MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/81

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,921–1,944 of 2,120 · ranked by trust score, then stars

Mcphub

samanhappy/mcphub

✕BLOCK F

Self-hosted MCP gateway and control plane for connecting, controlling, and operating MCP servers.

★ 2,4652 destructivesse

Kubernetes

manusa/kubernetes-mcp-server

✕BLOCK F

Model Context Protocol (MCP) server for Kubernetes and OpenShift

★ 2,1397 readstdio

Kubernetes

containers/kubernetes-mcp-server

✕BLOCK F

Model Context Protocol (MCP) server for Kubernetes and OpenShift

★ 2,1167 readstdio

Superglue

superglue-ai/superglue

✕BLOCK F

superglue (YC W25) builds integrations and tools from natural language. Get production-grade tools for long tail and enterprise systems.

★ 2,0625 writestreamable-http

Qu1cksc0pe

cyb3rmx/qu1cksc0pe

✕BLOCK F

All-in-One malware analysis tool.

★ 2,0603 writestreamable-http

mcp-memory-service

doobidoo/mcp-memory-service

✕BLOCK F

Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.

★ 1,9991 destructivestdio

Keeper

ridafkih/keeper.sh

✕BLOCK F

Calendar sync tool & universal calendar MCP server. Aggregate, sync and control calendars on Google, Outlook, Office 365, iCloud, CalDAV or ICS.

★ 1,3552 readstreamable-http

SDL

glitterkill/sdl-mcp

✕BLOCK F

Symbol Delta Ledger (SDL-MCP) is a policy-centered context budget layer for coding agents: Symbol-graph intelligence combined with precision tools. It turns sprawling codebases into compact, high-signal context that saves tokens, speeds up workflows, and improves agent output.

★ 4901 destructivesse

Pubmed Mcp Server

cyanheads/pubmed-mcp-server

✕BLOCK F

Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.

★ 1591 writestdio

Pubmed

cyanheads/pubmed-mcp-server

✕BLOCK F

Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.

★ 1541 writestdio

runx

runxhq/runx

✕BLOCK F

the governed runtime for agent skill workflows, off the leash but on the record

★ 981 destructivestdio

Secure MCP Gateway

enkryptai/secure-mcp-gateway

✕BLOCK F

Secure MCP Gateway - Setup Admin level gateway functionality for MCP servers - with guardrails at each MCP server to overcome multiple security issues with using MCPs

★ 573 destructivestdio

Fortemi

fortemi/fortemi

✕BLOCK F

Self-hosted AI knowledge base with hybrid semantic search (pgvector + FTS + RRF), MCP server, multi-provider LLM inference (Ollama, OpenAI, OpenRouter, llama.cpp), multimodal ingestion (vision, audio transcription, speaker diarization), and knowledge graph. Rust + PostgreSQL.

★ 2624 destructivesse

APIbase

whiteknightonhorse/APIbase

✕BLOCK F

One MCP + REST endpoint to APIbase's live tool catalog (counts: https://apibase.pro/llms.txt). No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).

★ 101 writesse

Appkit

braedonsaunders/appkit

✕BLOCK F

Modular production foundation for modern apps: design system, multi-tenancy, forms, analytics, workflows, integrations, documents, and more.

★ 41 destructivestreamable-http

crawlforge-mcp

mysleekdesigns/crawlforge-mcp

✕BLOCK F

31 MCP tools that give Claude, Cursor and any MCP client the live web — scrape, crawl, search, real Google rank, change tracking, document parsing, plus an autonomous agent that researches from a plain-English prompt with no URLs. Clean Markdown and schema-validated JSON, not raw HTML. Local-Ollama

★ 21 writestdio

claude-code-session-manager

StanislavBG/claude-code-session-manager

✕BLOCK F

Local cockpit for Claude Code CLI sessions — schedule routines, monitor token budget, manage long-running plans

★ 11 destructivestreamable-http

roboparts

lm203688/roboparts

✕BLOCK F

RoboParts — Vendor-neutral composition checker for embodied systems | 具身系统的组合校验层(开源、厂商中立)| 868 实体 / 20 品类 / ISO 9409-1 法兰判定 / 三态 fail-closed 裁决(能/不能/不知道)| MCP Server + 开放 API + GitHub Action

★ 038 readstdio

Pi

earendil-works/pi

✕BLOCK F

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

★ 114,2653 destructivestreamable-http

Langchainjs

langchain-ai/langchainjs

✕BLOCK F

The agent engineering platform

★ 18,2583 destructivesse

Memorix

avids2/memorix

✕BLOCK F

Open-source cross-agent memory layer for coding agents via MCP. Compatible with Claude Code, Codex, Cursor, Windsurf, Gemini CLI, Antigravity, OpenClaw, Hermes Agent, Oh-my-Pi, Pi, Copilot, Kiro, OpenCode, and Trae.

★ 80911 destructivestdio

guaardvark

guaardvark/guaardvark

✕BLOCK F

The self-hosted AI studio: local video, image, music, voice, LoRA training, coding swarms, RAG and screen agents on one GPU, driven from the Studio or by your coding agent (Claude Code, Cursor, Codex, OpenClaw) through MCP and skills.

★ 2341 destructivestdio

toolport

btsouth/toolport

✕BLOCK F

Local-first MCP gateway. One port for every tool and every AI client: lazy discovery (~90% token savings), tool integrity + quarantine, secrets in the OS keychain.

★ 2221 destructivestdio

Mymir

frkak/mymir

✕BLOCK F

The agentic workspace where people and agents work together in the loop.

★ 1943 writestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.