The best remote MCP servers in 2026

If you want a short list: start with GitHub or GitLab for code, Linear or Atlassian for issues, Sentry for errors, Context7 for library docs and Notion for team knowledge. Then add one server for each tool your team already lives in, such as PostHog for analytics, Intercom for support or Semrush for SEO.

Every server on this page is a remote MCP server: an HTTPS endpoint run by the vendor. You add a URL to your AI app, sign in once in the browser and the app gets the server's tools. Nothing to install, no local process to keep running and no API keys pasted into a config file for most of them.

The list is grouped by team, because the "best" server is the one connected to the system where your work already happens. If you're new to MCP, what is an MCP server? explains how they work.

How we picked

• Remote and official. Each server is an HTTPS endpoint published by the vendor itself or by a well-known publisher (DeepWiki from Cognition, Context7 from Upstash, PubMed from Anthropic). No community wrappers around someone else's API, and no servers that only run locally.
• Live-probed on 2026-10-29. We checked every endpoint that day. Servers that use sign-in advertised matching OAuth protected-resource metadata and supported either dynamic client registration or client ID metadata documents, which is what lets an AI app sign in without a pre-registered OAuth client. Servers without sign-in returned their tool list.
• Clear sign-in model. Each entry says whether you sign in with OAuth, use an access token or need nothing at all.
• Useful for a team. We favored servers that read and write shared work (issues, errors, deploys, CRM records, meeting notes) over novelty servers.

Toolstile makes an MCP gateway, so we have a point of view. All of these servers work fine connected directly to Claude Code, Codex, Cursor or Claude Desktop. The last section explains when a gateway helps, and you can skip it if you only use one or two servers.

Quick comparison

Engineering

For a team-level view of these servers in an issue-to-pull-request flow, see Toolstile for engineering teams. If you mainly work in a terminal agent, the shorter best MCP servers for Claude Code list includes setup commands.

GitHub

GitHub's own server finds repositories and code and reads and manages issues and pull requests. It is the server most coding agents end up needing, because the work eventually has to land in a pull request.

• Sign-in: a personal access token sent as a bearer header is the documented path for most clients. Browser sign-in may need a registered OAuth client.
• Try: "List open pull requests in acme/api that touch billing/ and summarize the review comments still unresolved."
• Access tip: give the token only the repositories and scopes the agent needs, and keep merge, delete and settings tools on Require approval or Block.

GitHub MCP server details

Linear

Linear's server finds, creates and updates issues, projects and comments. It works well as the "what should I do next" source for an agent.

• Sign-in: OAuth, or a Linear API key as a bearer token. Linear also documents a read-only endpoint at /mcp/readonly.
• Try: "Take LIN-482, read the comments, and draft a plan. Then post the plan as a comment on the issue."
• Access tip: allow reads and comments. Put issue creation and status changes on Require approval until you trust how the agent files work.

Linear MCP server details

Sentry

Sentry's server searches errors and issues and pulls event context, so an agent can read the stack trace and breadcrumbs instead of you pasting them. Sentry lets you scope the URL to one organization or project (/mcp/<org>/<project>), which also hides discovery tools you do not need.

• Sign-in: OAuth.
• Try: "What are the top three unresolved errors in web-frontend since yesterday's release, and which files do they point to?"
• Access tip: reads are low risk. Require approval for anything that resolves, assigns or changes issue state.

Sentry MCP server details

Vercel

Vercel's server searches Vercel docs, finds projects and deployments, reads build and deployment logs and queries Web Analytics. Vercel says it is available on all plans.

• Sign-in: OAuth. Vercel only accepts clients it has reviewed; Claude Code, Codex, Cursor and Claude Desktop are on its list.
• Try: "Why did the last preview deployment for marketing-site fail? Show me the relevant lines from the build log."
• Access tip: Vercel can now deploy code through MCP. Keep deploy and any purchase or settings tools on Require approval.

Vercel MCP server details

Supabase

Supabase's server inspects database structure, runs queries and works with project development resources such as migrations and branches. Its URL accepts read_only=true, project_ref=<id> and features=<groups> to narrow what the agent can reach.

• Sign-in: OAuth with dynamic client registration. A personal access token works for CI.
• Try: "Look at the orders table and its indexes in the dev project and tell me why this query is slow."
• Access tip: Supabase recommends keeping manual approval on. Use project_ref plus read_only=true for anything near production, and require approval for SQL execution and migrations.

