Context Protocol) server that provides tools for controlling and interacting with Android devices using uiautomator2.

★ 506 destructivestdio

Hyperweave

inneraura/hyperweave

✕BLOCK D

Visual CLI for agents. Deterministic SVG diagrams, tables, and charts with embedded structured metadata. Zero JavaScript. Renders anywhere markdown does.

★ 481 writestdio

Blockscout

blockscout/mcp-server

✕BLOCK D

Wraps Blockscout APIs and exposes blockchain data by Model Context Protocol

★ 46Not listed in sourcestreamable-http

KuzuMem

jakedismo/kuzumem-mcp

✕BLOCK D

KuzuDB-powered memory bank for code agents built with TypeScript and follows MCP protocol

★ 245 writestdio

vastlint

aleksUIX/vastlint

✕BLOCK D

IAB VAST, VMAP, and DAAST validator. Hosted MCP at https://vastlint.org/mcp (auth none).

★ 19Not listed in sourcesse

mcp-google-multi

bakissation/mcp-google-multi

!CAUTION D

Multi-account Google MCP server for Claude Code: Gmail, Drive, Calendar, Sheets, Docs, Contacts, Search Console, and more. ~871 tools with OAuth2 multi-account switching.

★ 1527 destructivestdio

container-manager-mcp

Knuckles-Team/container-manager-mcp

✕BLOCK D

Manage containers on docker, podman, compose, and docker swarm through an MCP Server for Agentic AI

★ 62 readsse

biz.dfch.SpecMgr

dfch/biz.dfch.SpecMgr

✕BLOCK D

An ISO 29148 based artifact manager for system specifications.

★ 22 destructivesse

mcp-framework

QuantGeekDev/mcp-framework

!CAUTION D

The Typescript MCP Framework

★ 93013 readsse

Mcp Framework

quantgeekdev/mcp-framework

!CAUTION D

The Typescript MCP Framework

★ 92913 readsse

SwarmClaw

swarmclawai/swarmclaw

✕BLOCK D

Open-source self-hosted AI agent runtime and multi-agent framework for autonomous agent swarms. Agent memory, MCP tools, schedules, delegation, and 23+ LLM providers (Claude, GPT, Gemini, OpenRouter, Ollama). A practical Claude Code and LangChain alternative.

★ 6852 destructivestdio

Maverick

wshobson/maverick-mcp

✕BLOCK D

MaverickMCP - Personal Stock Analysis MCP Server

★ 678Not listed in sourcestdio

Storybook

storybookjs/addon-mcp

✕BLOCK D

🤖

★ 2701 destructivestreamable-http

Funnel

chris-schra/mcp-funnel

✕BLOCK D

Finally, a proxy that does what grep does for logs - filters out the noise. Stop carrying 70k tokens of tools you'll never use. It's like tree-shaking, but for MCP. 🚀

★ 1577 writestdio

KiCad Pro

oaslananka/kicad-mcp-pro

!CAUTION D

MCP server for KiCad, connecting AI agents to schematic and PCB workflows, ERC/DRC validation, DFM checks, BOM analysis, and manufacturing preparation—with controlled edits and human-gated release workflows.

★ 1198 destructivesse

Slack

ubie-oss/slack-mcp-server

✕BLOCK D

A Slack MCP server

★ 1102 writestdio

Inkscape

sandraschi/inkscape-mcp

✕BLOCK D

Headless Inkscape SVG automation via FastMCP — 60+ ops: create, boolean, LPE, export, text, fleet pipeline. Batch without GUI tour. For Cursor / Claude Desktop. Webapp + Tauri.

★ 83Not listed in sourcesse

Kirby

bnomei/kirby-mcp

✕BLOCK D

CLI-first MCP server for composer-based Kirby CMS projects — inspect blueprints/templates/plugins, interact with a real Kirby runtime, and use a bundled Kirby knowledge base.

★ 621 destructivestreamable-http

WEBGhosting

yranjan06/webghosting-mcp

✕BLOCK D

Intelligent stealth browser MCP server for AI agents with 30 tools, 22 anti fingerprint scripts, and LLM powered extraction. Works seamlessly with Cursor, Claude, VS Code, and any OpenAI compatible LLM.

★ 323 readsse

thelastsaas

mkly/thelastsaas

!CAUTION D

An open-source MCP server, API, and CLI for records, files, permissions, and reminders. Single binary, self-hosted.

★ 68 destructivestreamable-http

Marlo

KarthikSubramanian07/Marlo

✕BLOCK D

Fixes accessibility violations and proves it. Multi-engine WCAG detection routed by measured accuracy, verified minimal-diff repairs, and a published error rate.

★ 24 readstreamable-http

ESP32 NAT Router

martin-ger/esp32_nat_router

✕BLOCK D

An AI-enabled NAT Router/Firewall for the ESP32

★ 2,1686 destructivestdio

Cloudflare

cloudflare/mcp

✕BLOCK D

MCP server for the Cloudflare API

★ 8911 writestreamable-http

FreeCAD Robust

spkane/freecad-addon-robust-mcp-server

✕BLOCK D

The FreeCAD Robust MCP server and MCP Bridge Workbench/Addon

★ 2477 destructivestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.