MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/68

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,609–1,632 of 2,120 · ranked by trust score, then stars

ru-marketplace-mcp

Vladimir-Human/ru-marketplace-mcp

✕BLOCK F

Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.

★ 1321 readstdio

Discord

cappyeo/discord-mcp

✕BLOCK F

Open-source Discord MCP server for Claude, Codex, Cursor and other AI clients: 209 typed tools, caller-owned bots, safety controls and verifiable guild builds.

★ 1229 writestdio

Metabase AI Assistant

enessari/metabase-ai-assistant

✕BLOCK F

The most powerful MCP Server for Metabase - 111+ tools for AI SQL generation, dashboard automation & enterprise BI. Works with Claude, Cursor, ChatGPT.

★ 4910 destructivesse

Context Engine

kirachon/context-engine

✕BLOCK F

Local-native Context Engine MCP server for codebase indexing, semantic retrieval, planning, and review workflows.

★ 483 destructivestdio

FylloCode

fioooooooo/fyllocode

✕BLOCK F

FylloCode 是一个开源桌面应用,把 Claude Code、Codex 等本地 Coding Agent 接进项目工作流。派任务、审方案、追溯每一次改动,积累下来的规范和结论,换一个 Agent 也能继承。

★ 284 writestdio

AI-Native Open-source Casino Platform Framework

blurifycom/openora

✕BLOCK F

Open-source Casino Platform Framework - AI-Native, Self-hosted, Headless, Plugin-based 🎰

★ 252 writestdio

long-run-hybrid-coach

atomchung/long-run-hybrid-coach

✕BLOCK F

Adaptive running and strength coaching for the long run — a hosted MCP server and Agent Skill that keeps one current 28-day plan in step with your Intervals.icu evidence. Independent project, not affiliated with Garmin or Intervals.icu.

★ 5Not listed in sourcestreamable-http

fluent-ui-plugin

ArasaniRohithReddy/fluent-ui-plugin

✕BLOCK F

Agents, skills and MCP tools to build and adopt Microsoft Fluent 2 (Fluent UI 2.0) across Web, native iOS/Android/Windows, Power BI and Power Platform - plus Fluent 1 (v8) support, v8-to-v9 migration and Figma. Works in Copilot CLI, VS Code, Cursor, Claude, Gemini and more.

★ 12 writestdio

opencode-workbench

simonmak-ascent/opencode-workbench

✕BLOCK F

OpenCode Workbench: a reproducible, self-documenting, recoverable OpenCode development workstation — configuration, agent skills, MCP stack, and a clone MCP server for any Linux box

★ 11 destructivestdio

WEALTH

ariffazil/WEALTH

✕BLOCK F

Capital intelligence: risk, NPV, markets. Research and evidence only. Never moves money.

★ 16 writesse

designesy-org

LE-VAI/designesy-org

!CAUTION F

Scores any URL against a 44-check design contract (A-F grade), validates DTCG tokens, and checks drift and AI readiness.

★ 018 readstdio

nethinwei-sql-gateway

nethinwei/sql-mcp-server

✕BLOCK F

Governed SQL gateway for untrusted AI agents. No arbitrary SQL. Policy-enforced, cost-bounded access to relational data.

★ 0Not listed in sourcestdio

nexus-cortex

Spitfire-Products/nexus-cortex

✕BLOCK F

A headless, multi-provider AI agent harness — embed it as a library, script it from the CLI, or run it as a stateful agent server. One orchestrator drives every major LLM provider.

★ 06 destructivestreamable-http

Open Multi Agent

open-multi-agent/open-multi-agent

✕BLOCK F

Self-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.

★ 6,9978 writestreamable-http

Deep Research

u14app/deep-research

✕BLOCK F

Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.

★ 4,6892 writesse

Synapse

naveenraj-17/synapse-ai

✕BLOCK F

Build AI agents that actually do things. Synapse is an open-source platform for creating, connecting, and orchestrating AI agents powered by any LLM — local, cloud or CLIs.

★ 3271 destructivestdio

Wazuh-MCP-Server

INFOKOM-KI/Wazuh-MCP-Server

✕BLOCK F

Wazuh MCP Server: AI-Driven SOC Automation

★ 882 destructivestdio

Disco Connectors

stackonehq/mcp-connectors

✕BLOCK F

mcp connectors for disco

★ 7418 destructivestdio

Super

dhanababum/supermcp

✕BLOCK F

🚀 SuperMCP - Create multiple isolated MCP servers using a single connector. Build powerful Model Context Protocol integrations for databases (PostgreSQL, MSSQL) with FastAPI backend, React dashboard, and token-based auth. Perfect for multi-tenant apps and AI assistants.

★ 616 destructivestreamable-http

proximo

john-broadway/proximo

✕BLOCK F

The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.

★ 522 readstdio

Enquire

oomkapwn/enquire-mcp

✕BLOCK F

The #1 Obsidian MCP for AI memory — freshness-aware, cited, local-first and read-only by default. Dataview, Bases, PDFs, every agent.

★ 345 writestdio

MRSF

wictorwilen/mrsf

✕BLOCK F

Markdown Review Sidecar Format (MRSF) v1.0 - Sidemark

★ 301 destructivesse

federal-contracting-mcps

1102tools-dev/federal-contracting-mcps

!CAUTION F

Free, open-source MCP servers for federal contracting: SAM.gov, USAspending, GSA CALC+, eCFR, Federal Register, and more. 5,571 collected regression tests. In the Claude and ChatGPT directories.

★ 231 writestdio

simplenote-mcp-server

docdyhr/simplenote-mcp-server

!CAUTION F

MCP Server for Simplenote integration with Claude Desktop

★ 192 writestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.