MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/67

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,585–1,608 of 2,120 · ranked by trust score, then stars

upilot

codingriver/upilot

!CAUTION F

upilot Unity Editor automation bridge for AI agents and MCP clients

★ 010 destructivestdio

ms-365-mcp-server

Softeria/ms-365-mcp-server

✕BLOCK F

A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Microsoft Office services through the Graph API

★ 1,0311 destructivestdio

Neon

neondatabase-labs/mcp-server-neon

!CAUTION F

MCP server for interacting with Neon Management API and databases

★ 649Not listed in sourcestreamable-http

Stata

hanlulong/stata-mcp

✕BLOCK F

Stata MCP Extension for VS Code, Cursor, and Antigravity IDE

★ 5001 writestreamable-http

db-mcp-server

FreePeak/db-mcp-server

✕BLOCK F

A powerful multi-database server implementing the Model Context Protocol (MCP) to provide AI assistants with structured access to databases.

★ 4612 writestreamable-http

Prism

dcostenco/prism-mcp

✕BLOCK F

Persistent session memory for AI coding agents — local-first, with on-device inference, associative recall, and drift detection. Works with Claude Code, Cursor, and Codex.

★ 1573 destructivesse

Prism Coder

dcostenco/prism-coder

✕BLOCK F

Persistent session memory for AI coding agents — local-first, with on-device inference, associative recall, and drift detection. Works with Claude Code, Cursor, and Codex.

★ 1573 destructivesse

Databricks AI Bridge library

databricks/databricks-ai-bridge

!CAUTION F
★ 1122 writestreamable-http

Odoo Claude

rosenvladimirov/odoo-claude-mcp

✕BLOCK F

Self-hosted MCP server connecting Claude to Odoo 15→19 — 197+ tools, multi-tenant, Bulgaria l10n

★ 5118 destructivestdio

Rootly

rootly-ai-labs/rootly-mcp-server

✕BLOCK F

Rootly MCP server

★ 45Not listed in sourcesse

Engram Memory

engrammemory/engram-memory-community

✕BLOCK F

The highest-scoring AI memory system ever benchmarked that isn't reliant on LLM reranking. And it's free & burns less tokens.

★ 361 destructivestdio

Engram Memory

engrammemory/engram-memory

✕BLOCK F

The highest-scoring AI memory system ever benchmarked that isn't reliant on LLM reranking. And it's free & burns less tokens.

★ 361 destructivestdio

pi-code

ilovepixelart/pi-code

✕BLOCK F

Claude Code experience for the pi coding agent: reads your .claude config (rules, commands, skills, hooks, output styles, MCP, agents) and adds todo, checkpoints, memory, web search, and subagents.

★ 342 writestdio

Carabiner

lvcabral/carabiner

✕BLOCK F

Simple Screen Capture and Remote Control App for Streaming Devices

★ 301 destructivesse

MCP-CAN

farzadnadiri/MCP-CAN

✕BLOCK F

Talk to Your Car Using AI

★ 202 destructivestreamable-http

mnemo

n24q02m/mnemo

✕BLOCK F

Persistent AI memory with hybrid search and embedded sync. Open, free, unlimited.

★ 12Not listed in sourcestreamable-http

agenda-intelligence-md

vassiliylakhonin/agenda-intelligence-md

✕BLOCK F

Deterministic evidence-packet checks for AI-generated claims: references, quotes, numbers, and support gaps. CLI, Python, MCP, and review adapters.

★ 817 readstdio

dead-letter

BigCactusLabs/dead-letter

✕BLOCK F

Convert .eml email exports to Markdown with YAML front matter

★ 85 readstdio

xgen-dex-cli

PlateerLab/xgen-dex-core

✕BLOCK F

XGEN Dex — 데스크톱 · CLI · VSCode 확장이 하나의 코어를 공유하는 저장소

★ 210 readstdio

Devframe

devframes/devframe

✕BLOCK F

Framework-neutral foundation for building generic DevTools.

★ 6481 writestdio

Frappe Assistant Core

buildswithpaul/frappe_assistant_core

✕BLOCK F

Infrastructure that connects LLMs to ERPNext. Frappe Assistant Core works with the Model Context Protocol (MCP) to expose ERPNext functionality to any compatible Language Model

★ 3171 destructivestreamable-http

Safari

achiya-automation/safari-mcp

✕BLOCK F

Native Safari browser automation for AI agents. 98 tools via AppleScript — zero overhead, keeps logins, runs silently in background. Drop-in alternative to Chrome DevTools MCP with 40-60% less CPU/heat on Apple Silicon.

★ 2108 destructivestdio

safari-mcp

achiya-automation/safari-mcp

✕BLOCK F

Native Safari browser automation for AI agents. 98 tools via AppleScript — zero overhead, keeps logins, runs silently in background. Drop-in alternative to Chrome DevTools MCP with 40-60% less CPU/heat on Apple Silicon.

★ 2108 destructivestdio

Russian Marketplace Data

vladimir-human/ru-marketplace-mcp

✕BLOCK F

Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.

★ 1361 readstdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.