Supabase MCP server details

Context7

Context7, from Upstash, resolves a library name and returns current documentation and code examples for it. It fixes the common problem of an agent writing code against an API that changed a year ago.

• Sign-in: none. Upstash offers a free API key for higher rate limits.
• Try: "How do I configure middleware in the current Next.js version? use context7"
• Access tip: both tools are read-only. Allow them.

Context7 MCP server details

Also worth a look: GitLab for merge requests and pipelines, Datadog for logs, metrics and traces, DeepWiki for questions about public repositories, Railway and Render for deployments, Neon for Postgres branches and Postman for collections and API specs.

Product and analytics

PostHog

PostHog's server queries product analytics and works with feature flags and error insights. Product managers and engineers can ask the same tool different questions.

• Sign-in: OAuth.
• Try: "How many users finished onboarding last week compared to the week before, split by signup source?"
• Access tip: allow analytics queries. Require approval for creating or changing feature flags, since a flag change ships to users.

PostHog MCP server details

Amplitude

Amplitude's server queries events and charts and reviews experiments and dashboards.

• Sign-in: OAuth.
• Try: "Pull the retention chart for users who used the export feature in their first week, and compare it to those who didn't."
• Access tip: reads can stay on Allow. If your account exposes tools that create or edit charts and dashboards, require approval so shared dashboards don't change without anyone noticing.

Amplitude MCP server details

Mixpanel

Mixpanel's server runs segmentation and funnel queries and reviews reports and dashboards.

• Sign-in: OAuth.
• Try: "Build a funnel from Signup to Created Project to Invited Teammate for October and tell me where the biggest drop is."
• Access tip: query tools are the useful part. Allow them and block anything you don't recognise in the tool list.

Mixpanel MCP server details

Productboard

Productboard's server searches notes and customer feedback and reviews features and roadmaps. Useful for "what are customers actually asking for" questions before planning.

• Sign-in: OAuth.
• Try: "Find feedback notes from the last 60 days that mention SSO, group them by theme and link the related features."
• Access tip: customer feedback can include names and emails. Give it to the apps that need it rather than every agent in the workspace.

Productboard MCP server details

Design and content

Canva

Canva's server searches and exports designs and creates new ones from templates.

• Sign-in: OAuth.
• Try: "Find our Q4 webinar template and create three social images with these titles."
• Access tip: creating designs is low risk. Require approval for anything that shares or deletes.

Canva MCP server details

Miro

Miro's server reads board content and creates diagrams and documents on boards. It is handy for turning a messy workshop board into a written summary, or the reverse.

• Sign-in: OAuth.
• Try: "Summarize the sticky notes on the Q1 planning board into themes and owners."
• Access tip: allow reads. Require approval for writes to shared boards that a whole team uses.

Miro MCP server details

Excalidraw

Excalidraw's server sketches hand-drawn style diagrams and exports them to Excalidraw. No account required.

• Sign-in: none.
• Try: "Draw the request flow from the browser through the CDN, API and queue to the worker."
• Access tip: exporting creates a shareable drawing, so check what you put in it before sharing the link.

Excalidraw MCP server details

Webflow

Webflow's server reads and updates CMS collections and manages pages and publishing.

• Sign-in: OAuth.
• Try: "List CMS blog posts with no meta description and draft one for each, but don't publish."
• Access tip: allow CMS reads and drafts. Put publish tools on Require approval, because publishing is the step visitors see.

Webflow MCP server details

Framer

Framer's server reads and updates CMS collections and works with project pages.

• Sign-in: OAuth.
• Try: "Add these five changelog entries to the Changelog collection as drafts."
• Access tip: same as Webflow: edits are fine to allow on a staging project, publishing should need a person.

Framer MCP server details

Marketing, research and sales

For campaign and content workflows built on these, see Toolstile for marketing teams.

Semrush

Semrush's server researches keywords and rankings and analyzes domains and backlinks.

• Sign-in: OAuth.
• Try: "Which keywords does competitor.com rank for in the top 10 that we don't rank for at all?"
• Access tip: the tools are research reads. Give the connection to the people and agents doing research, not every app.

Semrush MCP server details

Similarweb

Similarweb's server reviews website traffic and engagement and compares competitors.

• Sign-in: OAuth.
• Try: "Compare traffic sources for us and our three main competitors over the last six months."
• Access tip: read-only in practice. Allow for research agents.

Similarweb MCP server details

Apify

Apify's server finds and runs Actors (prebuilt scrapers and automations) and reads their datasets and results.

