Search across 485 pages

Try a tool name, category, or "lifetime deal"

Best MCP Servers: The Complete Ranked List

MCP servers ranked on real adoption, maintenance, trust and security data from the official registry, with install snippets for four AI clients.

TL;DR: This best MCP servers list ranks 250 Model Context Protocol servers from the official MCP Registry on real adoption data. Top of the list on our composite quality score is Repowise at 96/100; the most-downloaded is Chrome DevTools MCP at 1,051,748 weekly package downloads. 168 of 250 (67%) are first-party servers built by the vendor whose product they connect to, and every one carries copy-paste install snippets for 4 AI clients.

Last updated: 11 September 2026. Data pulled: 11 September 2026, from the official MCP Registry plus the GitHub API, npm, PyPI and the GitHub Advisory Database. Servers ranked: 250. Combined weekly package downloads: 3,897,997.

Data note. GitHub enrichment covers 246 of the 250 servers in this build, so star counts, licences and release history are reported directly from the GitHub API.

An MCP server is a program that exposes tools, data and prompts to AI applications through the Model Context Protocol, the open standard Anthropic released in November 2024. It is the adapter that lets Claude, Cursor, VS Code or ChatGPT read from and act on an external system without integration code written for that one system. The same server works across AI apps, which is the whole reason LLMs converged on one protocol instead of a connector per vendor.

Most MCP lists are a copy of somebody’s GitHub “awesome” file. This one is built from the official registry and enriched with adoption, maintenance and security data, so you can compare servers rather than just discover them.

The numbers worth quoting

  • 250 MCP servers ranked as of 11 September 2026 across 11 categories. 57 of them (23%) ship an MCP-specific npm or PyPI package, together drawing 3,897,997 downloads a week.
  • Chrome DevTools MCP is the most downloaded MCP server at 1,051,748 a week, 27.0% of attributable download volume. The top three take 56.7% and the top ten 86.8%.
  • 26 servers are excluded from those download totals because their package is a wider library rather than the MCP server, setting aside 4,015,103 weekly downloads (51% of the raw sum). Most MCP rankings sum these in.
  • 168 of 250 (67%) are first-party, published under a registry-verified namespace the vendor owns. They account for 82.1% of download volume.
  • Developer Tools is the biggest category at 81 servers (32%), followed by Search & Web at 50.
  • 162 of 250 run over stdio as a local process. Only 109 (44%) offer Streamable HTTP, and just 93 publish a hosted remote endpoint.
  • All 250 servers ship install snippets for Claude Desktop, Cursor, VS Code and Claude Code, so adding any of them is a copy-paste.
  • 99 publish to npm and 58 to PyPI, which is why Node and Python are effectively the two runtimes of the MCP ecosystem.
  • 52 security advisories on record across 17 of the 250 servers. 126 servers (50%) have no known advisory, 15 carry only patched ones, two carry an unpatched one and are named in the security section below, and 107 cannot be checked at all because they publish no queryable package.
  • Maintenance is strong: median 1 days since the last update, 227 servers (91%) updated within 30 days, and none untouched for over a year.
  • Three servers are flagged deprecated in the registry and are shown rather than hidden, because a deprecated server still appears in search results elsewhere.

Every figure is reproducible from the tables below. Methodology and citation line at the bottom.

What is an MCP server, and what does this list cover?

An MCP server is a small program that wraps a system, a database, a GitHub repo, a Slack workspace, a browser, and exposes it to an AI client through three primitives: tools the AI can call, resources it can read, and prompts it can reuse. The client talks to it over JSON-RPC, either locally over stdio or remotely over Streamable HTTP. The point of the MCP protocol is that it lets you connect AI securely to a system once and reuse that connection from any client, rather than teaching each LLM about each service.

Inclusion here is automatic. A server is ranked when it appears in the official MCP Registry with a description and a working install method (an npm, PyPI, OCI or NuGet package, or a public remote URL), and clears an adoption floor. Servers marked deleted are excluded; servers marked deprecated are kept and badged, because you deserve to know a thing is deprecated rather than simply not find it.

