MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/75

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,777–1,800 of 2,120 · ranked by trust score, then stars

Voice Mode

mbailey/voicemode

✕BLOCK F

Natural voice conversations with Claude Code

★ 1,3754 destructivestdio

voicemode

mbailey/voicemode

✕BLOCK F

Natural voice conversations with Claude Code

★ 1,3754 destructivestdio

MARM

lyellr88/marm-systems

✕BLOCK F

Local-first 3-in-1 AI memory layer & MCP server for Claude Code, Codex, Grok, Gemini, VS Code and Cursor. Fuses session history, codebase indexing & concept graphs in SQLite. Enables zero-cloud, privacy-first context & instant recall, supports multi-agent swarms.

★ 41011 readstdio

Reasoner

jacck/mcp-reasoner

✕BLOCK F

A systematic reasoning MCP server implementation for Claude Desktop with beam search and thought evaluation.

★ 2771 readsse

SuperLocalMemory

qualixar/superlocalmemory

✕BLOCK F

Open-source governed, local-first memory control plane for AI agents and teams. arXiv:2608.08253

★ 2273 readstdio

sunpeak

Alignbase/sunpeak

✕BLOCK F

Server-agnostic MCP testing framework and full-stack MCP App framework for ChatGPT Apps, Claude Connectors, and more.

★ 2171 readstreamable-http

Claude Prompts

minipuft/claude-prompts

✕BLOCK F

MCP server for reusable prompt templates, multi-step workflow chains, and quality gates. Compose agentic workflows with an operator syntax; export as native skills to Claude Code, Cursor, OpenCode, and Gemini CLI.

★ 1871 destructivesse

Claude Prompts

minipuft/claude-prompts-mcp

✕BLOCK F

MCP server for reusable prompt templates, multi-step workflow chains, and quality gates. Compose agentic workflows with an operator syntax; export as native skills to Claude Code, Cursor, OpenCode, and Gemini CLI.

★ 1871 destructivesse

claude-prompts-mcp

minipuft/claude-prompts-mcp

✕BLOCK F

MCP server for reusable prompt templates, multi-step workflow chains, and quality gates. Compose agentic workflows with an operator syntax; export as native skills to Claude Code, Cursor, OpenCode, and Gemini CLI.

★ 1871 destructivesse

Gopls

xieyuschen/gopls-mcp

✕BLOCK F

MCP server for golang projects development: Expand AI Code Agent ability boundary to have a semantic understanding and determinisic information for golang projects.

★ 59Not listed in sourcestreamable-http

MATLAB

williamcloudqi/matlab-mcp-server

✕BLOCK F

The MATLAB MCP server provides AI users with powerful scientific computing and data analysis capabilities. It allows users to execute MATLAB code directly in conversations, generate MATLAB scripts from natural language descriptions, and access MATLAB documentation.

★ 541 writesse

Herald

kolapsis/herald

✕BLOCK F

The self-hosted MCP bridge between Claude Chat and Claude Code.

★ 46Not listed in sourcestreamable-http

GitLab

jmrplens/gitlab-mcp-server

✕BLOCK F

Open source GitLab MCP server for AI assistants: 2-tool dynamic find/execute over 850+ GitLab actions (1,000+ Enterprise), stdio/HTTP/OAuth, safe/read-only modes.

★ 434 writestdio

Workflows

cyanheads/workflows-mcp-server

✕BLOCK F

Store, query, and create YAML workflow playbooks for LLM agents via MCP. STDIO or Streamable HTTP.

★ 311 destructivestdio

Splunk AI Connector

deslicer/mcp-for-splunk

✕BLOCK F

MCP Server for integrating with Splunk Enterprise

★ 273 readstdio

Codesteward

codesteward/codesteward

✕BLOCK F

Agentic code review with structural graph intelligence — PR gate + branch stewardship. Self-hosted. Apache-2.0.

★ 213 writestreamable-http

docdex

bekirdag/docdex

✕BLOCK F

A document index with MCP, http and client support. https://docdex.org/

★ 157 destructivestreamable-http

neo-agent-brain

neomjs/neo-agent-brain

✕BLOCK F

Point a cross-model AI engineering team at your own codebases. The Agent OS keeps named AI maintainers' identity, memory and review across labs alive between sessions — the Brain Neo.mjs runs on itself. Multi-tenant: onboarding a codebase is a config entry, not a fork.

★ 1140 readstdio

RepoTunnel

Yashwanth034/RepoTunnel

✕BLOCK F

RepoTunnel is a secure local AI workspace bridge that connects ChatGPT Web and MCP-compatible AI clients to approved local projects, files, terminals, Git, GitHub, browsers, editors, and desktop applications—so AI can inspect, edit, test, run, and manage real development work without constant copy-p

★ 61 readstreamable-http

captain-memo

kalinbogatzevski/captain-memo

✕BLOCK F

Local, cross-AI memory for coding agents: Claude Code, Codex, Gemini, Antigravity, Cursor, Kimi & more share one private corpus. Hybrid search, auto-injected context, a shared skill library, a work board so sessions don't collide, and homework for ideas parked mid-task. No-API-key summarizers; runs

★ 51 destructivestdio

astria

Nodesify/astria

✕BLOCK F

Turn any folder into a queryable knowledge graph

★ 3Not listed in sourcestdio

harborclerk

r0shi/harborclerk

✕BLOCK F

An MCP server that lets AI agents query your document archive instead of uploading it — with OCR, hybrid search, and cited local-AI answers in a private, Mac-native app.

★ 32 writestreamable-http

Align CLI

aligndottech/align-cli

✕BLOCK F

Align CLI - capture decisions, check alignment, and query your decision graph from the terminal

★ 21 readsse

kansei-mcp-server

kansei-link/kansei-mcp-server

✕BLOCK F

Local-first MCP navigator for AI agents. 11,000+ SaaS services, 200 workflow recipes, 89-97% token savings. Works with Claude Code, Cursor, Cline, Zed, Windsurf.

★ 15 writestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.