MCP servers with network access tool metadata
·
32,143 flagged
·
inferred
Servers whose tools appear to make outbound network requests — fetching URLs, calling APIs, uploading data. On its own this is routine; combined with private-data access it is the exfiltration leg of the lethal trifecta. Inferred from tool metadata, not attested.
Cr-GH0 Browserless MCP and CLI controls for Chaoxing Learning
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
stdio C 500t
☆
compare
NovaLux12 The definitive Spotify MCP server — full non-deprecated Web API coverage, paginated everything, podcast-first, tested end to end
filesystem
(inferred)
network
(inferred)
stdio A 500t
☆
compare
RoyAzran The open-source marketing MCP server -- Google Ads, Meta Ads, GA4, Search Console, Tag Manager, WordPress and more from any MCP client.
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
stdio C 500t
☆
compare
kh0pper Modular, agentic framework and MCP platform you self-host. Build and run your own AI agents, connect Claude Code, Claude Desktop, or Cursor as a native MCP connector, self-host your apps, and share over encrypted P2P — on hardware you own, with local or cloud models. Open source.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
untrusted content
(inferred)
stdio C 500t
☆
compare
salitronic Open-source MCP server that lets an AI drive a live session of Altium Designer, and optionally KiCad or EasyEDA Pro, editing the open design in place while you watch. 300+ tools: schematic, PCB, library and project automation, design review, audits, rendering, auto-placement, panelization, autonomous design-plan executor. Apache-2.0.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
stdio B 500t
☆
compare
maintainer unknown Google SecOps SOAR MCP server
filesystem
(inferred)
network
(inferred)
stdio B 500t
☆
compare
secure-ssid Low-token HPE Networking MCP router for Aruba Central, GreenLake, migrations, optional products, RAG, and exact API lookup
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio C 500t
☆
compare
google no description
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
stdio C 499t
☆
compare
github Pantani/tdmcp
verified — a relayed third-party claim (registry/vendor), not the
observatory's own endorsement
Pantani TouchDesigner MCP server, describe a visual to Claude, Cursor or Codex and it builds a real, playable node network (audio-reactive, generative, particle, 3D, feedback) with live knobs + MIDI/OSC/DMX, then checks for errors and previews its own work.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
untrusted content
(inferred)
stdio B 498t
☆
compare
maintainer unknown graph8 MCP server - GTM operations for AI agents
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio B 495t
☆
compare
timmeck Brain Ecosystem — Self-learning MCP servers for Claude Code (monorepo)
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
untrusted content
(inferred)
stdio C 492t
☆
compare
Mcp-Brasil MCP Server para 70 APIs públicas brasileiras
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
stdio B 491t
☆
compare
cisco-ai-defense Scan MCP servers for potential threats & security findings.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
untrusted content
(inferred)
stdio D 490t
☆
compare
uber ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio D 486t
☆
compare
maintainer unknown Python SDK and MCP server for typed Lightbulb business processes, connectors, and custom agentic workflows
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio C 484t
☆
compare
SimplerDevelopment Open-source multi-tenant SaaS platform: admin + client portal + per-tenant sites + CRM + Company Brain (AI/RAG) + automations + Google Workspace + Stripe billing. Next.js 16, React 19, Drizzle/Postgres. Self-host or managed hosting.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
untrusted content
(inferred)
streamable-http D 482t
☆
compare
hritvikgupta Talk to your cloud — an open-source AI agent that reads your code, operates AWS & GCP, and opens PRs. Self-hostable.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
untrusted content
(inferred)
stdio C 480t
☆
compare
github mindstone/mcp-servers
verified — a relayed third-party claim (registry/vendor), not the
observatory's own endorsement
mindstone MCP server for Apple Shortcuts via the macOS shortcuts CLI
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
secrets
(inferred)
stdio C 479t
☆
compare
github dreamrec/LivePilot
verified — a relayed third-party claim (registry/vendor), not the
observatory's own endorsement
dreamrec Talk to Ableton Live 12 through your AI client. Build, edit, listen, compare, and learn from your choices — 474 tools across 57 domains.
filesystem
(inferred)
shell / exec
(inferred)
network
(inferred)
database
(inferred)
stdio C 474t
☆
compare
akelaonline Self-hosted MCP server to operate Google Ads (API v25) and Google Merchant Center from Claude — read/write with human confirmation, MCC isolation, and audit logging.
filesystem
(inferred)
network
(inferred)
secrets
(inferred)
database
(inferred)
stdio B 462t
☆
compare