MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/76

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,801–1,824 of 2,120 · ranked by trust score, then stars

md-business

meta-taro/md-business

✕BLOCK F

Business documents as Markdown — invoices, design docs and test sheets validated by JSON Schema, rendered to A4 PDF, and editable by AI agents through a built-in MCP server. Tauri desktop app + Chrome extension.

★ 16 writestdio

pod

suhui-organization/pod

✕BLOCK F

pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.

★ 12 destructivestdio

DataQ

TheurgicDuke771/DataQ

✕BLOCK F

Open-source data quality monitoring: checks across warehouses, lakehouses and object stores, triggered by ADF, Airflow and dbt, with alerting and an MCP server.

★ 02 readstreamable-http

flowviant

flowviant/cli

✕BLOCK F
★ 01 readstreamable-http

mcphost

j0yen/mcphost

✕BLOCK F

Hosted MCP runtime where the agent is the operator: sign up by tool call, publish your own tools.

★ 0Not listed in sourcestreamable-http

praxis-agent

Forest-Isle/Praxis

✕BLOCK F

Local-first, single-user general agent for the command line.

★ 03 destructivestdio

FinanceToolkit

JerBouma/FinanceToolkit

✕BLOCK F

Transparent and Efficient Financial Analysis

★ 5,460Not listed in sourcestdio

Langroid

langroid/langroid

✕BLOCK F

Harness LLMs with Multi-Agent Programming

★ 4,1033 writestdio

graphjin

dosco/graphjin

✕BLOCK F

One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code

★ 3,2063 readstreamable-http

Stripe AI

stripe/ai

✕BLOCK F

One-stop shop for building AI-powered products and businesses with Stripe.

★ 1,9041 writestdio

Coolify MCP Server

StuMason/coolify-mcp

✕BLOCK F

MCP server for Coolify — 42 optimized tools for managing self-hosted PaaS through AI assistants

★ 6121 writestdio

Hevy

chrisdoc/hevy-mcp

!CAUTION F

Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.

★ 4932 readstdio

hevy-mcp

chrisdoc/hevy-mcp

!CAUTION F

Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.

★ 4832 readstdio

AI Team OS

cronusl-1141/ai-company

!CAUTION F

Multi-agent team operating system for Claude Code. 108 MCP tools, 40+ agent templates, 10 lifecycle hooks, 7 pipeline workflows. Persistent teams, structured meetings, task wall, real-time React dashboard. No LangChain/AutoGen — pure CC native integration.

★ 3682 destructivestdio

AI-company

CronusL-1141/AI-company

!CAUTION F

Multi-agent team operating system for Claude Code. 108 MCP tools, 40+ agent templates, 10 lifecycle hooks, 7 pipeline workflows. Persistent teams, structured meetings, task wall, real-time React dashboard. No LangChain/AutoGen — pure CC native integration.

★ 3672 destructivestdio

Reversecore

sjkim1127/reversecore_mcp

!CAUTION F

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

★ 2079 writesse

Remindb

radimsem/remindb

✕BLOCK F

An agentic memory database that cuts session tokens by 82–99%. One portable SQLite file — your agent's memory, anywhere.

★ 1291 writestreamable-http

Build123d

pzfreo/build123d-mcp

✕BLOCK F

MCP server for build123d to improve AI cognition when creating 3D CAD models

★ 1102 destructivestdio

Pentest

ramkansal/pentestmcp

✕BLOCK F

pentestMCP: AI-Powered Penetration Testing via MCP, an MCP designed for penetration testers.

★ 1087 writestreamable-http

Vibe Coder

freshtechbro/vibe-coder-mcp

✕BLOCK F

Vibe-Coder-MCP server extends AI assistants with specialized software development tools.

★ 1031 writesse

ClinicalTrials.gov

cyanheads/clinicaltrialsgov-mcp-server

✕BLOCK F

Search ClinicalTrials.gov trials, retrieve study details and results, and match patients to eligible trials via MCP. STDIO or Streamable HTTP.

★ 972 readstdio

Swiss Caselaw

jonashertner/caselaw-repo-1

✕BLOCK F

Open Swiss legal corpus + MCP server: 1M+ court decisions (1875–today), 21k laws, 10M-edge citation graph, 42 MCP tools. CC0 data, MIT code. Live at mcp.opencaselaw.ch

★ 72Not listed in sourcesse

sendmux-sdk

Sendmux/sendmux-sdk

✕BLOCK F

Official monorepo of SDKs, CLI, and MCP servers for Sendmux email APIs across TypeScript, Python, Go, PHP, Rust, and Ruby.

★ 651 destructivestdio

Teradata

teradata/teradata-mcp-server

✕BLOCK F

The community development of a MCP server for a Teradata database

★ 571 readstdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.