Live survey286 models · 13 providers · 17,592 auditsAudited Using Git Worktrees · SAFE →What changedHow we verifyllms.txt

MCP servers · by job

Agent orchestration MCP servers

171 MCP servers that coordinate several agents, gateways and agent-to-agent protocols. 35 are SAFE, 35 CAUTION and 101 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “Agent orchestration MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/agents/page/8

Verdicts · 171 servers

✓SAFE35!CAUTION35✕BLOCK101

Transports

  • stdio, runs locally104
  • Streamable HTTP, remote81
  • SSE, legacy remote31
  • Not declared36

A server can list more than one transport.

Tool risk

46

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 12 tools.

Servers with no destructive tools →

171 agent orchestration servers

169–171 of 171 · ranked by trust score, then stars

Agoragentic Integrations

rhein1/agoragentic-integrations

✕BLOCK F

Public adapters and discovery catalog for Triptych OS (Agent OS): agent frameworks, MCP/A2A/x402 protocols, workflows, wallets, SDKs, and examples for execute-first routing, governed handoffs, and receipt-aware agent commerce.

★ 4018 writestdio

javis-os

blogminhquy/javis-os

✕BLOCK F
★ 2221 readstdio

Gateway Registry

agentic-community/mcp-gateway-registry

✕BLOCK F

Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/E

★ 9442 writestdio

Other jobs

Memory & knowledge330Cloud & infra239Code intelligence179Databases155Finance & crypto123Web search121Security119Browser automation116Marketing & analytics95Image, video & audio92Files & storage83Payments65Design tools63Chat & email62Mobile development51Git & code hosting41Project management38Calendar & office35Logs & monitoring33

By risk

Read-only servers1,620No destructive tools3,145Remote servers2,120

Questions

How do you decide which servers are agent orchestration servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which agent orchestration MCP servers rank highest on trust?
Eino (cloudwego/eino), Minima (dmayboroda/minima) and LangChain.js MCP Adapters (langchain-ai/langchainjs-mcp-adapters), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many agent orchestration servers only read?
45 of the 171 declare tools that all only read; 46 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.