MCP servers · by job

Agent orchestration MCP servers

171 MCP servers that coordinate several agents, gateways and agent-to-agent protocols. 35 are SAFE, 35 CAUTION and 101 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Agent orchestration MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/agents/page/2

Verdicts · 171 servers

✓SAFE35!CAUTION35✕BLOCK101

Transports

A server can list more than one transport.

Tool risk

46

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

171 agent orchestration servers

25–48 of 171 · ranked by trust score, then stars

@putervision/behavior-mcp

putervision/behavior-mcp

✓SAFE B

⚡ High-frequency (~60Hz) in-browser behavior tree execution engine for autonomous AI agents. Reactive priority interrupts, safety guardrails & deterministic action replay over MCP.

★ 121 writestdio

mcp-mindmesh

7ossamfarid/mcp-mindmesh

✓SAFE B

Claude 3.7 Swarm with Field Coherence: A Model Context Protocol (MCP) server that orchestrates multiple specialized Claude 3.7 Sonnet instances in a quantum-inspired swarm. It creates a field coherence effect across pattern recognition, information theory, and reasoning specialists to produce optima

★ 64 readsse

tirith

eabz/tirith

!CAUTION B

The tower of guard for parallel coding agents. Keeps parallel coding agents from stepping on each other. Claims, contracts and change notices over MCP.

★ 4Not listed in sourcestdio

context-compression

herreravalenz6620/context-compression

!CAUTION B

Reduce token usage for JSON, CSV, and TSV files with deterministic compression that keeps data intact for AI agents.

★ 31 read

AgentTrust — Identity & Trust for A2A Agents

agenttrust/mcp-server

!CAUTION B

MCP server for AgentTrust — A2A communication, agent identity, HITL escalation, and prompt injection detection

★ 21 destructivestdio

Tin Can

BrutalSystems/tincan

✓SAFE B

Peer messaging between live Claude Code, Codex and opencode sessions on one machine. One binary, run as an MCP server inside each.

★ 12 writestdio

mcp-ai-memory

ermermermermidk/mcp-ai-memory

!CAUTION B

🧠 Manage AI context seamlessly with the MCP server for storing and retrieving semantic memory across sessions. Enhance your AI's knowledge retention.

★ 13 destructivestdio

postgresql-mcp-js

s2mgtvodois2/postgresql-mcp-js

✓SAFE B

🔌 Simplify PostgreSQL interactions with a secure MCP server for LLMs, enabling efficient access to schemas, tables, and query execution.

★ 11 writestdio

agent-lab

ZekeVoigt/agent-lab

✓SAFE B

How do AI agents find the web? A live research site: llms.txt, A2A card, OpenAPI, MCP server, and a daily task that's checked automatically.

★ 01 writestreamable-http

agentlink

sruthik27/agentlink

!CAUTION B

AgentLink: open-source, local-first MCP server for coding agents. Cross-repo contracts, messages and approvals for Codex, Claude Code and OpenCode.

★ 03 destructive

pazair

Kula-Labs/pazair

✓SAFE B

Where agents keep their word. A marketplace where AI agents buy from and sell to other AI agents (MCP, pay on delivery, signed receipts).

★ 01 read

sentinel

juyelhushen/sentinel

✓SAFE B

Autonomous multi-agent engineering copilot that investigates software issues, plans fixes, uses MCP tools, verifies changes, and learns from past incidents.

★ 01 writestdio

Prefect

prefecthq/prefect-mcp-server

!CAUTION B

Prefect MCP server

★ 541 readstdio

MCPcat

mcpcat/mcpcat-python-sdk

!CAUTION B

AgentCat is an analytics platform for MCP server owners 🐱.

★ 531 writestreamable-http

Interoperable Agent System

junfanz1/mcp-multiserver-interoperable-agent2agent-langgraph-ai-system

!CAUTION B

This project demonstrates a decoupled real-time agent architecture that connects LangGraph agents to remote tools served by custom MCP (Modular Command Protocol) servers. The architecture enables a flexible and scalable multi-agent system where each tool can be hosted independently (via SSE or STDIO

★ 281 writesse

ennodia

cherninlab/ennodia

✓SAFE B

Connects the AI agents you use: your agent hands a task to another and gets the answer back

★ 69 writestdio

astranl-mcp

ASTRANL/astranl-mcp

✓SAFE B

AstraNL — protocol-governed coordination infrastructure for the AI + robot + human economy. Live MCP server, Europe-wide robot & drone database.

★ 0Not listed in sourcesse

MCPcat

mcpcat/mcpcat-typescript-sdk

✓SAFE B

AgentCat is an analytics platform for MCP server owners 🐱.

★ 1247 writestreamable-http

1mcp

buremba/mcpsandbox

✓SAFE B

Embedded sandbox with MCP proxy

★ 362 write

1mcp

buremba/1mcp

✓SAFE B

Embedded sandbox with MCP proxy

★ 362 write

Langchain MCP Tools

hideya/langchain-mcp-tools-py

!CAUTION B

MCP to LangChain Tools Conversion Utility / Python

★ 292 writestreamable-http

Unified Tool Graph

pratikjadhav2726/unified-mcp-tool-graph

!CAUTION B

Instead of dumping 1000+ tools into a model’s prompt and expecting it to choose wisely, the Unified MCP Tool Graph equips your LLM with structure, clarity, and relevance. It fixes tool confusion, prevents infinite loops, and enables modular, intelligent agent workflows.

★ 273 readstdio

mcp-stdio

shigechika/mcp-stdio

✓SAFE B

Bidirectional stdio ↔ HTTP gateway for MCP servers — connect clients to remote servers or publish local servers

★ 81 writesse

MCP-rag-with-Chromadb

rexnzm/MCP-rag-with-Chromadb

!CAUTION B

🗂️ Build a versatile MCP server with RAG capabilities, supporting multiple document formats using LangChain and ChromaDB for efficient data retrieval.

★ 31 destructivestdio

Other jobs

By risk

Questions

How do you decide which servers are agent orchestration servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which agent orchestration MCP servers rank highest on trust?
Eino (cloudwego/eino), Minima (dmayboroda/minima) and LangChain.js MCP Adapters (langchain-ai/langchainjs-mcp-adapters), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many agent orchestration servers only read?
45 of the 171 declare tools that all only read; 46 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.