MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/71

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,681–1,704 of 2,120 · ranked by trust score, then stars

Local Coding Agent

longngn204/local-coding-agent

✕BLOCK F

Local MCP coding agent for ChatGPT Web: run files/commands on your own machine via the OpenAI Secure Tunnel, with a Windows tray app and metrics dashboard.

★ 562 writestreamable-http

Aiquila

elgorro/aiquila

✕BLOCK F

Private AI for your Nextcloud — an MCP server (316 tools), a native Nextcloud app with chat and Coworkers, and one-command Hetzner deployment.

★ 382 readstdio

clawops

dfridkin/clawops

✕BLOCK F

Deploy and operate self-hosted OpenClaw on AWS, GCP, Azure or your own VM, from the command line or from your agent. A CLI and an MCP server over one implementation, with reviewable deploy plans, day-two operations, hardening, and private Tailscale networking.

★ 65 destructivestdio

coinrithm-agent-trading

CoinRithm/coinrithm-agent-trading

✕BLOCK F

Let any AI agent (Claude, ChatGPT/Codex, Gemini) paper-trade on CoinRithm with a key you mint and control. Hosted MCP, local MCP, OpenAPI, skill + prompts.

★ 44 writestdio

dchub-mcp-server

azmartone67/dchub-mcp-server

✕BLOCK F

DCPI (Data Center Power Index): a daily score of where data centers can get grid power, across 300+ markets. Live power-grid, energy, queue, fiber, gas & M&A data for AI agents: 94 tools, global facility map, 1,700+ tracked M&A deals. Capacity to buy or lease via source_capacity. Remote MCP at dchub

★ 31 writestreamable-http

MaskShift

nafeeur/MaskShift

✕BLOCK F

Maximalist harness

★ 213 destructivestreamable-http

Glaux

cetusk/Glaux

✕BLOCK F

A Lightweight DAW for Making Music with AI

★ 133 readstreamable-http

skillhook

MeterApp/skillhook

✕BLOCK F

Webhook in, agent out. Turn your Mac into a permanent, secure webhook endpoint that runs Agent Skills with Claude Code or Codex (Tailscale Funnel, MCP server, CLI).

★ 11 destructivestreamable-http

serverkit

gusnips/serverkit

✕BLOCK F

The shared base of a TypeScript backend on Postgres: plain SQL migrations first.

★ 01 writestreamable-http

CareLoop-AI

workatustadarshajay/CareLoop-AI

✕BLOCK F

The foundation flow accepts a doctor's note, uses a Gemini tool-calling agent to save each actionable item as a card in Postgres, and displays all saved cards in the frontend.

★ 06 readstreamable-http

MCP Agent

lastmile-ai/mcp-agent

✕BLOCK F

Build effective agents using Model Context Protocol and simple workflow patterns

★ 8,5496 writesse

GitLab MCP Server

zereight/gitlab-mcp

!CAUTION F

First gitlab mcp for you, building together

★ 2,03437 destructivesse

Terravision

patrickchugh/terravision

✕BLOCK F

Professional cloud architecture diagrams with official AWS, Azure and GCP icons, from Terraform code or a plain JSON graph. MCP server + agent skill.

★ 1,6392 readsse

elementor-mcp

msrbuilds/elementor-mcp

✕BLOCK F

WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.

★ 7332 readstreamable-http

Nextcloud

cbcoutinho/nextcloud-mcp-server

!CAUTION F

Nextcloud MCP Server

★ 3732 writestdio

WeftCut

WeftCut/WeftCut

✕BLOCK F

Free, open-source AI video editor for macOS, Windows and Linux — drive the whole timeline from any MCP client.

★ 1852 writestdio

Lilbee

tobocop2/lilbee

✕BLOCK F

The whole local AI stack in one executable: it runs and manages local AI models across every GPU, and it's a search engine you can talk to, with cited answers from your files, code, and the web. MCP server for coding agents, web crawler, TUI, CLI, REST API, Python library. No Ollama or LM Studio nee

★ 636 readstreamable-http

Knowledge Base

jeanibarz/knowledge-base-mcp-server

✕BLOCK F

This MCP server provides tools for listing and retrieving content from different knowledge bases.

★ 5422 readsse

Herald

btouchard/herald

✕BLOCK F

The self-hosted MCP bridge between Claude Chat and Claude Code.

★ 46Not listed in sourcestreamable-http

Open Code Review

raye-deng/open-code-review

✕BLOCK F

🤖 AI code quality gate for AI-generated code. Detects hallucinated packages, phantom dependencies, stale APIs, and more. MCP Server + CLI + CI/CD Action.

★ 404 readstdio

GroundTruth-MCP

rm-rf-prod/GroundTruth-MCP

✕BLOCK F

Self-hosted MCP server for live documentation, code audits, and best practices. 793+ curated libraries, 107 audit patterns, no rate limits.

★ 633 readstdio

hronaut

hronaut/hronaut

✕BLOCK F

The browser your coding agent can come back to — visible, persistent, isolated workspaces over MCP.

★ 618 readstdio

mac-developer-bridge

Powderpuff-magneticstoragemedium586/mac-developer-bridge

✕BLOCK F

Give ChatGPT a real terminal on your Mac to run commands, edit files, manage sessions, and access Codex history.

★ 22 destructivestreamable-http

`@shield-agent/kya`

The-Pixel-Boys/shield-kya

✕BLOCK F

AI agents audit trail & traceability — gate every tool call (Allow / Review / Deny), live activity dashboard, and continuous trust-baseline certification.

★ 11 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.