Most of this is open-source MCP work, built by people who wanted their own AI assistant to reach one more system. One thing this list does that a GitHub “awesome” file cannot: it tells you whether the vendor built the server themselves. That distinction matters more than any score, and it gets its own section below.

How do MCP servers work?

Three roles, and mixing them up is the usual source of confusion. The host is the AI application you already use, Claude Desktop or Cursor or VS Code.

Inside it runs an MCP client, one per connection. The MCP server is the separate program on the other end of that connection, wrapping the thing you want the model to reach.

The client and server speak JSON-RPC over one of two transports. Local servers run over stdio, meaning the host launches the server as a subprocess and talks to it through standard input and output.

Remote servers run over Streamable HTTP against a URL. In this build 162 of 250 servers are stdio and 109 support HTTP.

Once connected, the server advertises what it can do through three primitives. Tools are functions the AI model can call, a SQL query, a pull-request comment, a file write. Resources are data it can read, a file tree or a schema. Prompts are reusable templates the server ships, so a good prompt for the job arrives with the server instead of being something you have to work out.

The sequence is worth internalising because it explains the security model. The client asks the server what it offers, the model decides in natural language which tool to call, the client executes that call, and the result comes back into the model’s context.

The model never touches your system directly. It asks a program you installed to do it, which is why what that program is allowed to do matters more than which model you are running.

What do people use MCP servers for?

The category table further down shows where the supply is. What the supply is for clusters into five jobs, and knowing which one you have is the fastest way to narrow 250 servers to three.

AI coding. The largest use by a wide margin. A developer MCP server lets an assistant interact with repositories, read issues, open pull requests and run builds, so the model works against your actual codebase rather than a pasted snippet. This is what Developer Tools covers, at 81 servers.

Querying live data. A database or analytics server turns a natural-language question into SQL against your real schema, and a cloud platform server does the same for infrastructure state. The value is that the answer is real-time rather than whatever was true when the model was trained. Each connected data source is one more thing the model can check instead of guess.

Giving an assistant memory. Vector stores and knowledge-graph servers act as a persistent knowledge base across sessions, which is what the AI and memory category exists for. It is also the category where the most interesting community work is happening.

Automation across tools. An AI agent with three or four servers connected can run a workflow end to end: read a ticket, query the database, post the summary to Slack. Managing MCP servers becomes a real task at that point, and multiple AI clients sharing one set of them is the case the remote endpoints exist for. This is where MCP stops being a convenience and starts being infrastructure, and it is also where the credential scoping in the vetting section matters most.

Reaching the open web. Search, fetch and browser servers extend AI capabilities past the training cutoff, which is the single most common reason people install their first server.

If none of those is your job, the honest answer is that you may not need an MCP server yet. The protocol is plumbing, and plumbing is only worth installing when there is something to connect.

Is an MCP Server Similar to a REST API?

It is the question that comes up most, and the honest answer is that an MCP server is not a REST API with extra steps: the two operate at different layers. An API is the outlet. MCP is the standard plug.

A REST API is service-specific. Stripe’s API and GitHub’s API are both HTTP, both JSON, and entirely different shapes, so every AI integration has to be written once per service and rewritten whenever either side changes.

An MCP server wraps a system, often by calling that same REST API underneath, and exposes it through one protocol every MCP client already speaks. Write the adapter once, and Claude, Cursor, VS Code and ChatGPT all get the integration.

Three differences that matter in practice:

  1. Discovery is built in. An MCP client asks a server what tools it has at runtime. A REST client has to be told in advance, usually by a developer reading documentation.
  2. The description is written for a model, not a developer. Each tool ships a natural-language description the LLM uses to decide when to call it. An OpenAPI spec describes shape, not intent.
  3. It is stateful and bidirectional. A server can hold a session, stream results, and ask the client for input. REST is request and response.