• Sign-in: OAuth.
• Try: "Run a Google Maps scraper for coffee roasters in Portland and give me a table of names, sites and ratings."
• Access tip: running an Actor costs platform credits. Require approval for runs and allow dataset reads.

Apify MCP server details

Attio

Attio's server searches and updates CRM records and lists and creates notes and tasks.

• Sign-in: OAuth.
• Try: "After this call, add a note to the Acme deal with the summary and create a follow-up task for Friday."
• Access tip: allow search and note creation. Require approval for record updates and deletes so pipeline data stays clean.

Attio MCP server details

Stripe

Stripe's server inspects payment data your account permits and searches Stripe documentation.

• Sign-in: OAuth, or a Stripe key as a bearer token. A restricted key limits what the server can touch.
• Try: "Which customers had a failed renewal payment this week, and what were the decline reasons?"
• Access tip: block or require approval for anything that creates refunds, payment links or changes subscriptions. Docs search can stay on Allow.

Stripe MCP server details

Support

Support teams usually want read access across the help desk, docs and bug reports, and very few write tools. Toolstile for support teams walks through that setup.

Intercom

Intercom's server searches conversations and tickets and reads contact details.

• Sign-in: OAuth.
• Try: "Find conversations from the last two weeks that mention the CSV export bug and list the affected workspaces."
• Access tip: contact details are personal data. Limit this server to support and product apps that need it.

Intercom MCP server details

Help Scout

Help Scout's server searches conversations, customers and Docs articles.

• Sign-in: OAuth.
• Try: "Does any Docs article cover resetting two-factor auth? If not, draft one from the last five conversations about it."
• Access tip: allow search. Anything that replies to a customer should need approval.

Help Scout MCP server details

Jam

Jam's server reads Jam bug reports along with their console logs, network requests and user events. It closes the gap between support filing a bug and engineering reproducing it.

• Sign-in: OAuth.
• Try: "Open this Jam link, find the failing network request and tell me which API route returned the error."
• Access tip: reports can include request data from a customer session. Allow reads only for the apps that triage bugs.

Jam MCP server details

Guru

Guru's server searches knowledge cards and answers questions from verified content.

• Sign-in: OAuth.
• Try: "What is our current refund policy for annual plans? Cite the card."
• Access tip: read-only use covers most of the value. Allow it.

Guru MCP server details

Productivity and knowledge

Notion

Notion's server searches content you have access to and reads and updates pages and databases.

• Sign-in: OAuth.
• Try: "Find the RFC for the new billing model, summarize the open questions and add them to the Decisions database."
• Access tip: allow search and page reads. Require approval for edits to shared databases, and block moves or deletes if the tool list includes them.

Notion MCP server details

Atlassian

Atlassian's server covers Jira issues and Confluence content through one connection.

• Sign-in: OAuth.
• Try: "Find Jira issues in PAY that are blocked, and link any Confluence pages that mention them."
• Access tip: allow search across both products. Require approval for creating or transitioning Jira issues and editing Confluence pages.

Atlassian MCP server details

Granola

Granola's server searches your meeting notes and reads transcripts and summaries.

• Sign-in: OAuth.
• Try: "What did we agree with Acme about the migration timeline across our last three calls?"
• Access tip: meeting notes are some of the most sensitive data in a company. Connect it per person rather than as a shared account. Fireflies, Fathom, Otter and Read AI are in the catalog if you use those instead.

Granola MCP server details

Todoist

Todoist's server adds and completes tasks and reviews projects and due dates.

• Sign-in: OAuth.
• Try: "Turn the action items from this meeting summary into Todoist tasks in the Launch project, due next week."
• Access tip: allow adding tasks. Require approval for completing or deleting them.

Todoist MCP server details

Airtable

Airtable's server searches and updates records and inspects bases and table schemas.

• Sign-in: OAuth.
• Try: "In the Content Calendar base, find posts scheduled next month with no owner and suggest assignments."
• Access tip: allow schema and record reads. Require approval for record updates on bases other teams depend on.

Airtable MCP server details

Zapier

Zapier's server runs actions you configure in Zapier across its connected apps, which covers tools that have no MCP server of their own.

• Sign-in: OAuth.
• Try: "Add this lead to the 'Webinar signups' Google Sheet, then send them the welcome email."
• Access tip: each configured action can write to a different app. Configure only the actions you need in Zapier, then require approval for the ones that send messages. Make and Pipedream fill the same role. ClickUp, monday.com and Basecamp are in the catalog for project tracking.

