MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/65

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,537–1,560 of 2,120 · ranked by trust score, then stars

Mengram

alibaizhanov/mengram

✕BLOCK D

Human-like memory for AI agents — semantic, episodic & procedural. Experience-driven procedures that learn from failures. Free API, Python & JS SDKs, LangChain, CrewAI & OpenClaw integrations.

★ 2042 destructivestdio

Pgconsole

pgplex/pgconsole

✕BLOCK D

Minimal Postgres editor for speed, collaboration, and AI

★ 1552 destructivestreamable-http

mcp-zap-server

dtkmn/mcp-zap-server

!CAUTION D

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

★ 67Not listed in sourcestreamable-http

SAS

sassoftware/sas-mcp-server

✕BLOCK D

A self-hosted Model Context Protocol (MCP) server that connects to your SAS Viya environment and provides tools across the analytics lifecycle.

★ 649 destructivestdio

Accessibility Scanner

justasmonkev/mcp-accessibility-scanner

✕BLOCK D

An MCP (Model Context Protocol) server for performing accessibility audits on webpages using axe-core.

★ 572 destructivestdio

mcp-accessibility-scanner

JustasMonkev/mcp-accessibility-scanner

✕BLOCK D

An MCP (Model Context Protocol) server for performing accessibility audits on webpages using axe-core.

★ 572 destructivestdio

ChatSpatial

cafferychen777/chatspatial

✕BLOCK D

MCP server for spatial transcriptomics analysis through natural language interfaces.

★ 44Not listed in sourcesse

Keryx

actionhero/keryx

!CAUTION D

Keryx: The Fullstack TypeScript Framework for MCP and APIs

★ 354 readstreamable-http

Airtable Formula

automations-project/vscode-airtable-formula

✕BLOCK D

VS Code extension and MCP server for Airtable, formula editor, schema tools, and 60+ automation utilities for bases, views, and fields.

★ 319 destructivestdio

memtomem-stm

memtomem/memtomem-stm

✕BLOCK D

Short-term memory proxy gateway with proactive memory surfacing for AI agents

★ 514 readsse

rustmistmcp

mechubsec/rustmistmcp

✕BLOCK D

Async Rust MCP server for the HPE Juniper Mist cloud — bearer-token auth, org/site-scoped tools, bounded responses, guarded WAN-edge change control

★ 1Not listed in sourcestdio

assetfare-mcp

assetfare/assetfare-mcp

✕BLOCK D

USDC bridge API for AI agents and agent-wallet funding: Solana to Base + 76 routes; validated provider paths; exact 1bp; server never signs/submits.

★ 02 writestdio

vetagent

jakegu1/vetagent

✕BLOCK D

VetAgent — token risk intelligence MCP for AI agents. Cloudflare Worker deployment. Assess token risk (liquidity/honeypot/rug) and return actionable low/medium/high verdict. Remote MCP at https://vetagent.dev/mcp.

★ 01 readstreamable-http

OmniGet

tonhowtf/omniget

✕BLOCK D

Udemy & Hotmart course downloader, YouTube downloader (yt-dlp GUI, 1,800+ sites) + desktop app for AI agents: Claude Code, Codex, Gemini CLI, Ollama. Permissions, undo, jobs, loops until tests pass, MCP server, 156 tools, course player. Free and open source for Windows, macOS and Linux. No terminal.

★ 13,9581 destructivestdio

Grafana

grafana/mcp-grafana

!CAUTION D

MCP server for Grafana

★ 3,479Not listed in sourcestdio

Stripe Agent Toolkit

stripe/agent-toolkit

!CAUTION F

One-stop shop for building AI-powered products and businesses with Stripe.

★ 1,8331 writestdio

xmcp

basementstudio/xmcp

✕BLOCK D

The TypeScript MCP framework

★ 1,3373 writestreamable-http

premiere-pro-mcp

leancoderkavy/premiere-pro-mcp

✕BLOCK D

Adobe Premiere Pro MCP — independent, local-first server for supported workflows. Connect Claude, Codex, or Cursor through a local CEP bridge.

★ 3252 writestdio

aicode-toolkit

AgiFlow/aicode-toolkit

✕BLOCK D

Toolkit for Coding Agents to work reliably with repo of any size.

★ 1622 writesse

AI Code Toolkit

agiflow/aicode-toolkit

✕BLOCK D

Toolkit for Coding Agents to work reliably with repo of any size.

★ 1612 writesse

Universal Tool Calling Protocol (UTCP) for TypeScript

universal-tool-calling-protocol/typescript-utcp

✕BLOCK F

Official typescript implementation of UTCP. UTCP is an open standard that lets AI agents call any API directly, without extra middleware.

★ 1193 writestdio

Predictive Maintenance

lgdimaggio/predictive-maintenance-mcp

✕BLOCK D

MCP server for predictive maintenance and machinery fault diagnosis. Gives AI assistants evidence-based vibration analysis - FFT, envelope, bearing fault detection, ISO 20816-3 severity - with a measured, blind CWRU benchmark. Local-first: raw signals never leave your machine. Includes a Claude Code

★ 98Not listed in sourcesse

Amazon Ads

kuudoai/amazon_ads_mcp

!CAUTION D

Amazon Ads MCP - Model Context Protocol server for Amazon Advertising API

★ 721 destructivestreamable-http

Ctxo

alperhankendi/ctxo

✕BLOCK F

MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and change health in a single call. Works with any language deep analysis for TypeScript,Java, Go, and C#.

★ 6914 readstdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.