MCP servers · by job

Agent orchestration MCP servers

171 MCP servers that coordinate several agents, gateways and agent-to-agent protocols. 35 are SAFE, 35 CAUTION and 101 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Agent orchestration MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/agents/page/7

Verdicts · 171 servers

✓SAFE35!CAUTION35✕BLOCK101

Transports

A server can list more than one transport.

Tool risk

46

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

171 agent orchestration servers

145–168 of 171 · ranked by trust score, then stars

engram

aiconnai/engram

✕BLOCK F

MCP memory server for Claude Code, Cursor and AI agents - Rust local-first AI memory with hybrid search, SQLite, knowledge graph and Python/TypeScript SDKs

★ 123 destructive

Mcphub

samanhappy/mcphub

✕BLOCK F

Self-hosted MCP gateway and control plane for connecting, controlling, and operating MCP servers.

★ 2,4652 destructivesse

mcp-memory-service

doobidoo/mcp-memory-service

✕BLOCK F

Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.

★ 1,9991 destructivestdio

runx

runxhq/runx

✕BLOCK F

the governed runtime for agent skill workflows, off the leash but on the record

★ 981 destructivestdio

AgentStack

ssdeanx/agentstack

✕BLOCK F

AgentStack is a production-grade multi-agent framework built on Mastra, delivering 50+ enterprise tools, 25+ specialized agents, and A2A/MCP orchestration for scalable AI systems. Focuses on financial intelligence, RAG pipelines, observability, and secure governance. ACP Openclaw, Gemini CLI, Openco

★ 446 write

Agency Orchestrator

jnmetacode/agency-orchestrator

✕BLOCK F

🚀 One sentence → your one-person company of AI experts → complete deliverable in minutes. 276 CN + 184 EN + 5 more languages (ko/ru/pt-BR/id/ar) · zero-code YAML · auto-verified acceptance · Web Studio / Desktop / Docker · 15 LLM providers (11 key-free). 一句话组建你的「一人公司」AI 专家团队,几分钟交付完整方案;验收自动核验,网页 / 桌面

★ 2,2881 writestdio

unified-ai-system

happy520ai/unified-ai-system

✕BLOCK F

Self-hosted model routing gateway and agent control plane for OpenAI, Anthropic, Gemini and A2A agents behind one OpenAI-compatible API, protocol-first. MCP server security, governed tools, prompt enhancement, virtual-key budgets, cache, observability, audit chain and agent governance. Zero-key loca

★ 818 writestdio

swarmmemo

Hugo0/swarmmemo

✕BLOCK F

The message board for agent swarms. Post from anywhere: HTTP, MCP, DNS, netcat, Gemini, email, Nostr. Public rooms, private messages, paid tasks, a Bitcoin-anchored record.

★ 13 writestdio

Cotal

Cotal-AI/Cotal

✕BLOCK F

The open standard for agent coordination

★ 3241 destructivestdio

orgx-mcp

useorgx/orgx-mcp

✕BLOCK F

Organizational memory and agent orchestration MCP. Remember decisions, artifacts, tasks, and project context across Claude, ChatGPT, Cursor, and other agents.

★ 21 destructivesse

Dunetrace

dunetrace/dunetrace

✕BLOCK F

The runtime reliability layer for AI agents.

★ 681 writesse

nimblebrain

NimbleBrainInc/nimblebrain

✕BLOCK F

Self-hosted platform for MCP Apps and agent automations — tools, interactive UIs, scheduled runs, multi-agent delegation.

★ 256 destructivesse

SmythOS

smythos/sre

✕BLOCK F

The SmythOS Runtime Environment (SRE) is an open-source, cloud-native runtime for agentic AI. Secure, modular, and production-ready, it lets developers build, run, and manage intelligent agents across local, cloud, and edge environments.

★ 1,2921 destructivesse

BuildersGate

Thepizzapie/BuildersGate

✕BLOCK F

Agentic game development for building games with AI Agents. Run one session per seat: art, gameplay, narrative, QA, audio, tech all in 1 spot

★ 294 write

aziel-runtime

AzielEliab/aziel-runtime

✕BLOCK F

Aziel Runtime by Aziel Eliab — FragGate MCP Softwares door. https://aziel-runtime.vibelock.workers.dev/ · OpenAPI+MCP · Glama · hubs azieleliab.com · corpus · godlock.uk · HDJ.

★ 22 writestreamable-http

workbench

amarthaid/workbench

✕BLOCK F

One MCP endpoint. Every tool your agent needs. Self-hosted, per-user OAuth. 20+ SaaS integrations and invite you to add more.

★ 69 destructivestreamable-http

Memory Service

doobidoo/mcp-memory-service

✕BLOCK F

Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.

★ 1,9541 destructivestdio

Agent Security Harness

msaleme/red-team-blue-team-agent-fabric

✕BLOCK F

AI agent security harness, adversarial testing: 640 executable tests in the v4.26.1 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17,

★ 326 readstdio

agentix-cli

anis-marrouchi/agentx

✕BLOCK F

Self-hosted AI agents for small teams. Route Telegram, WhatsApp, GitHub, GitLab, crons, webhooks and mesh tasks to agents on Claude Code, Codex, OpenCode or any LLM API. Web dashboard + CLI. MIT.

★ 132 destructive

shieldcortex

Drakon-Systems-Ltd/ShieldCortex

✕BLOCK F

Memory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.

★ 255 destructivestdio

One MCP

1mcp-app/agent

✕BLOCK F

A unified Model Context Protocol server implementation that aggregates multiple MCP servers into one.

★ 5093 destructivesse

Digital Twins

pome-sh/digital-twins

✕BLOCK F

Test mode for your integrations, built for the way agents build

★ 211 destructivestreamable-http

Theokit Sdk

usetheokit/theokit-sdk

✕BLOCK F

Open-source TypeScript SDK and agent runtime you own end to end. Agent.create / prompt / stream / resume, 43 LLM providers on your own keys, MCP with OAuth PKCE, subagents, workflows, evals, memory, and a bubblewrap+seccomp kernel sandbox for tool execution. Local-first, opt-in cloud, Apache-2.0.

★ 313 writestdio

Nora

solomon2773/nora

✕BLOCK F

Open-source, self-hosted control plane for OpenClaw and Hermes AI-agent fleets on Docker/Kubernetes — REST, CLI, and MCP.

★ 571 destructivestdio

Other jobs

By risk

Questions

How do you decide which servers are agent orchestration servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which agent orchestration MCP servers rank highest on trust?
Eino (cloudwego/eino), Minima (dmayboroda/minima) and LangChain.js MCP Adapters (langchain-ai/langchainjs-mcp-adapters), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many agent orchestration servers only read?
45 of the 171 declare tools that all only read; 46 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.