MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/64

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,513–1,536 of 2,120 · ranked by trust score, then stars

open-task-relay-public

lanekingsbery/open-task-relay-public

!CAUTION D

Open-source task commons where AI agents do bounded public-good work, publish evidence, and review results.

★ 02 writestreamable-http

Blockbench

jasonjgardner/blockbench-mcp-plugin

✕BLOCK D

Adds MCP server to Blockbench

★ 4761 destructivestdio

Doris

apache/doris-mcp-server

✕BLOCK D

Apache Doris MCP Server

★ 3481 writestdio

AWR

originoneai/awr

✕BLOCK D

Persistent work state and minimal context for long-running AI agents.

★ 1423 writestreamable-http

schemagate

ashishsinha1602/schemagate

✕BLOCK D

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

★ 102Not listed in sourcestdio

dynoxide

nubo-db/dynoxide

✕BLOCK D

A DynamoDB emulator in Rust, backed by SQLite. Starts in milliseconds as a single static binary, and is verified against real AWS by a public conformance suite. Runs as an HTTP server, an MCP server for coding agents, an embeddable library, or in the browser via WebAssembly.

★ 100Not listed in sourcestdio

Transloadit Node.js SDK

transloadit/node-sdk

!CAUTION D

Transloadit's official Node.js SDK

★ 731 readstdio

W&B

wandb/wandb-mcp-server

✕BLOCK D

The official implementation of the W&B Models and Weave MCP server.

★ 704 writestdio

OmniMesh Gateway

omnimesh-labs/omnimesh-gateway

✕BLOCK D

Model Context Protocol (MCP) Gateway & Registry - Central hub for managing tools, resources, and prompts for MCP-compatible LLMs. Translates REST APIs into MCP, builds virtual MCP servers with security and observability, and bridges multiple transports (stdio, SSE, streamable HTTP).

★ 419 readstreamable-http

Qdrant

mhalder/qdrant-mcp-server

!CAUTION D

MCP server for semantic search using local Qdrant vector database and OpenAI embeddings

★ 364 destructivestdio

Carrot AI PM

talvinder/carrot-ai-pm

✕BLOCK D

Carrot auto-writes specs and catches AI code drift. MCP server for Cursor that AST-validates every commit.

★ 292 destructivestdio

yorishiro-proxy

usk6666/yorishiro-proxy

✕BLOCK D

AI-native MITM proxy — MCP server for traffic interception, recording & replay

★ 171 writestreamable-http

MCPg

devopam/MCPg

!CAUTION D

Postgres MCP Server

★ 131 readstdio

expense

assaf/expense

✕BLOCK D

Forward a receipt to your inbox and it's filed automatically.

★ 62 writestreamable-http

mcp-server

pipeshub-ai/mcp-server

✕BLOCK D

This repository contains the packages that make up Pipeshub’s local MCP server

★ 61 writesse

dibs

Agenxy/dibs

✕BLOCK D

Keeps your agents in the loop about each other. See what the fleet is doing, then message, sync and send files between agents. Dibs reports; it never acts.

★ 221 readstreamable-http

中文

Akira-TL/forgerelay

✕BLOCK D

Local development control plane for MCP coding agents.

★ 11 destructivestdio

agentic-coding-harness

sblattj/agentic-coding-harness

✕BLOCK D

Run, watch, and meter Claude Code, Codex CLI, Gemini CLI, OpenCode, and Kiro from one CLI. Normalized events, cache-aware token usage, cost accounting verified against each agent's own records, budget caps, OpenTelemetry gen_ai spans, Langfuse traces, and a live web dashboard + MCP server.

★ 16 writestreamable-http

claude-session-relay

dimitrihilverda/claude-session-relay

✕BLOCK D

Let Claude Code sessions on different machines share a board, message each other and avoid colliding git pushes. Teams, private sessions, and an MCP connector for claude.ai and Cowork.

★ 0Not listed in sourcestreamable-http

MCP TypeScript SDK

modelcontextprotocol/typescript-sdk

!CAUTION D

The official TypeScript SDK for Model Context Protocol servers and clients

★ 13,5618 destructivesse

Reverse Engineer Anything

morluto/rea

✕BLOCK D

Reverse engineer anything with agents, from app behavior down to native binaries.

★ 8,4701 writestdio

excel-mcp-server

haris-musa/excel-mcp-server

✕BLOCK D

A Model Context Protocol server for Excel file manipulation

★ 4,215Not listed in sourcestdio

MCP Scan

invariantlabs-ai/mcp-scan

✕BLOCK D

Security scanner for AI agents, MCP servers and agent skills.

★ 3,0801 destructivestdio

QueryWeaver

falkordb/queryweaver

✕BLOCK D

An open-source Text2SQL tool that transforms natural language into SQL using graph-powered schema understanding. Ask your database questions in plain English, QueryWeaver handles the weaving.

★ 1,080Not listed in sourcestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.