MCP servers · by job

Cloud & infra MCP servers

239 MCP servers that operate cloud accounts, containers, clusters and pipelines. 59 are SAFE, 48 CAUTION and 132 BLOCK. Ranked by trust score; each card opens the full audit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Cloud & infra MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/topic/cloud/page/8

Verdicts · 239 servers

✓SAFE59!CAUTION48✕BLOCK132

Transports

A server can list more than one transport.

Tool risk

66

servers expose at least one destructive tool: delete, overwrite or run. The median server with a readable tool list exposes 9 tools.

Servers with no destructive tools →

239 cloud & infra servers

169–192 of 239 · ranked by trust score, then stars

Dense-Mem

markhuangai/dense-mem

!CAUTION F

Self-hosted AI agent memory server with MCP, evidence provenance, typed claims, conflict detection, embeddings, recall, PostgreSQL, and pgvector

★ 396 readstreamable-http

wp-ops

imagewize/wp-ops

✕BLOCK F

CLI and MCP server for WordPress operations — Trellis/Bedrock deployments, backups, security scanning, and monitoring — plus the scripts and guides they wrap

★ 19 writestdio

robopartpicker

brainbook0/robopartpicker

✕BLOCK F

Open robotics project discovery, bill-of-materials compilation and parts sourcing. Source-linked, evidence-first, live at robopartpicker.com.

★ 018 readstreamable-http

Aiquila

elgorro/aiquila

✕BLOCK F

Private AI for your Nextcloud — an MCP server (316 tools), a native Nextcloud app with chat and Coworkers, and one-command Hetzner deployment.

★ 382 readstdio

clawops

dfridkin/clawops

✕BLOCK F

Deploy and operate self-hosted OpenClaw on AWS, GCP, Azure or your own VM, from the command line or from your agent. A CLI and an MCP server over one implementation, with reviewable deploy plans, day-two operations, hardening, and private Tailscale networking.

★ 65 destructivestdio

CareLoop-AI

workatustadarshajay/CareLoop-AI

✕BLOCK F

The foundation flow accepts a doctor's note, uses a Gemini tool-calling agent to save each actionable item as a card in Postgres, and displays all saved cards in the frontend.

★ 06 readstreamable-http

Open Code Review

raye-deng/open-code-review

✕BLOCK F

🤖 AI code quality gate for AI-generated code. Detects hallucinated packages, phantom dependencies, stale APIs, and more. MCP Server + CLI + CI/CD Action.

★ 404 readstdio

Crw

us/crw

✕BLOCK F

Fast, lightweight Firecrawl/Tavily alternative in Rust. Web scraper, crawler & search API with MCP server for AI agents. Drop-in Firecrawl-compatible API (/scrape, /crawl, /search). 2.3x faster than Tavily, 1.5x faster than Firecrawl in 1K-URL benchmarks. 6 MB RAM, single binary. Self-host or use ma

★ 1,0841 readstdio

agent-inspect

rajudandigam/agent-inspect

✕BLOCK F

Local evidence debugger and trajectory-test toolkit for TypeScript AI agents: inspect causal runs, catch wrong tool paths in CI, and share safe offline evidence.

★ 1656 write

Photon

portel-dev/photon

✕BLOCK F

Define intent once. Photon turns a single TypeScript file into CLI tools, MCP servers, and web interfaces.

★ 1002 destructivesse

openagentemail

openagentemail/openagentemail

!CAUTION F

Open communication and task handoffs for AI agents — self-hosted email, task threads, approvals, and webhooks over MCP and REST. Apache-2.0.

★ 491 destructivestdio

multimeter

mshobeyri/multimeter

✕BLOCK F

Multimeter is an AI-powered REST Client and API testing tool for VS Code and CI. It is not an electrical multimeter. YAML .mmt files. testlight CLI. MCP @mmt/mcp. Git-native Postman alternative.

★ 113 writestdio

weave

grunion-ai/weave

✕BLOCK F

Open-source, self-hosted alternative to Airtable, Fibery, Notion databases and ClickUp: a work management database built for AI agents, agent-first (Claude Code, Codex, Cursor, any MCP client). Tables, relations, formulas, rollups, workflows, documents, one SQLite file. REST, CLI, MCP server. Docker

★ 106 destructive

carrick

carrick-tools/carrick

✕BLOCK F

Carrick maps your entire TypeScript codebase across services and repositories, giving AI agents full context on existing types, routes, and function behaviours over MCP before they write duplicate or breaking code.

★ 52 writestreamable-http

Kubectl

rohitg00/kubectl-mcp-server

✕BLOCK F

Published in CNCF Landscape: A MCP server for Kubernetes.

★ 9601 destructivestdio

kleo-mcp

tonnooooo/kleo-mcp

✕BLOCK F

Kleo: remote MCP server that turns a brief into a narrated 4K 60 fps film, realistic or animation, from Claude, ChatGPT, Cursor or any MCP client

★ 02 writestreamable-http

api2ai

OpenSourceAGI/dev-tools-starter-agent

✕BLOCK F

💻⚒️ NPM dev tools and core parts for Full Stack Starter App & Docs 🚀DEMO

★ 389 read

mcp-hangar

mcp-hangar/mcp-hangar

✕BLOCK F

MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.

★ 181 writestdio

PrepDeck

YIzhongyue/PrepDeck

✕BLOCK F

A self-hosted exam prep platform with practice questions, mock exams, AI-powered explanations, and personalized progress tracking, built on Cloudflare.

★ 01 readstreamable-http

TalonHound

spatronn/TalonHound

✕BLOCK F

Self-hosted threat intelligence and IOC management platform

★ 01 destructivestreamable-http

Fonoster

fonoster/fonoster

✕BLOCK F

🚀 The open-source alternative to Twilio.

★ 8,1143 writestdio

Codesteward

codesteward/codesteward

✕BLOCK F

Agentic code review with structural graph intelligence — PR gate + branch stewardship. Self-hosted. Apache-2.0.

★ 213 writestreamable-http

mantle

aotter/mantle

✕BLOCK F

AotterMantle SDK: agent-native CMS runtime, manifests, admin UI, and Cloudflare adapter.

★ 53 read

harborclerk

r0shi/harborclerk

✕BLOCK F

An MCP server that lets AI agents query your document archive instead of uploading it — with OCR, hybrid search, and cited local-AI answers in a private, Mac-native app.

★ 32 writestreamable-http

Other jobs

By risk

Questions

How do you decide which servers are cloud & infra servers?
By the categories each server's own repository declares, mapped onto this job by a hand-kept table. A server can belong to more than one job, and one whose repository declares no matching category is not listed here.
Which cloud & infra MCP servers rank highest on trust?
Minima (dmayboroda/minima), Security Hub (fuzzinglabs/mcp-security-hub) and Yutu (eat-pray-ai/yutu), by trust score and then stars. Ranking never uses popularity to change a verdict.
How many cloud & infra servers only read?
81 of the 239 declare tools that all only read; 66 expose at least one destructive tool.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.