MCP servers · over the network

Remote MCP servers

2,120 MCP servers list a remote transport, streamable HTTP or SSE. A remote server needs no install, but what you send it leaves your machine. Our audit reads the source in the repository; it cannot see what a hosted deployment runs.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Remote MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/remote/page/89

Verdicts · 2,120 servers

✓SAFE706!CAUTION493✕BLOCK921

Transports

A server can list more than one transport.

Tool risk

563

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

2,120 servers

2,113–2,120 of 2,120 · ranked by trust score, then stars

sequant

sequant-io/sequant

✕BLOCK F

AI coding agent orchestrator — resolve GitHub issues end-to-end with isolated git worktrees, quality gates, and an MCP server. Works with Claude Code or Aider.

★ 11 writesse

Jarela

CircuitWall/jarela

✕BLOCK F

Jarela is a lightweight, full‐featured multi‐agent application that runs locally on your machine.

★ 029 destructivestreamable-http

Pollinations

pollinations/pollinations

✕BLOCK F

Your Friendly Open-Source Gen-AI Platform

★ 5,1011 writestreamable-http

MisakaNet

Ikalus1988/MisakaNet

✕BLOCK F

📚 A zero-dependency, git-backed micro-lesson library for AI Agents to asynchronously share and search verified debugging experience. | https://misakanet.org

★ 5163 writestdio

🐋 DeepSeek CLI

sluisr/deepseek-cli

✕BLOCK F

DeepSeek CLI — unofficial adaptation of Gemini CLI by sluisr. Full agentic AI in your terminal using DeepSeek API.

★ 52 destructivestdio

llm-trust-guard

nkratk/llm-trust-guard

✕BLOCK F
★ 214 writestreamable-http

Gateway Registry

agentic-community/mcp-gateway-registry

✕BLOCK F

Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/E

★ 9442 writestdio

ThumbGate

igorganapolsky/thumbgate

✕BLOCK F

ThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.

★ 284 destructivestdio

Other risk hubs

By job

Questions

What counts as a remote MCP server?
A server is listed here when its declared transports include streamable-http or sse.
Do remote servers also run locally?
1,435 of the 2,120 also list stdio, so the same package can run as a local process. 685 are remote only.
Are remote servers safe?
706 are SAFE, 493 CAUTION and 921 BLOCK. The verdict is for the source we read; a hosted instance may differ from it, so give a remote server the narrowest credentials it needs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.