MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/69

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,633–1,656 of 2,120 · ranked by trust score, then stars

Lorekit

mthines/lorekit

✕BLOCK F

Free, open source, local & remote, persistent memory for your AI coding agents.

★ 185 destructivestreamable-http

Inference Gateway CLI

inference-gateway/cli

✕BLOCK F

A Git-first CLI coding agent that turns ideas, issues, and tasks into real code changes. It can run remotely from your mobile phone or automate your computer.

★ 78 readstreamable-http

ai-nexus

mosesy5688-cell/ai-nexus

✕BLOCK F

Structured AI-entity discovery, evidence, and identity layer for agents.

★ 111 readstreamable-http

Finance Toolkit

jerbouma/financetoolkit

✕BLOCK F

Transparent and Efficient Financial Analysis

★ 5,361Not listed in sourcestdio

Docs

arabold/docs-mcp-server

✕BLOCK F

Grounded Docs MCP Server: Open-Source Alternative to Context7, Nia, and Ref.Tools

★ 1,7561 destructivesse

MongoDB

mongodb-js/mongodb-mcp-server

✕BLOCK F

A Model Context Protocol server to connect to MongoDB databases and MongoDB Atlas Clusters.

★ 1,1374 destructivestdio

AgentChat

shy2593666979/agentchat

✕BLOCK F

AgentChat 是一个基于 LLM 的智能体交流平台,内置默认 Agent 并支持用户自定义 Agent。通过多轮对话和任务协作,Agent 可以理解并协助完成复杂任务。项目集成 LangChain、Function Call、MCP 协议、RAG、Memory、HITL、Skill、Milvus 和 ElasticSearch 等技术,实现高效的知识检索与工具调用,使用 FastAPI 构建高性能后端服务。

★ 9022 readstdio

DB

freepeak/db-mcp-server

✕BLOCK F

A powerful multi-database server implementing the Model Context Protocol (MCP) to provide AI assistants with structured access to databases.

★ 4312 writestreamable-http

Context-Engine

context-engine-ai/context-engine

✕BLOCK F

Context-Engine MCP - Agentic Context Compression Suite

★ 4021 destructivesse

Synapse AI

synapseorch-ai/synapse-ai

✕BLOCK F

Build AI agents that actually do things. Synapse is an open-source platform for creating, connecting, and orchestrating AI agents powered by any LLM — local, cloud or CLIs.

★ 3271 destructivestdio

dsh-config-manager

xiajiajun516/dsh-config-manager

✕BLOCK F

DeepSeek Harness (DSH) backup & restore plugin — export, import, migrate and sync your complete DSH configuration, plugins, MCP servers, skills and workspace. One-click migration to another machine.

★ 1842 writestreamable-http

Ultimate

dicklesworthstone/ultimate_mcp_server

✕BLOCK F

Comprehensive MCP server exposing dozens of capabilities to AI agents: multi-provider LLM delegation, browser automation, document processing, vector ops, and cognitive memory systems

★ 1611 writesse

Nitan

nitansde/nitan-mcp

✕BLOCK F

MCP client and Skill for US Card Forum

★ 1231 writestdio

Codebase

anrgct/autodev-codebase

✕BLOCK F

A vector embedding-based code semantic search tool with MCP server and multi-model integration. Can be used as a pure CLI tool. Supports Ollama for fully local embedding and reranking, enabling complete offline operation and privacy protection for your code repository

★ 1221 writesse

Apple RAG

bingowon/apple-rag-mcp

✕BLOCK F

MCP server providing AI agents with instant access to Apple developer documentation via RAG

★ 120Not listed in sourcestreamable-http

Agent Mako

drhalto/agentmako

✕BLOCK F

Local-first MCP server that gives coding agents structured context packets, code/schema facts, and diagnostics - backed by a local SQLite store.

★ 542 destructivestdio

Dbmcp

haymon-ai/dbmcp

✕BLOCK F

Database MCP server for MySQL, MariaDB, PostgreSQL, and SQLite - with builtin PII redaction and write-prevention

★ 32Not listed in sourcestdio

note.com MCP Server

shimayuz/note-com-mcp

✕BLOCK F

note.com用MCPサーバー(移行済)

★ 301 destructivestdio

Speclock

sgroy10/speclock

✕BLOCK F

Action guardrails for AI coding agents — native Claude Code enforcement, MCP integrations, and Git/CI checks.

★ 252 destructivestdio

DuckDB MCP Native

theseedship/duckdb_mcp_node

✕BLOCK F
★ 41 destructivestdio

log10x-mcp

log-10x/log10x-mcp

✕BLOCK F

Log10x MCP Server — per-pattern log cost attribution for AI assistants (Claude, Cursor, Claude Desktop)

★ 11 destructivestdio

triumvirate

michaeljboscia/triumvirate

!CAUTION F

Five AI agents. One coordination layer. No relay server. Plus a trust layer that checks whether the review actually happened.

★ 116 readstreamable-http

tool-control-plane

Abhishek-chohan/tool-control-plane

✕BLOCK F

The unglamorous half of agent tooling: a gRPC control plane for sessions, machines, fenced writes, and capability-scoped keys. HTTP and MCP gateways; Python, TypeScript, and Go SDKs.

★ 07 readstdio

GitLab

zereight/gitlab-mcp

!CAUTION F

First gitlab mcp for you, building together

★ 1,99835 destructivesse

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.