MCP servers · by job

Agent orchestration MCP servers

171 MCP servers that coordinate several agents, gateways and agent-to-agent protocols. 35 are SAFE, 35 CAUTION and 101 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Agent orchestration MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/agents/page/5

Verdicts · 171 servers

✓SAFE35!CAUTION35✕BLOCK101

Transports

A server can list more than one transport.

Tool risk

46

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

171 agent orchestration servers

97–120 of 171 · ranked by trust score, then stars

PlanExe

planexeorg/planexe

✕BLOCK D

Create a plan from a description in minutes

★ 401Not listed in sourcestreamable-http

RagRabbit

madarco/ragrabbit

✕BLOCK D

Open Source, Self-Hosted, AI Search and LLM.txt for your website

★ 1362 readstdio

open-task-relay-public

lanekingsbery/open-task-relay-public

!CAUTION D

Open-source task commons where AI agents do bounded public-good work, publish evidence, and review results.

★ 02 writestreamable-http

schemagate

ashishsinha1602/schemagate

✕BLOCK D

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.

★ 102Not listed in sourcestdio

orbit-vsx

oaslananka/orbit-vsx

✕BLOCK D

VS Code extension for MCP health, debug-session intelligence, and A2A trust workflows: monitor companion services, inspect Agent Cards, enforce workspace trust, and expose bounded tools to agent mode.

★ 31 read

dibs

Agenxy/dibs

✕BLOCK D

Keeps your agents in the loop about each other. See what the fleet is doing, then message, sync and send files between agents. Dibs reports; it never acts.

★ 221 readstreamable-http

Solana Agent Kit

sendaifun/solana-agent-kit

!CAUTION F

connect any ai agents to solana protocols

★ 1,7138 writestdio

sandbase-harness

sandbaseai/sandbase-harness

✕BLOCK D

Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.

★ 6473 writestdio

hmharness

swsgbl/hmharness

✕BLOCK D

为鸿蒙 (HarmonyOS/OpenHarmony) 开发全流程而生的自进化智能体框架——零依赖内核、自进化一等公民、MCP 生态借力、模拟器与工具链无头全控。Self-evolving agent framework for the full HarmonyOS lifecycle.

★ 42 destructive

A2A ADK

rubenszimbres/a2a_adk_mcp

✕BLOCK F

Multi-Agent Systems with Google's Agent Development Kit + A2A + MCP

★ 22 writestdio

Lunar

thelunarcompany/lunar

✕BLOCK F

lunar.dev: Agent native MCP Gateway for governance and security

★ 5013 destructivesse

skgate

helv-io/skgate

✕BLOCK F

Any MCP server. Anywhere. An OAuth-protected MCP gateway that can also run the servers, plus SI provider proxying with model aliases, and your Grok subscription as an OpenAI-compatible API with no API key.

★ 91 readstreamable-http

@mrrlin-dev/external-agents — Multi-LLM MCP Server

mrrlin-dev/external-agents

✕BLOCK F

One MCP server routes LLM calls across 20+ providers, using round-robin dispatch and fallback to reduce rate-limit interruptions and cut costs up to 100x.

★ 03 writestdio

agenda-intelligence-md

vassiliylakhonin/agenda-intelligence-md

✕BLOCK F

Deterministic evidence-packet checks for AI-generated claims: references, quotes, numbers, and support gaps. CLI, Python, MCP, and review adapters.

★ 817 readstdio

cmuxlayer

EtanHey/cmuxlayer

✕BLOCK F

10 public MCP tools for controlling cmux workspaces and managing Claude, Codex, Gemini, Kiro, and Cursor agents.

★ 282 writestdio

tianshu-mcp

lanlan0811/tianshu-mcp

✕BLOCK F

天枢harness × AI-Agent 编排 MCP server:调度外部 Agent 干活,用运行时证据做客观验收,不通过自动返修闭环。

★ 107 readstdio

nexus-cortex

Spitfire-Products/nexus-cortex

✕BLOCK F

A headless, multi-provider AI agent harness — embed it as a library, script it from the CLI, or run it as a stateful agent server. One orchestrator drives every major LLM provider.

★ 06 destructivestreamable-http

Open Multi Agent

open-multi-agent/open-multi-agent

✕BLOCK F

Self-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.

★ 6,9978 writestreamable-http

www-project-agent-memory-guard

OWASP/www-project-agent-memory-guard

✕BLOCK F

OWASP Foundation web repository

★ 1835 readstdio

Pi

TGYD-helige/pi

✕BLOCK F

Pluggable extension packages for the Pi AI-agent runtime. Each package exposes LLM-callable tools via MCP — covering IM workspace integrations (Lark, DingTalk, WeCom), browser & computer automation, persistent memory, telemetry, task scheduling, image generation, web access, security policies, and m

★ 792 writestdio

proximo

john-broadway/proximo

✕BLOCK F

The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.

★ 522 readstdio

AgentChat

shy2593666979/agentchat

✕BLOCK F

AgentChat 是一个基于 LLM 的智能体交流平台,内置默认 Agent 并支持用户自定义 Agent。通过多轮对话和任务协作,Agent 可以理解并协助完成复杂任务。项目集成 LangChain、Function Call、MCP 协议、RAG、Memory、HITL、Skill、Milvus 和 ElasticSearch 等技术,实现高效的知识检索与工具调用,使用 FastAPI 构建高性能后端服务。

★ 9022 readstdio

Claudexor

razzant/claudexor

!CAUTION F

Multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode: quota-aware rotation across multiple Claude/Codex subscriptions, shared thread context, and cross-model review.

★ 49310 writestdio

triumvirate

michaeljboscia/triumvirate

!CAUTION F

Five AI agents. One coordination layer. No relay server. Plus a trust layer that checks whether the review actually happened.

★ 116 readstreamable-http

Other jobs

By risk

Questions

How do you decide which servers are agent orchestration servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which agent orchestration MCP servers rank highest on trust?
Eino (cloudwego/eino), Minima (dmayboroda/minima) and LangChain.js MCP Adapters (langchain-ai/langchainjs-mcp-adapters), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many agent orchestration servers only read?
45 of the 171 declare tools that all only read; 46 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.