MCP servers · over the network
Remote MCP servers
2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.
Cite
Cite this page
ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/80
Verdicts · 2,120 servers
Transports
- stdio, runs locally1,435
- Streamable HTTP, remote1,960
- SSE, legacy remote423
A server can list more than one transport.
Tool risk
563
servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.
Servers with no destructive tools →2,120 servers
1,897–1,920 of 2,120 · ranked by trust score, then stars
SAME
sgx-labs/statelessagent
Your AI forgets everything between sessions. SAME fixes that. Local-first, no API keys, single binary.
@zibby/skills
ZibbyDev/skills
Pluggable MCP tool modules that give agent workflows their capabilities — GitHub, GitLab, Sentry, Slack, Jira, Notion, memory, datasets, and more.
impri
sekera-radim/impri
Human-in-the-loop approval inbox for AI agents. An agent proposes an action, a human approves or rejects it, then it runs. Watchers + approval inbox, MCP + REST, self-hostable (MIT).
AiFinPay — payment infrastructure for AI agents
AiFinPay/sdk
Payment infrastructure for AI agents: wallet, passport, owner-enabled Polygon and Base payments.
stitchkit
max-listov/stitchkit
Contract-first backend framework for Bun and Node — one defineContract() into an HTTP API, MCP tools, AI-agent tools and a typed client.
Reactive Resume
amruthpillai/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Reactive Resume
reactive-resume/app
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Reactive Resume
reactive-resume/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
PrismerCloud
prismer-ai/prismercloud
Prismer Cloud
Sentry
getsentry/sentry-mcp
An MCP server for interacting with Sentry via LLMs.
Entroly
juyterman1000/entroly
Cut AI context cost without trusting the compressor. Every reduction is reversible, byte-exact recoverable, and carries an auditable receipt. Local-first, works through proxy, MCP, SDK, or agent wrapper.
Toolport
tsouth89/toolport
Local-first MCP gateway. One port for every tool and every AI client: lazy discovery (~90% token savings), tool integrity + quarantine, secrets in the OS keychain.
mcp-observatory
KryptosAI/mcp-observatory
CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.
Superdesign
jonthebeef/superdesign-mcp-claude-code
V8 JavaScript Runtime
r33drichards/mcp-js
MCP server that exposes a V8 JavaScript runtime as a tool for AI agents like Claude and Cursor. Supports persistent heap snapshots via S3 or local filesystem, and is ready for integration with modern AI development environments.
Terezinha Tech Operations (ttoss)
ttoss/ttoss
codeam-cli
edgar-durand/codeagent-mobile-clients
Public source for CodeAgent Mobile clients: codeam-cli (npm), VS Code / Cursor / Windsurf extension, and JetBrains plugin. Control AI coding agents (Claude Code, Copilot, Cursor) from your phone.
RE-call
GiulioDER/RE-call
Memory that abstains instead of guessing: agent memory on your own Postgres with a verdict, confidence and provenance on every hit, and a calibrated refusal when nothing clears the threshold.
MCPAudit
saagpatel/MCPAudit
Audit all locally configured MCP servers for permission risks, prompt injection threats, and schema drift
Conarium
dogrucanemek-alt/conarium
Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway by
Sideboard
mattlevine/sideboard
menerio
MichaelZelbel/menerio
One brain for all your AI tools. Capture your thoughts once, and every AI can understand, use, and build on them.
mistgate
Mistgate/mistgate
Self-hosted panel for running a VPN for others: family, friends, a community or a small team. Hysteria2 and AmneziaWG, one link per person, VLESS REALITY coming. Add servers from the browser over SSH; client-eye health checks and Telegram alerts; MCP for AI agents. Two static Go binaries, SQLite, no
MCP Toolbox for Databases
googleapis/genai-toolbox
MCP Toolbox for Databases is an open source MCP server for databases.
Other risk hubs
By job
Questions
What counts as a remote MCP server?
Do remote servers also run locally?
Are remote servers safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as a remote MCP server?
- Do remote servers also run locally?
- Are remote servers safe?