MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/74

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,753–1,776 of 2,120 · ranked by trust score, then stars

kleo-mcp

tonnooooo/kleo-mcp

✕BLOCK F

Kleo: remote MCP server that turns a brief into a narrated 4K 60 fps film, realistic or animation, from Claude, ChatGPT, Cursor or any MCP client

★ 02 writestreamable-http

neuralos

DrOlu/RTerm

✕BLOCK F

RTerm — AI-native terminal & agentic-AI operations platform for Forward Deployed Engineers & SREs: AIOps closed-loop remediation, AI SRE, self-healing infrastructure, runbook automation, ChatOps; executes over SSH/WinRM/serial under policy with tamper-evident audit.

★ 04 destructivestreamable-http

TradeMemory

mnemox-ai/tradememory-protocol

✕BLOCK F

Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP tools.

★ 1,4203 writestdio

AgentUp

always-further/agentup

✕BLOCK F

Portable , scalable , secure AI Agents

★ 1271 destructivesse

AgentUp

lukehinds/agentup

✕BLOCK F

Portable , scalable , secure AI Agents

★ 1271 destructivesse

AgentUp

nolabs-ai/agentup

✕BLOCK F

Portable , scalable , secure AI Agents

★ 1271 destructivesse

AgentUp

reddotrocket/agentup

✕BLOCK F

Portable , scalable , secure AI Agents

★ 1271 destructivesse

Payload CMS

matmax-worldwide/payloadcmsmcp

✕BLOCK F

Payload CMS MCP Server

★ 1239 readsse

Pensyve

major7apps/pensyve

✕BLOCK F

Universal memory runtime for AI agents

★ 951 destructivestdio

codelocal

codelocal-cloud/codelocal

✕BLOCK F

The open-source Project Brain for AI coding. Connect ChatGPT, Codex, Claude and MCP-compatible agents to your projects, local tools and persistent knowledge. Fork it, build with it, and help shape the open AI development stack. 🧠⚡

★ 872 readstdio

Last.fm MCP Server

rianvdm/lastfm-mcp

✕BLOCK F

An MCP server that provides seamless access to a user's Last.fm listening data and music information via AI assistants like Claude.

★ 4921 readstreamable-http

Tushare

zhewenzhang/tushare_mcp

✕BLOCK F
★ 4866 readstreamable-http

Codingbuddy

jeremydev87/codingbuddy

✕BLOCK F

Codingbuddy orchestrates 29 specialized AI agents to deliver code quality comparable to a team of human experts through a PLAN → ACT → EVAL workflow.

★ 318 writesse

QA-Use

desplega-ai/qa-use

✕BLOCK F

Agent-first E2E testing CLI

★ 271 destructivestdio

mcp-hangar

mcp-hangar/mcp-hangar

✕BLOCK F

MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.

★ 181 writestdio

memory-os-cli

yonro/memory-os-cli

✕BLOCK F

XMemo: user-owned Memory OS for AI agents. Public client (@xmemo/client), MCP distribution, Skills and plugins.

★ 121 writestdio

fluxmail

churichard/fluxmail

✕BLOCK F

Self-hosted email CLI / API / MCP server for AI agents and apps

★ 71 readstdio

orcid-mcp-server

cyanheads/orcid-mcp-server

✕BLOCK F

Search and retrieve researcher profiles, works, affiliations, funding, and peer review records from the ORCID registry via MCP. STDIO or Streamable HTTP.

★ 51 readstdio

mcp

YawLabs/mcp

✕BLOCK F

MCP orchestrator, one install, all your MCP servers

★ 15 destructivestdio

Typeroll CMS

Typeroll/typeroll

✕BLOCK F

Open-source Typeroll website and application platform

★ 022 destructivestdio

PrepDeck

YIzhongyue/PrepDeck

✕BLOCK F

A self-hosted exam prep platform with practice questions, mock exams, AI-powered explanations, and personalized progress tracking, built on Cloudflare.

★ 01 readstreamable-http

TalonHound

spatronn/TalonHound

✕BLOCK F

Self-hosted threat intelligence and IOC management platform

★ 01 destructivestreamable-http

teardrop

teardrop-ai/teardrop

!CAUTION F

An A2A-first marketplace for autonomous economic agents: discover specialists, delegate tasks, and settle per-request blockchain payments over federated MCP tools and streaming AG-UI.

★ 01 readstreamable-http

davinci-resolve-mcp

samuelgursky/davinci-resolve-mcp

✕BLOCK F

MCP server integration for DaVinci Resolve Studio

★ 3,4872 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.