MCP is not a replacement for your APIs, and it is not a microservice architecture. It is a thin, standardised layer that sits in front of whatever you already have so an AI agent can use it without integration code written for that one service.

If you have one AI client and one service to connect, a direct API call is simpler. The protocol earns its keep at the point where you have several of each.

The Most-Downloaded MCP Servers

There is no universal install counter for the Model Context Protocol, so weekly npm and PyPI download counts are the closest available proxy for a server actually being pulled into real projects. They measure installs rather than bookmarks, which is why they sit alongside stars in the adoption pillar rather than behind them.

Two caveats set the scope of this section, and the second one is the reason our numbers are lower than you will see elsewhere.

Downloads only exist for servers distributed as a package. A remote-only server behind a hosted URL, or one shipped solely as a container image, has nothing for npm or PyPI to count, so it is absent here rather than sitting at zero.

We do not count a download unless the package is the MCP server. Many registry entries point at a general-purpose library that merely also exposes an MCP server, and its download count measures the whole library. The largest single case is browser-use, whose registry entry points at `browser-use`: those 1,721,514 weekly downloads are people installing that library, the overwhelming majority of whom never touch its MCP server. Counting it would be the download equivalent of crediting a server with its parent project’s GitHub stars, which is why the engine already rejects borrowed stars and why we reject borrowed downloads on the same principle.

So 26 servers are excluded from every download total in this report, setting aside 4,015,103 weekly downloads, 51% of the raw sum. They appear in the full list with their download cell marked library-wide rather than as a number that is not comparable to the rest. What remains is 57 servers (23% of the list) whose package is the MCP server itself, drawing 3,897,997 downloads a week between them.

Every download figure and percentage below is computed over that subset. If you see an MCP ranking where a single server holds the overwhelming majority of all downloads, it has almost certainly summed the libraries.

One further limit we cannot correct: a few vendors ship many servers through a single shared package, so that package’s downloads are attributed to the one server the registry attaches it to rather than split across the family.

Most-downloaded MCP servers Chrome DevTools MCP 1,051,748 weekly downloads; Context7 871,893 weekly downloads; Amazon ECS MCP Server 286,535 weekly downloads; Amazon EKS MCP Server 286,535 weekly downloads; AWS MCP Server 286,535 weekly downloads; AWS MCP Server 286,535 weekly downloads; Supabase 97,145 weekly downloads; ha-mcp 90,471 weekly downloads; gitlab-mcp 65,694 weekly downloads; sentry-mcp 59,130 weekly downloads; ClickHouse 58,094 weekly downloads; nx-console 55,721 weekly downloads. Weekly package downloads, the sound adoption signal here npm and PyPI weekly downloads. Log-free scale, so the leader’s dominance is visible as-is. Chrome DevTools MCP 1.1M Context7 871.9k Amazon ECS MCP Server 286.5k Amazon EKS MCP Server 286.5k AWS MCP Server 286.5k AWS MCP Server 286.5k Supabase 97.1k ha-mcp 90.5k gitlab-mcp 65.7k sentry-mcp 59.1k ClickHouse 58.1k nx-console 55.7k
Chrome DevTools MCP alone is 27.0% of the weekly downloads across the 57 servers whose package is the MCP server itself. Downloads count package installs, so a server pulled into CI or a container image every week counts heavily, which is exactly the behaviour that signals real production use.
RankMCP serverCategoryWeekly downloadsFirst-partyUpdatedQuality
1Chrome DevTools MCPDeveloper Tools1,051,748First-party0d ago93/100
2Context7Productivity871,893First-party1d ago94/100
3Amazon ECS MCP ServerCloud286,535First-party213d ago71/100
4Amazon EKS MCP ServerCloud286,535First-party225d ago71/100
5AWS MCP ServerCloud286,535Community211d ago68/100
6AWS MCP ServerCloud286,535Community280d ago68/100
7SupabaseDatabases97,145First-party0d ago90/100
8ha-mcpAI & Memory90,471First-party0d ago87/100
9gitlab-mcpDeveloper Tools65,694Community2d ago85/100
10sentry-mcpDevOps & Monitoring59,130First-party0d ago85/100
11ClickHouseDatabases58,094First-party1d ago89/100
12nx-consoleAI & Memory55,721First-party0d ago88/100
13nx-mcpAI & Memory55,721First-party0d ago88/100
14mongodb-mcp-serverDatabases54,247First-party0d ago88/100
15XcodeBuildMCPProductivity50,636First-party0d ago90/100

