Remote MCP servers
43,000 servers you connect by URL over streamable HTTP. Nothing to install or keep running on your machine.
43,000 servers you connect by URL over streamable HTTP. Nothing to install or keep running on your machine.
A remote MCP server runs on someone else's infrastructure and your client connects to it by URL over streamable HTTP (older servers use SSE). Sign-in usually happens through OAuth in the browser instead of an API key in a config file.
Local servers run as a process on your machine and can reach your files and private network. Remote servers need no runtime and update themselves, but your data goes to the provider. Pick remote for SaaS products, local for files, databases on your network and anything offline.
In Claude Code run claude mcp add --transport http <name> <url>. In Cursor and Gemini CLI add the URL under mcpServers; in VS Code add it under servers with "type": "http". Each server page has the exact config.
Scans and investigates AI supply chains by mapping agents, MCP servers, packages, and their potential reach to identify vulnerabilities.
$claude mcp add agent-bom -- uvx agent-bomEvaluates AI agent proposals against thirteen constitutional floors to provide governed verdicts and auditable receipts before execution.
$claude mcp add arifos-mcp -- uvx arifosChecks and signs every AI agent tool call before it runs, holds risky calls for human approval, and exports tamper-evident records anyone can verify offline.
$claude mcp add --transport http tracekit https://{tracekit_gateway}/mcpVerifies paid AI agent services using signed receipts and real-time measurements to prevent incorrect payments.
$claude mcp add --transport http botsrated https://botsrated.com/mcpProvides threat intelligence by allowing AI agents to retrieve reports for files, URLs, domains, and IP addresses, and submit new analysis requests.
$claude mcp add virustotal-mcp -- uvx vt-mcpProvides cryptographic proof of existence for digital artifacts and AI agent checkpoints via notarized receipts anchored to the NEAR blockchain.
$claude mcp add aotrust-skills -- uvx aotrust-protocolLets an AI client check emails and domains against known data breaches, view breach analytics, and browse breach metrics.
$claude mcp add --transport http xposedornot-api https://api.xposedornot.com/mcpProvides AI agents with live threat intelligence including incident clusters, actor profiles, CVE exploit status, and ransomware leak-site victims.
$claude mcp add threat-intelligence-mcp -- npx -y threatcluster-mcpScans PDFs, Office documents, and RAG inputs for malware exploits, CVEs, and hidden AI prompt injections.
$claude mcp add malwaretracker-mcp -- uvx malwaretracker-mcpActs as a governance proxy between AI agents and MCP servers to enforce allowlists, dry runs, human confirmation, and audit trails.
$claude mcp add mcp-airlock -- uvx mcp-airlockLets an AI client list, inspect, and grant or deny pending CTRLRun approval requests.
$claude mcp add ctrlrun -- uvx ctrlrunLets an AI client run allowlisted, audited commands and structured file edits on Linux, macOS, and Windows hosts.
$claude mcp add --transport http sentinelx-cloud-core https://mcp.sentinelx.app/mcp/mcpEnables AI assistants to query the Vulners vulnerability database for CVE information, security bulletins, and software package auditing.
$claude mcp add vulners-mcp -- uvx vulners-mcpProvides a centralized HTTP gateway for AI agents to perform controlled SSH commands and SFTP file transfers with audit logging and command policies.
$claude mcp add ssh-mcp -- docker run -i --rm ghcr.io/gelse/ssh-mcp:0.3.0Enables AI agents to verify identities, manage credentials, and perform trust scoring across decentralized networks and commerce platforms.
$claude mcp add --transport http moltrust-mcp-server https://api.moltrust.ch/mcpScans Android and iOS applications for security vulnerabilities and generates pentest reports mapped to OWASP MASVS, CWE, and CVSS.
$claude mcp add gomobsec-mcp -- uvx gomobsec-mcpProvides role-based access control to a Qdrant vector database by converting OIDC tokens into scoped Qdrant JWTs.
$claude mcp add qdrant-mcp-rbac -- docker run -i --rm ghcr.io/fidonis/qdrant-mcp-rbac:0.4.1Sign media with C2PA Content Credentials, add invisible watermarks, and verify file origins through an AI assistant.
$claude mcp add mcp -- uvx originalpictures-mcpVerifies AI agent actions through multi-model adversarial consensus and provides signed, cryptographically verifiable decision receipts.
$claude mcp add ethersflow -- npx -y @ethersflow/mcp-serverDetects prompt injection, jailbreaks, and data exfiltration in untrusted text before it reaches an LLM.
$claude mcp add safeprompt -- npx -y @safeprompt.dev/mcp