MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/66

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,561–1,584 of 2,120 · ranked by trust score, then stars

1xn AI Workflow Composer

1xn-labs/1xn-vmcp

✕BLOCK F

vMCP - Virtual Model Context Protocol

★ 5111 writestdio

Congress

amurshak/congressmcp

!CAUTION F

An MCP server allowing AI agents and MCP clients to interface with the Congress.gov API

★ 3324 readstreamable-http

Sourced

ryancodrai/sourced

✕BLOCK F

Maps packages to source code. Allows coding agents to search any dependency with grep.

★ 321 writestreamable-http

Gnosis

nicholasglazer/gnosis-mcp

✕BLOCK F

Zero-config MCP server for searchable documentation (SQLite default, PostgreSQL optional)

★ 291 destructivestdio

desktop-touch-mcp

Harusame64/desktop-touch-mcp

✕BLOCK F

Windows computer-use MCP server: drive any desktop app via semantic discover-then-act targeting (entities + leases, not pixel coordinates), with per-action perception guards, a native Rust UIA engine, Chrome CDP, and Key Locker credential autofill for ssh/sudo password prompts. Works with Claude, Cu

★ 221 writestdio

wordcell

hraness/wordcell

!CAUTION D

Wordcell keeps decisions, plans, and sources as Markdown beside your code, so coding agents can find them from the file they are about to change.

★ 161 destructivestreamable-http

Kontrol

B-A-M-N/Kontrol

✕BLOCK D

MCP development workspace and ACP bridge for controlled, observable collaboration between web AI interfaces and CLI coding agents.

★ 01 destructivestdio

openswissdata

cammac-creator/openswissdata

✕BLOCK F

Swiss federal reference data for AI agents: customs tariff (TARES), FINMA register and warnings list, NOGA/NACE/ISIC crosswalks. Free MCP server, no key. Signed dataset files.

★ 04 readstdio

Cloudflare

cloudflare/mcp-server-cloudflare

✕BLOCK F
★ 4,2602 writestreamable-http

Microsoft Work IQ — Plugin Marketplace

microsoft/work-iq

✕BLOCK F

MCP Server and CLI for accessing Work IQ

★ 1,031Not listed in sourcestdio

Ms 365

softeria/ms-365-mcp-server

✕BLOCK F

A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Microsoft Office services through the Graph API

★ 9971 destructivestdio

ssh-mcp

tufantunc/ssh-mcp

✕BLOCK F

MCP server exposing SSH control for Linux servers via Model Context Protocol.

★ 7993 writestdio

Lunar

thelunarcompany/lunar

✕BLOCK F

lunar.dev: Agent native MCP Gateway for governance and security

★ 5013 destructivesse

bagel

Extelligence-ai/bagel

✕BLOCK F

Query robotics, drone, and IoT data in plain English through an MCP server, with an intelligent edge data reduction pipeline that keeps only the data that matters.

★ 3971 readsse

Jules SDK

google-labs-code/jules-sdk

✕BLOCK F
★ 13812 writestdio

GitHits

githits-com/githits-cli

✕BLOCK F

CLI & MCP for GitHits - The Code Context Layer for AI Coding Agents

★ 1141 writestdio

Dubbl

dubbl-org/dubbl

✕BLOCK F

A full-featured, open-source alternative to Xero and QuickBooks. It is API-first, developer-friendly, and built for teams that want full control over their financial data.

★ 5227 destructivestreamable-http

Pipefy Toolkit

pipefy/ai-toolkit

✕BLOCK F

MCP server, CLI, and agent skills for Pipefy.

★ 491 destructivestdio

TAM

gvaibhav/tam-mcp-server

✕BLOCK F

A comprehensive Model Context Protocol (MCP) server for market sizing analysis, TAM/SAM calculations, and industry research. Built with TypeScript, Express.js, and following the MCP specification.

★ 3668 readsse

skgate

helv-io/skgate

✕BLOCK F

Any MCP server. Anywhere. An OAuth-protected MCP gateway that can also run the servers, plus SI provider proxying with model aliases, and your Grok subscription as an OpenAI-compatible API with no API key.

★ 91 readstreamable-http

page-agent-sdk

whyymj/page-agent-sdk

✕BLOCK F

给网页一个会改页面的 AI 助手。一行代码挂载对话框,AI 通过工具按 schema 安全读写页面数据,实现「对话式」搭建/编辑/运维。

★ 16 destructivestreamable-http

wallet-to-social

starl3xx/wallet-to-social

!CAUTION F

walletlink.social: resolve EVM wallet addresses to the X and Farcaster accounts their owners published, and resolve a handle back to its wallets. REST API, MCP server and an x402 rail, across eight onchain networks.

★ 11 writestreamable-http

bountyapi

vncent786/bounty-api

✕BLOCK F

Agent-native API marketplace with x402 micropayments. AI agents discover via MCP, pay per call in USDC on Base.

★ 01 destructivestdio

mcp-server-traffic-inspector

atengk/mcp-server-traffic-inspector

✕BLOCK F

专为 AI Agent 打造的网络流量抓包、会话检索、底层链路诊断、请求重放与规则 Mock 全功能 MCP Server (Full-stack Network Traffic Inspector MCP Server for AI Agents)

★ 01 destructivestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.