Read download counts for what they are even after that filtering. A server pulled into a CI pipeline or rebuilt into a container image every week racks up downloads fast, which is a genuine signal of production use but not the same as a headcount of humans. Chrome DevTools MCP at 1,051,748 a week is well clear of the rest of the field, and servers wired into automated environments get re-installed on every run.

The median packaged server gets 4,078 downloads a week. So the distance between the leader and the middle of the pack is several orders of magnitude, and most MCP servers are still early.

The best MCP servers by quality score

RankMCP serverCategoryQuality scoreWeekly downloadsFirst-partySecurity
1RepowiseProductivity96/100not reportedFirst-partyNo known advisory
2Context7Productivity94/100871,893First-partyNo known advisory
3CCXTFinance94/100not reportedFirst-partyNo known advisory
4mcp-server-browserSearch & Web94/100not reportedFirst-partyNo known advisory
5mcp-server-commandsDeveloper Tools94/100not reportedFirst-partyNo known advisory
6mcp-server-filesystemProductivity94/100not reportedFirst-partyNo known advisory
7mcp-server-searchSearch & Web94/100not reportedFirst-partyNo known advisory
8Chrome DevTools MCPDeveloper Tools93/1001,051,748First-partyAdvisory, patched
9Codebase MemoryAI & Memory93/1005,825CommunityNo known advisory
10browser-useSearch & Web93/100library-wideFirst-partyAdvisory, patched
11World MonitorOther93/100not reportedFirst-partyNot checked
12Scrapling MCP ServerCloud93/100not reportedCommunityNo known advisory
13apify-mcp-serverOther93/100not reportedFirst-partyNot checked
14playwright-mcpSearch & Web92/100not reportedFirst-partyAdvisory, patched
15Serena MCP: the IDE for your agentDeveloper Tools92/100library-wideFirst-partyAdvisory, patched

This ranking weighs adoption alongside maintenance, growth, trust and security, so it surfaces servers that are well run rather than only widely installed.

Quality scores here run from 68 to 96 with a median of 83 and a mean of 83.6. That is a wider spread than the model or extension lists we publish, because MCP is young: the difference between a vendor-maintained server with a licence and a repo, and a weekend project published to the registry, is large and the score reflects it.

How is the quality score calculated?

Five weighted pillars: adoption 35%, maintenance 25%, growth 15%, trust 15%, security 10%.

How the MCP Quality Score is calculated Five weighted pillars: adoption 35 percent, maintenance 25 percent, growth 15 percent, trust 15 percent, security 10 percent. Worked on Repowise: 31.1 plus 25.0 plus 15.0 plus 15.0 plus 10.0 equals 96.1, rounding to 96. Five pillars, worked on Repowise Raw popularity feeds Adoption but does not dominate: maintenance, trust and security together outweigh it. 35% 25% 15% 15% 10% Adoption stars + weekly downloads 89 × 0.35 = 31.15 Maintenance update recency, releases 100 × 0.25 = 25 Growth 30-day star trend 100 × 0.15 = 15 Trust first-party, licence, repo 100 × 0.15 = 15 Security known advisories 100 × 0.10 = 10 31.1 + 25 + 15 + 15 + 10 = 96.1 rounds to a Quality Score of 96 / 100
The same formula runs on all 250 servers.
  • Adoption (35%) is a composite proxy, stated plainly. Adoption blends weekly package downloads with GitHub stars, both log-scaled. MCP has no universal usage metric, so this is never presented as an exact install count.
  • Maintenance (25%) is how recently the server was updated, plus its release cadence.
  • Growth (15%) is the 30-day trend, computed from our own stored snapshots, so it appears only once enough history exists. A server with no history shows no trend rather than a fabricated number.
  • Trust (15%) is structural: a first-party namespace, an open-source licence, and a public repository.
  • Security (10%) maps each server’s npm or PyPI package to the GitHub Advisory Database. A server with no queryable package, remote-only or container-only, shows “not checked” rather than a false all-clear.