Zapier MCP server details

Data and search

Exa

Exa's server searches the web and fetches clean page content. Exa documents free, rate-limited use with no sign-in and no API key. Signing in with OAuth or an API key bills usage to your Exa team and enables more tools.

• Sign-in: none required.
• Try: "Find recent engineering blog posts about Postgres logical replication at scale and summarize the approaches."
• Access tip: allow both default tools. Fetched pages are untrusted text, so keep write tools from other servers on Require approval in the same session.

Exa MCP server details

Tavily

Tavily's server searches the web and extracts and crawls pages.

• Sign-in: OAuth.
• Try: "Crawl the pricing pages of these four competitors and put the plan names and prices in a table."
• Access tip: crawling uses more credits than a single search. Require approval for crawl if you are on a tight plan.

Tavily MCP server details

Jina AI

Jina's server reads URLs, captures screenshots and searches the web, arXiv and images.

• Sign-in: none, or a Jina API key as a bearer token.
• Try: "Read this arXiv paper and list the datasets it evaluates on."
• Access tip: read-only. Allow it.

Jina AI MCP server details

Hex

Hex's server searches and runs Hex projects and answers questions against your data.

• Sign-in: OAuth.
• Try: "Using the revenue model project, what was net revenue retention by plan last quarter?"
• Access tip: queries run against your warehouse with your permissions. Give it to analysts' apps, not every agent.

Hex MCP server details

ClickHouse

ClickHouse's server explores databases and tables and runs analytical SQL on ClickHouse Cloud services.

• Sign-in: OAuth.
• Try: "Which ten customers sent the most events yesterday, and how does that compare to their 30-day average?"
• Access tip: connect with a read-only database user where you can. MotherDuck, Axiom and Dune are in the catalog if your data lives there.

ClickHouse MCP server details

How to connect several MCP servers without repeating setup

Connecting one server directly is quick. The repetition starts with the fifth server and the third app: each app on each machine needs every server added, signed in and kept current, and each one can see every tool the server offers.

Toolstile puts those connections in one workspace:

1. Connect each server once. Add GitHub, Linear, Sentry or any HTTPS MCP server in Toolstile and sign in there. See connections.
2. Point every app at one URL. Claude Code, Codex, Cursor and Claude Desktop each add https://toolstile.com/mcp and sign in through the browser. See connect your agent.
3. Choose tools per app. Each app authorization starts with no access. For every tool you choose Allow, Require approval or Block, so Claude Code on your laptop and Codex on a build machine can have different access to the same server. See permissions and the MCP allowlist guide.

The servers above work the same either way. Getting started takes a few minutes, and the Free plan includes 5,000 operations a month. See pricing for the rest.

FAQ

What is a remote MCP server?

An MCP server that runs on the vendor's infrastructure and is reached over HTTPS, usually with the Streamable HTTP transport. Your AI app connects to a URL and signs in, instead of starting a local process with npx or Docker. The vendor maintains it, so you get updates without reinstalling anything.

Are remote MCP servers free?

The server itself usually comes with the product, and what you can do through it follows your plan with that vendor. Some need no account at all: in this list, Context7, DeepWiki, Excalidraw and Jina AI need no sign-in, and Exa documents a free, rate-limited mode with no key. Vercel says its server is available on all plans. Paid data products like Semrush or Similarweb still need a subscription that includes the data you query.

Should I use a local or a remote MCP server?

Use a remote server when the vendor offers one. Sign-in, updates and tool changes are handled by the vendor, and you don't keep long-lived API keys in config files. Local servers still make sense for things that must run on your machine, such as filesystem access, a local database or a browser you control.

How many MCP servers is too many?

There is no fixed number, but every connected tool's name, description and input schema is sent to the model, and that takes context before you've asked anything. Some servers expose dozens of tools, and Postman's full set has more than a hundred. Once an agent sees a long tool list it is also more likely to pick the wrong one. Connect the servers a given app needs, turn off tools it never uses and prefer the scoped or read-only endpoints vendors provide.

Are MCP servers safe?

The official servers here use OAuth or tokens you control, and they act with your account's permissions. The main risk is prompt injection: an issue, web page or support ticket can contain text that tries to get the agent to call another tool. Supabase and Vercel both warn about this in their MCP docs. Keep read access broad and write access narrow, require approval for anything that sends, deploys, deletes or spends money and read our security overview for how Toolstile handles credentials.