MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/87

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

2,065–2,088 of 2,120 · ranked by trust score, then stars

obsidian-tc

The-40-Thieves/obsidian-tc

✕BLOCK F

Obsidian Turbocharged — governed, agent-ready Obsidian MCP server. 163 tools across 31 domains, multi-vault native, pluggable embeddings. TypeScript + Rust. AGPL-3.0-only.

★ 96 destructivestdio

Genkit

firebase/genkit

✕BLOCK F

Open-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google

★ 6,4521 destructivesse

FlAPI

datazoode/flapi

✕BLOCK F

API Framework heavily relying on the power of DuckDB and DuckDB extensions. Ready to build performant and cost-efficient APIs on top of BigQuery or Snowflake for AI Agents and Data Apps

★ 744 readstreamable-http

Circuit

snowfort-ai/circuit-mcp

✕BLOCK F

Computer use-like MCP for webapps and electron apps, to enable AI agents to test their changes

★ 607 writesse

m3-memory

skynetcmd/m3-memory

✕BLOCK F

Local-first Memory Framework for AI Agents · 99.2% LongMemEval-S retrieval @ k=10 · Supports Claude · Antigravity · LangChain · Hermes · Gemini · OpenCode · OpenClaw · MCP-native and plugins · Hybrid search (FTS5 + vector + MMR) · GDPR · FIPS 140-3 ready · 100% local (fully offline) or cloud capable

★ 262 destructivestdio

AFD — Agent-First Development

lushly-dev/afd

✕BLOCK F
★ 416 destructivestdio

kernl

fastslack/kernl

✕BLOCK F

Self-hosted agent teams that do your work — and hand any LLM your real data (tasks, mail, calendar, finance) over MCP. No account, no cloud, nothing leaves your machine.

★ 336 destructivestdio

SAP Joule — S/4HANA Cloud Procurement & Finance Copilot

kalyanjanumpally/sap-joule-ai-plugin

✕BLOCK F

Reference implementation: SAP Joule procurement copilot backed by a CAP AI service and an LLM-agnostic plugin (Anthropic / Ollama / SAP Generative AI Hub).

★ 22 destructivestreamable-http

FastMCP

jlowin/fastmcp

✕BLOCK F

🚀 The fast, Pythonic way to build MCP servers and clients.

★ 27,7663 destructivesse

Vexa

vexa-ai/vexa

✕BLOCK F

Open-source meeting transcription API for Google Meet, Microsoft Teams & Zoom. Auto-join bots, real-time WebSocket transcripts, MCP server for AI agents. Self-host or use hosted SaaS.

★ 2,809Not listed in sourcestreamable-http

Apra Fleet

apra-labs/apra-fleet

✕BLOCK F

AI agents that write code, review each other's work, and coordinate across your machines

★ 1015 destructivestdio

Token Enhancer

xelektron/token-enhancer

✕BLOCK F

A local proxy that strips web pages down to clean text before they enter your AI agent's context window. 704K tokens → 2.6K tokens. No LLM required.

★ 686 readstdio

HLedger

iiatlas/hledger-mcp

✕BLOCK F

A local MCP server for interacting with the HLedger cli

★ 651 destructivesse

mcp-server

iris-eval/mcp-server

✕BLOCK F

Stop shipping agents on vibes. Score every agent output for quality, safety, and cost.

★ 94 destructivestdio

samarth-gtm-mcp

samarthanalytics-sj/samarth-analytics-mcp

✕BLOCK F

MCP server for Samarth Analytics Google Tag Manager operations

★ 221 destructivestdio

polka

artkruglov/polka

✕BLOCK F

Полка — a shelf for everything your AI agents make: pages, prototypes and projects by link, agent session memory, self-hosted. MCP · AGPL-3.0

★ 12 destructivestreamable-http

Home Assistant AI

homeassistant-ai/ha-mcp

✕BLOCK F

The Unofficial and Awesome Home Assistant MCP Server

★ 4,8024 writesse

comfyui-mcp

artokun/comfyui-mcp

✕BLOCK F

Local-first, agent-native control plane for ComfyUI — MCP server + sidebar agent that generates images, video & audio, authors and runs workflows, and edits your live graph in natural language on ANY LLM (Claude, ChatGPT, Gemini, offline Ollama, or any hosted model). 178 tools, 36 AI skills, 55 inst

★ 8164 destructivestdio

signetai

Signet-AI/signetai

✕BLOCK F

Sync and store memories, shared identity files (AGENTS.md, CLAUDE.md), session transcripts, institutional knowledge, and secrets between all of your favorite harnesses and models.

★ 3052 destructivestdio

Squirrelscan

squirrelscan/squirrelscan

✕BLOCK F

The website QA tool for your coding agent. 295+ audit rules across SEO, performance, security, accessibility and agent experience.

★ 2713 destructivestdio

Agoragentic Integrations

rhein1/agoragentic-integrations

✕BLOCK F

Public adapters and discovery catalog for Triptych OS (Agent OS): agent frameworks, MCP/A2A/x402 protocols, workflows, wallets, SDKs, and examples for execute-first routing, governed handoffs, and receipt-aware agent commerce.

★ 4018 writestdio

Patchwork OS

oolab-labs/patchwork-os

✕BLOCK F

The decision layer for personal AI. Local-first runtime where agents automate across GitHub, Slack, Gmail & 45+ services — but every risky action can stop for your yes, workers (agents) earn autonomy from track record, and every decision leaves a receipt. Your models, your machine, your policy. Incl

★ 304 destructivestreamable-http

relay-claude-channel

RelayMessenger/Relay-SDK

✕BLOCK F

Public TypeScript tools for Relay: the relaymessenger CLI, bundled Claude and OpenClaw channels, and the Vercel AI SDK plugin.

★ 31 destructivestdio

mscodebase-intelligence

ManSio/mscodebase-intelligence

✕BLOCK F

Intelligent codebase search & indexing for Zed. Async MCP server featuring LanceDB/BM25 hybrid search, multi-bucket RAG, and autonomous self-healing workflows. High-performance, memory-safe, and ready for your production code.

★ 214 readstreamable-http

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.