MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/63

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,489–1,512 of 2,120 · ranked by trust score, then stars

notipo-app

kfuras/notipo-app

✕BLOCK D

Open-source WordPress publishing for writers, developers, and AI agents. MCP server, REST API, and CLI. Hosted SaaS at notipo.com.

★ 41 destructivestdio

agent-memory

Masikomoore/agent-memory

✕BLOCK D

One memory for every AI agent — self-hosted long-term memory over MCP/REST for Claude Code, Codex, Cursor, Gemini CLI, VS Code, OpenClaw, and more.

★ 33 destructivestreamable-http

EMET

dreamforgestudiollc/EMET

✕BLOCK D

EMET is an MCP memory server built for ISO 9001 / ISO 13485 document control: persistent, shared memory for AI agents and bot teams. Nothing is deleted; records are superseded, retired and retained. Controlled templates, verified writes, a word-for-word transcript tier, stdio and remote HTTP with OA

★ 14 writestdio

Changesets

maildev/maildev

✕BLOCK D

:mailbox: SMTP Server + Web Interface for viewing and testing emails during development.

★ 6,1352 destructivestdio

Google Gen AI

googleapis/python-genai

✕BLOCK D

Google Gen AI Python SDK provides an interface for developers to integrate Google's generative models into their Python applications.

★ 3,9833 writestreamable-http

Nerve

evilsocket/nerve

✕BLOCK D

The Simple Agent Development Kit.

★ 1,3166 readstdio

PlanExe

planexeorg/planexe

✕BLOCK D

Create a plan from a description in minutes

★ 401Not listed in sourcestreamable-http

Itsyconnect

nickustinov/itsyconnect-macos

✕BLOCK D

Better App Store Connect

★ 1251 writestreamable-http

OpenInvest

longsizhuo/openinvest

✕BLOCK D

Research-grade investment decision engine for AI agents: isolated multi-agent committee, auditable verdicts, backtests with lookahead protection, published negative results

★ 871 destructivestdio

Music Studio

linxule/mcp-music-studio

✕BLOCK D

Two-mode MCP music studio: scored composition (ABC notation) and live performance (Strudel). Interactive ext-apps UI with sheet music rendering, 30+ instruments, style presets, and live coding REPL.

★ 747 writestdio

Easy Notion

grey-iris/easy-notion-mcp

✕BLOCK D

Markdown-first Notion MCP server. ~6-7x fewer response tokens vs official Notion MCP. 43 tools.

★ 532 destructivestdio

NeuroStack

raphasouthall/neurostack

✕BLOCK D

Local RAG layer and optimizer for your Markdown knowledge base. CLI + MCP server: grounded answers for any AI client, stale-note detection, session harvesting into memories. Local-first.

★ 47Not listed in sourcestdio

Insforge

insforge/insforge-mcp

!CAUTION D

MCP server for InsForge BaaS — database, storage, edge functions, and deployments

★ 35Not listed in sourcesse

Kya Os Mcp

decentralized-identity/kya-os-mcp

✕BLOCK D

KYA-OS MCP protocol reference implementation — delegation, proof generation, session lifecycle, and cryptographic identity for the Model Context Protocol

★ 311 destructivesse

Deepseek Mcp Server

arikusi/deepseek-mcp-server

✕BLOCK D

MCP server for DeepSeek V4 (v4-flash, v4-pro, 1M context): chat, reasoning, function calling, thinking mode, cost tracking. deepseek-chat/reasoner aliases supported.

★ 214 readstdio

codegraph

lzehrung/codegraph

✕BLOCK D

CLI, MCP and TS library that turns source code into a map of files, symbols, references, and dependencies using tree-sitter.

★ 83 writestdio

agentigris-agentfund

agentigris/agentfund

✕BLOCK D

Fundraising infrastructure for AI agents on Solana — x402 payments, milestone escrow, on-chain reputation. REST + WebSocket + MCP + ACP.

★ 51 writestdio

trac-mcp-server

nerpatech/trac-mcp-server

✕BLOCK D

A MCP (Model Context Protocol) server that provides AI assistants with tools to interact with Trac project management instances — managing tickets, wiki pages, and milestones

★ 44 destructivesse

MapSmith

mapsmith-ai/MapSmith

✕BLOCK D

Professional-grade GIS geoprocessing over MCP, with a verifiable provenance manifest on every output

★ 26 writestdio

mcp-core

n24q02m/mcp-core

!CAUTION D

Shared foundation for building MCP servers -- Streamable HTTP transport, OAuth 2.1, browser-based credential setup, and a shared embedding daemon.

★ 12 readstreamable-http

noted

fabriziosalmi/noted

✕BLOCK D

Desktop app for taking notes in Markdown/HTML, with built-in AI, note links (wikilinks), global search, local history, and Git integration

★ 13 readsse

rzlco666-sql-rust

rzlco666/mcp-sql-rust

✕BLOCK D

Token-efficient MCP server for MySQL, PostgreSQL, and SQLite

★ 1Not listed in sourcestdio

Jentrix open client

jentrix-au/jentrix

✕BLOCK D

Jentrix open client: the CLI and the official Claude Code and Codex plugins

★ 02 readstreamable-http

omneum

cole-h06/omneum

✕BLOCK D

An open-source context evaluator for AI agents.

★ 04 readstdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.