No server pays to be listed or ranked, and there are no affiliate links anywhere on this page.

First-Party or community? The signal that matters most

168 of 250 servers (67%) are first-party: published under a reverse-DNS or GitHub-organisation namespace the registry verified as belonging to the vendor. The other 82 (33%) are community builds.

First-party versus community MCP servers 168 of 250 servers are first-party vendor publications and 82 are community builds. First-party servers account for 82.1 percent of attributable weekly downloads. First-party versus community “Official” means published under a namespace the vendor owns and the registry verified, not a community re-publish. By server count First-party 67% Community 33% By weekly downloads First-party 82% Community 18%
168 of 250 servers (67%) are first-party, and they take 82.1% of attributable weekly downloads. The badge is the most decision-useful signal in this dataset: it tells you whether the vendor themselves maintains the bridge to their product, or whether you are trusting a third party with your credentials.

This is the single most decision-relevant fact in the dataset, and it is the one a star count cannot tell you.

An MCP server usually needs credentials. A database server wants a connection string, a Slack server wants a workspace token, a cloud server wants API keys with real permissions.

When the server is first-party, you are trusting the same company you already trusted with the underlying product. When it is community, you are extending that trust to a third party, which may be entirely fine and may be better maintained, but it is a separate decision you should make knowingly.

First-party servers take 82.1% of all download volume, so the ecosystem is consolidating around vendor-built bridges faster than the raw server counts suggest.

Which categories have the most MCP servers?

Developer Tools leads with 81 servers (32% of the list), ahead of Search & Web at 50. By download volume the leading category is Developer Tools, which takes 32.3% from just 81 servers.

MCP servers by category Developer Tools: 81 servers, 1.3M weekly downloads; Search & Web: 50 servers, 27.3k weekly downloads; AI & Memory: 24 servers, 208.2k weekly downloads; Other: 21 servers, 4.8k weekly downloads; DevOps & Monitoring: 15 servers, 61.1k weekly downloads; Databases: 15 servers, 220.9k weekly downloads; Productivity: 13 servers, 922.7k weekly downloads; Communication: 10 servers, 0 weekly downloads; Cloud: 8 servers, 1.2M weekly downloads; Finance: 7 servers, 0 weekly downloads; Design: 6 servers, 31 weekly downloads. MCP servers per category Bar = number of servers. Label = servers and combined weekly package downloads. n=250. Developer Tools 81 · 1.3M dl/wk Search & Web 50 · 27.3k dl/wk AI & Memory 24 · 208.2k dl/wk Other 21 · 4.8k dl/wk DevOps & Monitoring 15 · 61.1k dl/wk Databases 15 · 220.9k dl/wk Productivity 13 · 922.7k dl/wk Communication 10 · 0 dl/wk Cloud 8 · 1.2M dl/wk Finance 7 · 0 dl/wk Design 6 · 31 dl/wk
Developer Tools leads on both counts: 81 servers, and 32.3% of attributable downloads. Source: official MCP Registry plus npm and PyPI, 11 September 2026.
CategoryServersWeekly downloadsShareFirst-partyTop server
Developer Tools811,257,18232.3%54mcp-server-commands
Search & Web5027,3030.7%28mcp-server-browser
AI & Memory24208,2255.3%12Codebase Memory
Other214,8470.1%18World Monitor
DevOps & Monitoring1561,1141.6%12Netdata
Databases15220,9385.7%13Supabase
Productivity13922,65423.7%8Repowise
Communication10none attributablen/a10emailmd
Cloud81,195,70330.7%5Scrapling MCP Server
Finance7none attributablen/a4CCXT
Design631<0.1%4mcp-server-chart
All 11 categories2503,897,997100%168Repowise

That developer tools lead on count is unsurprising: the first people to wire an AI into a system are the people who build systems, and coding assistants were the first clients to ship MCP support. The categories to watch are the sparse ones. A category with two or three servers and real download volume is where the protocol is being adopted faster than it is being served.

