MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/88

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

2,089–2,112 of 2,120 · ranked by trust score, then stars

ComfyUI

artokun/comfyui-mcp

✕BLOCK F

Local-first, agent-native control plane for ComfyUI — MCP server + sidebar agent that generates images, video & audio, authors and runs workflows, and edits your live graph in natural language on ANY LLM (Claude, ChatGPT, Gemini, offline Ollama, or any hosted model). 178 tools, 36 AI skills, 55 inst

★ 7734 destructivestdio

maestro-career-studio

seinun-ai/maestro-career-studio

✕BLOCK F

A product of Seinun LLC (https://seinun.com). Tailor your resume to every job, on your own machine. See every AI edit as a diff, get the same ATS score every time, export LaTeX/Typst PDFs, and drive it all from Claude via MCP. Free and open source.

★ 2Not listed in sourcestdio

schelling

SchellingAF/schelling

✕BLOCK F

Schelling Add Forward: communication and persistent state for AI agents, over HTTP and MCP, on PostgreSQL.

★ 05 writestdio

Whodb

clidey/whodb

✕BLOCK F

Where data access meets operational intelligence

★ 5,0334 readstreamable-http

Skylos

duriantaco/skylos

✕BLOCK F

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

★ 8403 writesse

Free Crypto News

nirholas/free-crypto-news

✕BLOCK F

Free crypto news API - real-time aggregator for Bitcoin, Ethereum, DeFi, Solana & altcoins. No API key required. RSS/Atom feeds, JSON REST API, historical archive with market context, embeddable widgets, ChatGPT plugin, Claude MCP server, SDKs (Python, TypeScript, Go, React, PHP). AI/LLM ready. Vibe

★ 31914 writestdio

javis-os

blogminhquy/javis-os

✕BLOCK F
★ 2221 readstdio

Shellward

jnmetacode/shellward

✕BLOCK F

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」(网安法·PIPL·等保2.0·数据出境·AI标识),并给出境内模型替代建议;可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

★ 1401 destructivestdio

agent-nuvira

imdheerajKube/agent-nuvira

✕BLOCK F
★ 09 destructivestdio

CloudBase AI ToolKit

tencentcloudbase/cloudbase-ai-toolkit

✕BLOCK F

Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & MCP.

★ 1,1251 writestdio

Unraid

dinglebear-ai/unraid-mcp

✕BLOCK F

Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.

★ 1355 readstdio

Unraid

dinglebear-ai/unraid

✕BLOCK F

Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.

★ 1355 readstdio

Unraid

jmagar/unraid-mcp

✕BLOCK F

Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.

★ 1355 readstdio

Zscaler

zscaler/zscaler-mcp-server

✕BLOCK F

Zscaler Integration MCP Server is a Model Context Protocol (MCP) server designed for managing Several Zscaler Products using Large Language Models (LLMs).

★ 49Not listed in sourcesse

Dollhouse

dollhousemcp/mcp-server

✕BLOCK F

A Free, Open Source MCP server for dynamic custom persona management with public a GitHub collection of personas, skills, templates, and other elements for AI models.

★ 457 destructivesse

mcp-server

DollhouseMCP/mcp-server

✕BLOCK F

A Free, Open Source MCP server for dynamic custom persona management with public a GitHub collection of personas, skills, templates, and other elements for AI models.

★ 457 destructivesse

cybara

metaspartan/cybara

✕BLOCK F

Cybara - Your agents. Your tools. Your runtime. Harness the power of AI

★ 314 destructivestreamable-http

GraphFlow

Roarpeng/GraphFlow

✕BLOCK F

Local-first code knowledge graph and context harness for coding agents. MCP + DeepSeek Harness (dsh) plugin.

★ 194 writestdio

Apx

agentprojectcontext/apx

✕BLOCK F

Meet your crew. APX is an open-source Agent OS for running AI agents on your own machine — memory in plain files, agents that work together, Claude Code, Codex, Telegram, WhatsApp and MCP.

★ 164 destructivestdio

cli

getmcpm/cli

✕BLOCK F

MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.

★ 31 destructivestdio

remembra

remembra-ai/remembra

✕BLOCK F

Remembra Relay: one agent stops, the next one already knows. Session handoffs built from git facts, for the next coding agent in any MCP tool, on any machine. MCP server + CLI. MIT.

★ 164 writestdio

bv-mcp

MadaBurns/bv-mcp

✕BLOCK F

Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.

★ 99 readstreamable-http

BreachPilot

braydos-h/BreachPilot

✕BLOCK F

Autonomous Offensive Security Agent for Red Team Operations

★ 48 writestdio

aishield

lm203688/aishield

✕BLOCK F

🛡️ Agent-native AI tool security scanner. Scan MCP/Skill/GPT/Prompt for security risks. 4-dimensional scoring. Certified badges. Guardrail MCP for auto-protection.

★ 21 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.