MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/79

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,873–1,896 of 2,120 · ranked by trust score, then stars

VictoriaLogs

victoriametrics-community/mcp-victorialogs

✕BLOCK F

The implementation of Model Context Protocol (MCP) server for VictoriaLogs.

★ 99Not listed in sourcestdio

VictoriaLogs

victoriametrics/mcp-victorialogs

✕BLOCK F

The implementation of Model Context Protocol (MCP) server for VictoriaLogs.

★ 98Not listed in sourcestdio

TapTap Open API MCP 服务器

taptap/instant-games-open-mcp

✕BLOCK F

TapTap 小游戏开放能力 mcp

★ 432 destructivestdio

gitlab-mcp-server

jmrplens/gitlab-mcp-server

✕BLOCK F

Open source GitLab MCP server for AI assistants: 2-tool dynamic find/execute over 850+ GitLab actions (1,000+ Enterprise), stdio/HTTP/OAuth, safe/read-only modes.

★ 434 writestdio

Windows Computer Use

sandraschi/windows-computer-use-mcp

✕BLOCK F

Windows Computer Use for AI Agents. Both a tool (22 MCP tools for click, type, screenshot, OCR, UI inspection) and an agent (autonomous mission engine, macro recorder, intent-based discovery, event watchers). Built with opencode (DeepSeek V4). Ships as MCP server, web UI, and Tauri desktop app.

★ 413 destructivesse

mcp-compliance

YawLabs/mcp-compliance

✕BLOCK F

CLI + MCP server that tests MCP servers for spec compliance. 88 tests across 8 categories, A-F grading.

★ 22 destructivestdio

cello-client

Mygentic-AI/cello-client

✕BLOCK F

https://cello.mygentic.ai/l/2axsGFs The official client for the CELLO protocol — lets agents such as Claude Code, Hermes, OpenClaw, etc. connect, message, and collaborate directly across devices and harnesses using MCP

★ 111 destructivestdio

cisa-cybersecurity-mcp-server

cyanheads/cisa-cybersecurity-mcp-server

✕BLOCK F

CISA Known Exploited Vulnerabilities with BOD 26-04 deadlines, SSVC prioritization, and the full ICS advisory corpus (CSAF) via MCP. Keyless. STDIO or Streamable HTTP.

★ 1Not listed in sourcestdio

faa-traffic-delays-mcp-server

cyanheads/faa-traffic-delays-mcp-server

✕BLOCK F

Track FAA ground stops, delay programs, airport delays, the operations plan, and ATCSCC advisories via MCP. STDIO or Streamable HTTP.

★ 1Not listed in sourcestdio

bunch

Arcadesys/bunch

✕BLOCK F
★ 08 destructivestreamable-http

light-remote-mcp

n8n2erpnext/light-remote-mcp

✕BLOCK F

Light Remote MCP turns a Windows or Linux machine into an explicitly authorized remote execution target for ChatGPT, Claude, Codex, and other MCP-capable AI workflows.

★ 01 destructivestreamable-http

living-bread-mcp

thegoodfruit/living-bread-mcp

✕BLOCK F

Remote MCP server for The Living Bread: Scripture from a stored text, verses for a need, real churches and gatherings, and the prayers real people prayed over you. mcp.living-bread.org

★ 08 readsse

Sourcebot

sourcebot-dev/sourcebot

✕BLOCK F

Sourcebot is a self-hosted tool that helps humans and agents understand your codebase.

★ 3,9471 destructivestreamable-http

cli

modelstudioai/cli

✕BLOCK F

Official Model Studio CLI(阿里云百炼 CLI)built for AI Agent frameworks, exposing models, search, multimodal, and workflow capabilities as structured tool calls.

★ 5395 readstreamable-http

AI-Canvas-tauri

Tenney95/AI-Canvas-tauri

✕BLOCK F

Local-first AI canvas for visual workflows, AI short drama, image/video generation, storyboarding and asset management. ComfyUI, AI agents, MCP & Blender. 本地优先 AI 画布:AI短剧、AI资产管理、图像/视频生成、分镜制作与视频剪辑。

★ 20846 readstdio

Observatory

kryptosai/mcp-observatory

✕BLOCK F

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

★ 1403 destructivestdio

NCP

portel-dev/ncp

✕BLOCK F

Natural Context Provider (NCP). Your MCPs, supercharged. Find any tool instantly, load on demand, run on schedule, ready for any client. Smart loading saves tokens and energy.

★ 10010 destructivesse

PyWry

deeleeramone/pywry

✕BLOCK F

PyWry is a cross-platform app factory, rendering engine and UI toolkit for Python that produces native desktop, web, and notebook experiences from a single API.

★ 974 destructivesse

Pulse Servers

pulsemcp/mcp-servers

✕BLOCK F

MCP (Model Context Protocol) Servers authored and maintained by the PulseMCP team. We build reliable servers thoughtfully designed specifically for MCP Client-powered workflows.

★ 8110 destructivestdio

DeepSecure

deeptrail/deepsecure

✕BLOCK F

Effortlessly secure your AI agents and AI-powered workflows — from prototype to production. Get easy-to-use identity, credential, and access management built for fast-moving AI developers.

★ 525 readstreamable-http

ContextStream

contextstream/mcp-server

✕BLOCK F

Persistent memory, semantic search, and shared project context for AI agents with traceable sources and scoped access. Carry decisions, lessons, and intent across sessions and tools.

★ 44Not listed in sourcestdio

ZMCPTools

zachhandley/zmcptools

✕BLOCK F

A custom TypeScript MCP Server intended to be used with Claude Code

★ 4110 destructivestdio

ios-agent-skill

Nagarjuna2997/ios-agent-skill

✕BLOCK F

Swift source, Apple guides and MCP tools for AI coding agents. Review iOS code, scaffold apps, and build/run/preview with Xcode Simulator.

★ 371 destructivestdio

PubMed Search

u9401066/pubmed-search-mcp

✕BLOCK F

MCP SDK v2 server for PubMed and multi-source biomedical research, with resilient search, full text, citations, and tenant-safe deployment.

★ 282 destructivestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.