How do you install an MCP server?

Every server in this list ships copy-paste configuration for four clients, which is the practical reason to use this page over a plain directory.

AI clientServers with a ready install snippet
Claude Desktop250 of 250
Cursor250 of 250
VS Code250 of 250
Claude Code250 of 250

An MCP server runs as a small program, locally over stdio or remotely over Streamable HTTP, that an MCP client connects to. To add one, open your client config and point it at the server: in Claude Desktop edit claude_desktop_config.json, in Cursor edit ~/.cursor/mcp.json, in VS Code add a .vscode/mcp.json, or run “claude mcp add” in Claude Code. Use the MCP Inspector to test a server before wiring it into your assistant.

The transport matters for how you deploy. 162 of 250 servers run over stdio, meaning the client starts them as a local subprocess on your machine. Only 109 support Streamable HTTP, and 93 publish a hosted remote endpoint you can point at without installing anything.

That imbalance is the single biggest practical limitation of MCP today. A local MCP server is simple and private, but it cannot be shared across a team, it does not work from a phone or a browser-only client, and every machine needs its own install and its own credentials.

A hosted MCP server, or an MCP gateway sitting in front of several, is what you deploy when more than one person needs the same connection. The remote MCP endpoints in this build are the ones you can actually centralise:

ServerTransportsRemote endpointPackageWeekly downloads
Context7stdio, streamable-httpYesmcpb, npm871,893
Supabasestdio, streamable-httpYesnpm97,145
CloudBasestdio, streamable-httpYesnpm20,898
mcpstdio, streamable-httpYesnpm22
World Monitorstreamable-httpYesremote onlynot reported
Netdatastreamable-httpYesremote onlynot reported
tldrawstreamable-http, sseYesremote onlynot reported
Metabasestreamable-httpYesremote onlynot reported
mcp-serverstreamable-httpYesremote onlynot reported
Reactive Resumestreamable-httpYesremote onlynot reported
PostHog MCP Serverstreamable-http, sseYesremote onlynot reported
GitHubstdio, streamable-httpYesocinot reported

Packaging follows the same practical split:

Package registryServers
npm99
pypi58
mcpb42
oci29
nuget4
cargo1

Which AI clients support MCP, and does ChatGPT?

Yes, ChatGPT supports MCP. OpenAI adopted the protocol in 2025, so it now sits alongside Anthropic’s own clients rather than competing with a rival standard, which is most of why MCP became the default way to connect an AI application to anything.

The clients worth knowing, and what each is good for:

  • Claude Desktop and Claude Code are the reference implementations, and every server here ships a copy-paste snippet for both. Claude Code takes a one-line `claude mcp add`, which is the fastest route from this page to a working connection.
  • Cursor and VS Code cover the AI coding case, where developer-tool and database servers do the most work. Developer Tools is the largest category in this build at 81 servers, and it is the one most people install first.
  • ChatGPT supports MCP through connectors, weighted toward remote HTTP servers rather than local stdio ones. That matters here, because only 93 of 250 servers publish a hosted remote endpoint.
  • Gemini CLI, Windsurf and Zed have all added support, and the protocol is open, so the list keeps growing.

One recurring confusion is worth clearing up: GitHub is not itself an MCP server. It is a service, and there is an official GitHub MCP server that wraps it, built by GitHub, which is exactly the first-party distinction the next section is about.

