MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/73

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,729–1,752 of 2,120 · ranked by trust score, then stars

kenny

nullthrone/kenny

✕BLOCK F

Self-hosted remote administration and fleet monitoring for Windows PCs in a family setting, operated through Claude (MCP) and a web dashboard.

★ 13 readstreamable-http

mohou-mini-app

mungowang/mohou-mini-app

✕BLOCK F

Mohou. Your own place to make mini-apps, and to run them.

★ 04 writestdio

sigelo

csigelo/sigelo

✕BLOCK F

Portable, offline-verifiable identity for AI agents: Ed25519 DIDs, signed attestations any world checks without a server, a Monero keeper that holds the money so the agent never does. Draft, wire sigelo/0.

★ 02 readstdio

Fast Agent

evalstate/fast-agent

!CAUTION F

Code, Build and Evaluate agents - excellent Model and Skills/MCP/ACP/A2A Support

★ 3,92110 writesse

Paca

Paca-AI/paca

✕BLOCK F

AI-native, free, open-source alternative to Jira, Trello, ClickUp & Monday. Built for Scrum teams where humans and AI agents collaborate as equals — on the same board, the same sprints, the same goals. Self-hosted. Fully customizable via config and plugins.

★ 1,91615 destructivestdio

AgentRQ

agentrq/agentrq

✕BLOCK F

AgentRQ: Human-in-loop realtime conversational task manager for AI Agents. Self-hosted! Control your own agents from wherever you want Mobile, Web, Desktop. Designed to work well with your own Claude subscriptions and any harness with ACP support.

★ 1,1329 destructivestreamable-http

agentrq

agentrq/agentrq

✕BLOCK F

AgentRQ: Human-in-loop realtime conversational task manager for AI Agents. Self-hosted! Control your own agents from wherever you want Mobile, Web, Desktop. Designed to work well with your own Claude subscriptions and any harness with ACP support.

★ 1,1218 destructivestreamable-http

Pdf Reader Mcp

sylphlab/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0351 readstdio

Anymd

SylphxAI/anymd

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0351 readstdio

PDF Reader

sylphxltd/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 1,0201 readstdio

Kubectl

rohitg00/kubectl-mcp-server

✕BLOCK F

Published in CNCF Landscape: A MCP server for Kubernetes.

★ 9601 destructivestdio

PDF Reader

sylphxai/pdf-reader-mcp

✕BLOCK F

Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.

★ 9361 readstdio

Dingo

dataeval/dingo

✕BLOCK F

Dingo: A Comprehensive AI Data, Model and Application Quality Evaluation Tool

★ 7572 writesse

McpStore

ip2a/mcpstore

✕BLOCK F

Elegantly manage your MCP services

★ 4321 readstreamable-http

mac-mcp

bulutarkan/mac-mcp

✕BLOCK F

Talk to your AI agent and let it work on your Mac. Open source MCP control for browser, files, apps, shell, and agents.

★ 801 destructivestreamable-http

Swagger Gateway

zaizaizhao/mcp-swagger-server

✕BLOCK F

MCP Swagger Server 将任何符合 OpenAPI/Swagger 规范的 REST API 转换为 Model Context Protocol (MCP) 格式,让 AI 助手能够理解和调用您的 API。

★ 7715 readsse

Sendmux

sendmux/sendmux-sdk

✕BLOCK F

Official monorepo of SDKs, CLI, and MCP servers for Sendmux email APIs across TypeScript, Python, Go, PHP, Rust, and Ruby.

★ 651 destructivestdio

Wwmcp

theyahia/wwmcp

✕BLOCK F

MCP servers for Russian, CIS and non-Western APIs — 46 servers: Russia/CIS, Turkey, Gulf, Egypt, Ethiopia, Bangladesh, Latin America. Turborepo monorepo + GitHub Pages catalog.

★ 337 destructivestdio

GitHub Enterprise

containerelic/github-enterprise-mcp

✕BLOCK F

github-enterprise-mcp

★ 292 destructivesse

GitHub Enterprise

ddukbg/github-enterprise-mcp

✕BLOCK F

github-enterprise-mcp

★ 292 destructivesse

openrod

OpenRod/OpenRod

✕BLOCK F

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

★ 173 readstreamable-http

willow-mcp

willow-memory/willow-mcp

!CAUTION F

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

★ 35 writestdio

codemcp

mewisme/codemcp

✕BLOCK F

CodeMCP is a workspace-aware execution, context, and agent orchestration server for AI clients.

★ 23 readstreamable-http

guuey-sdks

withguuey/guuey-sdks

✕BLOCK F

The @guuey/* packages — CLI, chat kit, scaffolder and SDKs for hosting agents on Guuey

★ 11 destructivestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.