MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/72

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,705–1,728 of 2,120 · ranked by trust score, then stars

celeste-cli

whykusanagi/celeste-cli

✕BLOCK F

Agentic terminal AI assistant with a Bubble Tea TUI, code-graph review, semantic search, multi-provider LLMs, and MCP tools.

★ 12 readstreamable-http

collidemcp

lithometric/collidemcp

✕BLOCK F

Run multiple AI coding agents (Claude Code, Codex, Cursor) on one repo without conflicts: live awareness, write gate, briefings, one-step pushes. Free, local, MCP + hooks.

★ 1Not listed in sourcestreamable-http

mcp-servers

theluckystrike/mcp-servers

✕BLOCK F

42 local-first MCP servers for back-office work: invoices, VAT, PDFs, spreadsheets, time tracking, expenses. Free tier, one-time Pro (no subscription, no account). Hosted, no-install endpoints: https://mcp.zovo.one

★ 138 destructivestdio

MCPGateway

yeelam-gordon/MCPGateway

✕BLOCK F

Share local MCP servers across coding-agent sessions: avoid duplicate backend memory and startup work. Keep the agent-side MCP connection across settled configuration-only restarts (SDK/stdio). Tool discovery and exclusive workflows; sharing adds overhead.

★ 013 readstdio

Serena

oraios/serena

✕BLOCK F

A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent

★ 29,624Not listed in sourcestdio

aimock

CopilotKit/aimock

✕BLOCK F

Mock everything your AI app talks to — LLM APIs, MCP, A2A, AG-UI, vector DBs, search. One package, one port, zero dependencies.

★ 9712 destructivestreamable-http

Director

fdmtl/director

✕BLOCK F

MCP Playbooks for AI agents

★ 4828 destructivesse

Vantage

vantage-sh/vantage-mcp-server

✕BLOCK F

MCP Server to fetch costs and usage data from your Vantage account.

★ 851 destructivestdio

orbit

Noveum/orbit

✕BLOCK F

Free, open source, realtime task manager. Issues, boards, sprints, projects and docs that sync instantly. Keyboard-first, self-hostable, with an MCP server for AI agents. No pricing, ever.

★ 6115 destructivestreamable-http

wjx-ai-kit

wjxcom/wjx-ai-kit

✕BLOCK F

问卷星 OpenAPI 全栈工具包:TypeScript SDK + MCP Server + CLI

★ 189 destructivestdio

ai

Contentrain/ai

✕BLOCK F

Repo-native content governance for AI agents. Extract, review, and deliver UI text, docs, and structured content from Git.

★ 66 destructivestdio

labloop

cloudcell/labloop

✕BLOCK F

Agent-driven ML researcher in a secure, reproducible KVM lab: five standalone scientific-state MCP servers within per-user VMs with driver / trusted / hostile zone isolation

★ 61 destructivestreamable-http

ai-r

pro-target/ai-r

!CAUTION F

Read local AI agent sessions (Claude Code, Codex, OpenCode, Antigravity, Pi): intents, plans, tools

★ 33 writestdio

MCPs

AceDataCloud/MCPs

!CAUTION F

AceDataCloud MCPs Monorepo

★ 23 destructivestdio

DaVinci Resolve

samuelgursky/davinci-resolve-mcp

✕BLOCK F

MCP server integration for DaVinci Resolve Studio

★ 3,0802 destructivestdio

Clawd Cursor

amrdab/clawdcursor

✕BLOCK F

clawdcursor compiles whatever's on screen into one UI map — accessibility tree and OCR fused into stable, addressable elements, with a screenshot only when needed — then drives apps through reusable scripts, verifying every action and routing it through a single safety gate.

★ 4032 destructivestdio

ServiceNow Integration

aartiq/servicenow-mcp

✕BLOCK F

ServiceNow MCP server: 500+ tools and 26 AI capabilities for any AI (Claude, ChatGPT, Gemini, Cursor, Copilot). Multi-transport (stdio, SSE, HTTP), A2A, dynamic schema discovery, read-only by default. Free and source available. Part of the NowAIKit suite.

★ 26411 destructivesse

Rails AI Context

crisnahine/rails-ai-context

✕BLOCK F

45 MCP tools that give AI coding agents ground truth about your Rails app: schema, models, routes, controllers, views, jobs, conventions. Works with Claude Code, Cursor, GitHub Copilot, OpenCode and Codex CLI. MCP or CLI, in-Gemfile or standalone, and it still answers when the app can't boot.

★ 1592 readstdio

Photon

portel-dev/photon

✕BLOCK F

Define intent once. Photon turns a single TypeScript file into CLI tools, MCP servers, and web interfaces.

★ 1002 destructivesse

React Native AI Debugger

igorzheludkov/react-native-ai-debugger

✕BLOCK F

Gives AI agents eyes and hands into running React Native apps: logs, REPL, tap, screenshots

★ 784 readstdio

react-native-ai-devtools

igorzheludkov/execbro

✕BLOCK F

Gives AI agents eyes and hands into running React Native apps: logs, REPL, tap, screenshots

★ 784 readstdio

Tencent Cloud

tencentcloudcommunity/mcp-server

✕BLOCK F

Tencent Cloud MCP Server, Support Remote Hosted and Local Installation

★ 305 destructivesse

carrick

carrick-tools/carrick

✕BLOCK F

Carrick maps your entire TypeScript codebase across services and repositories, giving AI agents full context on existing types, routes, and function behaviours over MCP before they write duplicate or breaking code.

★ 52 writestreamable-http

android-agent

Dynaevangelical2652/android-agent

✕BLOCK F

Control Android devices through ADB with this Python automation framework for task execution and phone farm scaling.

★ 45 writestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.