The same is true of Slack, Notion, Supabase and Stripe. The official GitHub MCP server and the Context7 MCP server are the two most commonly recommended starting points for AI coding, and both appear in the full list below with their own figures rather than on somebody’s recommendation.

If your AI client is not on that list, check whether it supports MCP before you pick a server from this page. The snippet coverage column tells you what we generate; it does not tell you what your client accepts.

How do you vet an MCP server before you trust it?

An MCP server is a program you install that runs with your permissions and holds your credentials. The advisory data in the next section says the ecosystem has no disclosed vulnerability problem yet, and that is genuinely different from saying a given server is safe to run.

Four failure modes are specific to this protocol and none of them show up as a CVE:

  1. Arbitrary code execution. A stdio server is a local subprocess with your user’s access to files, network and shell. There is no sandbox unless you add one.
  2. Prompt injection. A server returns text into the model’s context. Content it fetched from a web page or an issue comment can carry instructions, and the model may act on them using the other tools you enabled.
  3. Over-broad credentials. The usual mistake is handing a database server an admin role because it was the key already in the environment.
  4. Silent tool changes. A server can change the tools it advertises on any update. What you audited in January is not necessarily what runs in March.

The checks that reduce real risk, in the order I would do them:

  • Start from the registry entry rather than a search result, and confirm the reverse-DNS namespace matches the vendor you think you are installing. That verification is what the first-party badge below is built on.
  • Read the tool list before you enable it. A server publishes the actions it can take, and that list is the real permission surface, not the README.
  • Pin a version. An unpinned `npx` or `uvx` command pulls the latest release every launch.
  • Run it through the MCP Inspector first and call the tools by hand, before wiring it into an agent that will call them autonomously.
  • Give it the narrowest credential that works, read-only by default, and treat write access as a deliberate decision rather than the starting point.

None of this is exotic supply-chain practice. It is the same care you would take with any dependency, applied to one that an LLM gets to drive.

Are MCP Servers Secure?

There are 52 security advisories on record across 17 of the 250 servers here. 126 (50%) have no known advisory and 107 are not checkable because they ship no queryable package.

Of those, two carry an advisory that is still unpatched at the time of this build:

  • Desktop Commander (`io.github.wonderwhy-er/desktop-commander`), one open advisory, worst scored CVSS 6.3 (low): DesktopCommanderMCP is vulnerable to SSRF. GHSA-5xx3-j724-wmx5.
  • PraisonAI (`io.github.MervinPraison/praisonai`), two open advisories, worst scored CVSS 8.8 (high): Duplicate Advisory: PraisonAI has Memory State Leakage and Path Traversal in MultiAgent Context Handling. GHSA-x44p-gg67-52fc, GHSA-fwh2-95jw-g4j6.

That naming is generated from the advisory data on every refresh rather than written by hand, so a server drops off this list the moment its maintainer ships a fix. Check the linked repository before you act on it: an advisory can be days from a patch, or it can be a duplicate of one already resolved upstream.

The rest is worth stating carefully rather than celebrating. A mostly clean advisory record on an ecosystem this young mostly means nobody has looked yet.

Compare it with our AI WordPress plugins report, where two in three plugins have a disclosed CVE, not because WordPress plugins are worse but because WordPress has a mature vulnerability-reporting culture and a funded advisory feed. MCP has neither yet.

So for most of this list the useful security question is not “does this server have a CVE”. It is what the server can do once you give it credentials:

  1. Scope the credentials, not the server. Give a database server a read-only role. Give a cloud server a role with the two permissions it needs.
  2. Prefer first-party for anything holding production keys. 67% of this list qualifies.
  3. Read the tool list before you enable it. A server advertises the actions it can take; that list is the actual permission surface.
  4. Test with the MCP Inspector first, before wiring a server into an assistant that will call it autonomously.
  5. Treat write access as a deliberate choice. Most useful MCP work is read-only.

Are MCP servers actively maintained?

Yes, more so than any other ecosystem we track. The median server was updated 1 days ago, 227 of 250 (91%) within the last 30 days, 242 within 90, and none have gone more than a year. The oldest is 280 days.

