MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/70

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,657–1,680 of 2,120 · ranked by trust score, then stars

Vet

safedep/vet

✕BLOCK F

Protect against malicious open source packages 🤖

★ 1,107Not listed in sourcestdio

ThinkWatch

thinkwatchproject/thinkwatch

✕BLOCK F

Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthropic, Gemini, and self-hosted LLMs.

★ 8142 readstreamable-http

Context

neuledge/context

✕BLOCK F

Local-first documentation for AI agents

★ 4173 readstdio

Shodh-Memory

varun29ankus/shodh-memory

✕BLOCK F

Local, LLM-free memory for AI agents. A single offline Rust binary — deterministic and auditable — that learns from use, forgets the irrelevant, and strengthens what matters. No cloud, no API keys.

★ 3018 destructivestdio

Story UI

southleft/story-ui

✕BLOCK F

AI-powered Storybook story generator — works with any framework, any design system, any LLM provider

★ 2341 destructivesse

Context Lattice

sheawinkler/contextlattice

✕BLOCK F

The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.

★ 1531 readstreamable-http

Linear Streamable

iceener/linear-streamable-mcp-server

✕BLOCK F

MCP Server for interacting with Linear API. Written in TypeScript, Node and Hono.dev

★ 711 readstreamable-http

Netlify Examples

netlify/examples

✕BLOCK F

A collection of examples and demonstrations to help people building the web with Netlify

★ 671 writestreamable-http

Globalping

jsdelivr/globalping-mcp-server

✕BLOCK F

Remote MCP server that gives LLMs access to run network commands

★ 6411 readsse

Talkito

robdmac/talkito

✕BLOCK F

TalkiTo lets developers interact with AI systems through speech across multiple channels (terminal, API, phone). It can be used as both a command-line tool and a Python library.

★ 5415 writesse

Dense-Mem

markhuangai/dense-mem

!CAUTION F

Self-hosted AI agent memory server with MCP, evidence provenance, typed claims, conflict detection, embeddings, recall, PostgreSQL, and pgvector

★ 396 readstreamable-http

Slack

jtalk22/slack-mcp-server

✕BLOCK F

Put your agent inside your Slack. Zero bots, zero admin queues, no Business+ upgrade — 20+ tools for stealth search, thread parsing and mention tracking. Every message attributed. Your session never leaves your Mac.

★ 312 destructivestdio

agentdeals

robhunter/agentdeals

!CAUTION F

Catalogue of developer infrastructure free tiers, startup credits and pricing, with side-by-side vendor comparisons for hosting, databases and AI APIs. Website, JSON API and MCP server, read by coding agents choosing a stack.

★ 2212 readstdio

0xray

0xRayAI/xray

✕BLOCK F

Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw

★ 23 destructivestdio

nanohype

nanohype/nanohype

✕BLOCK F

Template catalog and SDK for AI subsystems — agents, RAG, MCP servers, eval harnesses, infrastructure. Part of the nanohype ecosystem.

★ 21 writestdio

@somewhere-tech/cli

Somewhere-Tech/somewhere-cli

✕BLOCK F

Official CLI for the somewhere.tech platform

★ 11 destructivestdio

typesafe-mcp

MarkChu-git/typesafe-mcp

✕BLOCK F

MCP server for TypeSafe AI's Jev: typed yes/no, choice and score answers with act / review / abstain gating.

★ 15 readstreamable-http

wp-ops

imagewize/wp-ops

✕BLOCK F

CLI and MCP server for WordPress operations — Trellis/Bedrock deployments, backups, security scanning, and monitoring — plus the scripts and guides they wrap

★ 19 writestdio

apitame

albert-canfield/apitame

✕BLOCK F

Turn any OpenAPI spec or SQL database into a safe MCP server plus agent skills. One command.

★ 01 destructivestdio

axiom

dragoscv/axiom

!CAUTION F

The transactional write gate for coding agents: Plan -> canonical Manifest -> set-level checks -> hash-gated two-phase apply. MCP server, CLI, PreToolUse hook, GitHub Action.

★ 06 writestdio

robopartpicker

brainbook0/robopartpicker

✕BLOCK F

Open robotics project discovery, bill-of-materials compilation and parts sourcing. Source-linked, evidence-first, live at robopartpicker.com.

★ 018 readstreamable-http

PromptX

deepractice/promptx

✕BLOCK F

PromptX · 领先的AI 智能体上下文平台 | PromptX · Leading AI Agent Context Platform

★ 3,6881 destructivestdio

Reactuse

childrentime/reactuse

✕BLOCK F

115+ production-ready React Hooks for sensors, UI, state & browser APIs. Tree-shakable, SSR-safe, TypeScript-first. Used by Shopee, PDD & Ctrip. Inspired by VueUse.

★ 1,0613 readstdio

lnwjud

engasnm111/lnwjud

✕BLOCK F

lnwjud — local AI-agent runtime & MCP gateway

★ 1982 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.