MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/84

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

1,993–2,016 of 2,120 · ranked by trust score, then stars

DevOps AI Toolkit

vfarcic/dot-ai

✕BLOCK F

Intelligent dual-mode agent for deploying applications to ANY Kubernetes cluster through dynamic discovery and plain English governance

★ 3362 destructivestreamable-http

MCPOmni Connect

abiorh001/mcp_omni_connect

✕BLOCK F

An agent runtime for Python. Give your agent real work. Keep control: every action checked before it runs, every run survives a crash without silently redoing anything, every step on the record.

★ 24918 readsse

Conduit

tsouth89/conduit

✕BLOCK F

Local-first MCP gateway. One port for every tool and every AI client: lazy discovery (~90% token savings), tool integrity + quarantine, secrets in the OS keychain.

★ 2211 destructivestdio

Claude Total Memory

vbcherepanov/total-agent-memory

✕BLOCK F

Persistent local memory for AI coding agents — Claude Code, Codex CLI, Cursor, any MCP client. Temporal knowledge graph, procedural memory, AST codebase ingest, cross-project analogy. LongMemEval R@5 95.1%, LoCoMo 0.607, BEAM 1M 0.448. 74 MCP tools, 9 IDEs, 100% local.

★ 713 destructivestdio

Dunetrace

dunetrace/dunetrace

✕BLOCK F

The runtime reliability layer for AI agents.

★ 681 writesse

Obsidian LLM Wiki

2233admin/obsidian-llm-wiki

✕BLOCK F

Your markdown vault, compiled into a 6-persona MCP team for Claude Code, Codex, OpenCode, and Gemini CLI. Headless-first. Cites, doesn't guess.

★ 369 readstdio

derive

derive-to/derive

✕BLOCK F

Review and approval for work made by AI agents. Fair Source, self-hostable, and MCP-native.

★ 301 destructivestdio

nimblebrain

NimbleBrainInc/nimblebrain

✕BLOCK F

Self-hosted platform for MCP Apps and agent automations — tools, interactive UIs, scheduled runs, multi-agent delegation.

★ 256 destructivesse

ghost

wcatz/ghost

✕BLOCK F

GhostMem — a local-first MCP memory server for Claude Code, opencode, Cursor, and other MCP clients.

★ 21 writestdio

open-health-sync

soma-intelligence/open-health-sync

✕BLOCK F

Self-hosted, open-source API for wearable and health data, in Go. Syncs Apple Health, Health Connect, Oura, WHOOP, Withings, Strava, Fitbit, Dexcom and more into one model, served over REST, FHIR R4, Open mHealth, CSV/Parquet, webhooks and a read-only MCP server. Docker, Helm, Raspberry Pi. AGPL-3.0

★ 1Not listed in sourcestdio

seiche

beepboop2025/seiche

!CAUTION F

Free AGPL funding and market-context research for international workflows. A LiquiLens product, connected to institution evidence and Undertow liquidity via API/MCP.

★ 1Not listed in sourcestdio

@tangle-network/agent-app

tangle-network/agent-app

✕BLOCK F

A feature-full starting point for production agent applications on Tangle.

★ 04 destructivestdio

SmythOS

smythos/sre

✕BLOCK F

The SmythOS Runtime Environment (SRE) is an open-source, cloud-native runtime for agentic AI. Secure, modular, and production-ready, it lets developers build, run, and manage intelligent agents across local, cloud, and edge environments.

★ 1,2921 destructivesse

ecc-agentshield

affaan-m/agentshield

✕BLOCK F

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

★ 1,27411 writestreamable-http

Vurb

vinkius-labs/vurb.ts

✕BLOCK F

MCP Fusion - The TypeScript framework for secure MCP servers.

★ 2557 destructivesse

Origin

7xuanlu/origin

✕BLOCK F

A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.

★ 7917 readstreamable-http

Wenlan

7xuanlu/wenlan

✕BLOCK F

A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.

★ 7917 readstreamable-http

talon-agent

thefalconry/talon

✕BLOCK F

🦅 Multi-platform agentic AI harness — runs on Telegram, Discord, Teams & Terminal with a pluggable backend (Claude, Kilo, OpenCode, Codex, OpenAI Agents), full MCP tool access, and persistent background agents (Goals, Heartbeat, Dream).

★ 7813 destructivestdio

merrymen

millw14/merrymen

✕BLOCK F

Autonomous trading agents for Robinhood Chain, inside hard on-chain limits. Use it from Claude: tell Claude "set up merrymen mcp", or add it in one click at merrymen.dev/claude

★ 692 destructivestreamable-http

Supabase

joshuarileydev/supabase-mcp-server

✕BLOCK F
★ 521 destructivesse

Firefox Control

jediluke/firefox-mcp-server

✕BLOCK F

A fully vibe-coded, experimental, MCP server to control firefox

★ 302 destructivesse

graft

getmodern-ai/graft

✕BLOCK F

Graft writes the API integration your agent is missing, on demand, and serves it over MCP. Connect Claude, ChatGPT, Hermes or OpenClaw; the model reads the vendor docs, writes and verifies a small tool, and the proxy injects the credential so it never reaches the code. Self-hostable with Docker and

★ 52 destructivestreamable-http

ycli

bim-ba/ycli

✕BLOCK F

Yandex 360 toolkit — Tracker, Wiki & Forms via CLI, MCP server, Python SDK & Claude Code plugin ✨

★ 543 destructivestdio

aziel-runtime

AzielEliab/aziel-runtime

✕BLOCK F

Aziel Runtime by Aziel Eliab — FragGate MCP Softwares door. https://aziel-runtime.vibelock.workers.dev/ · OpenAPI+MCP · Glama · hubs azieleliab.com · corpus · godlock.uk · HDJ.

★ 22 writestreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.