MCP servers · over the network
Remote MCP servers
2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.
Cite
Cite this page
ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/83
Verdicts · 2,120 servers
Transports
- stdio, runs locally1,435
- Streamable HTTP, remote1,960
- SSE, legacy remote423
A server can list more than one transport.
Tool risk
563
servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.
Servers with no destructive tools →2,120 servers
1,969–1,992 of 2,120 · ranked by trust score, then stars
unified-ai-system
happy520ai/unified-ai-system
Self-hosted model routing gateway and agent control plane for OpenAI, Anthropic, Gemini and A2A agents behind one OpenAI-compatible API, protocol-first. MCP server security, governed tools, prompt enhancement, virtual-key budgets, cache, observability, audit chain and agent governance. Zero-key loca
slopcamera
hraness/slopcamera
Slopcamera lets Codex, Claude Code, and other coding agents make images, diagrams, animation, 3D scenes, Blender films, and edited video from source files they can keep revising.
Cli
vibgrate/cli
Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.
q-ring
I4cTime/q-ring
OS keychain secrets for AI coding agents, over MCP. Native vault storage (macOS Keychain, Linux Secret Service, Windows Credential Vault), policy-governed access, audit log — CLI + 44 MCP tools.
ramen
bkraad47/ramen
Self-hosted, multi-zone, highly available MCP server (Model Context Protocol) for Kubernetes on GKE and EKS. A git repo of Python tools becomes canary-deployed Rust + Python workers behind one load balancer, with OAuth 2.1 sign-in, per-group roles, secrets, IP rules, throttling and audit.
nlqdb
nlqdb/nlqdb
Simplest Natural Langauge Querying DB That scales. Fast.
swarmmemo
Hugo0/swarmmemo
The message board for agent swarms. Post from anywhere: HTTP, MCP, DNS, netcat, Gemini, email, Nostr. Public rooms, private messages, paid tasks, a Bitcoin-anchored record.
Refact
smallcloudai/refact
AI Agent that handles engineering tasks end-to-end: integrates with developers’ tools, plans, executes, and iterates until it achieves a successful result.
Anything
helpcode-ai/anythingmcp
Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 299 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce.
anythingmcp
HelpCode-ai/anythingmcp
Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 263 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce.
Sentry Toolkit
getsentry/sentry-mcp
Agentic tooling for Sentry
toolkit
getsentry/toolkit
Agentic tooling for Sentry
obsidian-mcp-server
cyanheads/obsidian-mcp-server
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.
Obsidian
cyanheads/obsidian-mcp-server
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.
Oya Browser
OyadotAI/oya-browser
The browser control plane for AI agents. One API over Oya Cloud, Browserbase, Steel, Anchor, Browser Use and your own Chrome, with persistent personas, CAPTCHA and MFA handling, and live human takeover.
Cotal
Cotal-AI/Cotal
The open standard for agent coordination
publisher
malloydata/publisher
Publisher is the open-source analytics engine for Malloy. It lets you define data models once — and use them everywhere.
Simulator
joshuarileydev/simulator-mcp-server
ADR Analysis
tosin2013/mcp-adr-analysis-server
Your ADRs are lying to you. MCP server with live drift detection, content safety, and decision memory — validates architectural decisions against your actual code.
mcp-adr-analysis-server
tosin2013/mcp-adr-analysis-server
Your ADRs are lying to you. MCP server with live drift detection, content safety, and decision memory — validates architectural decisions against your actual code.
@adcp/sdk
adcontextprotocol/adcp-client
A Typescript SDK for the AdCP protocol (client and server)
surreal-memory
acidkill/surreal-memory
orgx-mcp
useorgx/orgx-mcp
Organizational memory and agent orchestration MCP. Remember decisions, artifacts, tasks, and project context across Claude, ChatGPT, Cursor, and other agents.
Basic Memory
basicmachines-co/basic-memory
AI conversations that actually remember. Never re-explain your project to your AI again. Join our Discord: https://discord.gg/tyvKNccgqN
Other risk hubs
By job
Questions
What counts as a remote MCP server?
Do remote servers also run locally?
Are remote servers safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as a remote MCP server?
- Do remote servers also run locally?
- Are remote servers safe?