How recently MCP servers were updated Updated this month: 227 servers; 1-3 months: 15 servers; 3-6 months: 4 servers; 6-12 months: 4 servers. Most of the registry is actively maintained Servers by time since last update. Median 1 days, oldest 280 days. 0 75 150 225 227 Updated this month 91% 15 1-3 months 6% 4 3-6 months 2% 4 6-12 months 2%
227 of 250 servers shipped an update within 30 days. MCP is young enough that abandonment has not set in yet, which is the opposite of what we found in the browser extension stores.

That is what a young ecosystem looks like, and it is a genuine advantage of picking an MCP server today: almost nothing here is abandoned. It also means the picture changes fast, which is why this report carries a pull date rather than pretending to be evergreen.

three servers carry a deprecated flag from the registry. They are still listed, with the flag visible, because a deprecated server does not vanish from the rest of the internet just because a directory hides it.

Best MCP Servers by Category

Nobody needs “the best MCP server”. They need one for Postgres, or Slack, or a browser. Each group below is the top servers in that category by quality score, with weekly downloads, first-party status and update recency alongside so you can overrule the ordering on whichever signal you trust most.

Best Developer Tools MCP servers

Developer-tool MCP servers are the largest and most active category, wiring AI into code, repos, and issue trackers.

These servers connect assistants like Claude and Cursor to GitHub, GitLab, Jira, Linear, and your local toolchain so an AI can read code, open pull requests, and triage issues. It is the most mature MCP category and the one most clients ship support for first.

81 servers in this category, 1,257,182 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
mcp-server-commandsnot reportedFirst-party0d ago94/100
Chrome DevTools MCP1,051,748First-party0d ago93/100
Serena MCP: the IDE for your agentlibrary-wideFirst-party3d ago92/100
firebase-mcplibrary-wideFirst-party0d ago92/100
kaneo97First-party0d ago91/100
Reactive Resumenot reportedFirst-party0d ago91/100

Best Search & Web MCP servers

Search and web MCP servers give an AI fresh, real-world context beyond its training cutoff.

Web search, fetch, and browser-automation servers let assistants look things up, read pages, and drive a browser. They are the backbone of grounded, up-to-date AI answers.

50 servers in this category, 27,303 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
mcp-server-browsernot reportedFirst-party0d ago94/100
mcp-server-searchnot reportedFirst-party0d ago94/100
browser-uselibrary-wideFirst-party1d ago93/100
playwright-mcpnot reportedFirst-party1d ago92/100
screenpipe2,552First-party0d ago91/100
Skyvernnot reportedFirst-party0d ago91/100

Best AI & Memory MCP servers

AI and memory MCP servers give assistants persistent memory and a knowledge base.

Vector stores, knowledge graphs, and note systems let an AI remember context across sessions and ground answers in your own documents. The foundation of RAG-style workflows over MCP.

24 servers in this category, 208,225 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
Codebase Memory5,825Community1d ago93/100
nx-console55,721First-party0d ago88/100
nx-mcp55,721First-party0d ago88/100
mcp22First-party1d ago88/100
Honchonot reportedFirst-party1d ago88/100
basic-memorylibrary-wideFirst-party1d ago88/100

Best Other MCP servers

Servers across every other niche are joining the MCP ecosystem.

From media and IoT to specialized internal tools, servers of every kind are adopting MCP. This catch-all category captures the breadth of the protocol beyond the obvious developer and data tools.

21 servers in this category, 4,847 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
World Monitornot reportedFirst-party0d ago93/100
apify-mcp-servernot reportedFirst-party1d ago93/100
Oh My Posh Validatornot reportedFirst-party2d ago91/100
mcplibrary-wideFirst-party23d ago91/100
Microsoft Fabric MCP Server769First-party0d ago89/100
openstatusnot reportedFirst-party0d ago88/100

Best DevOps & Monitoring MCP servers

DevOps and monitoring MCP servers expose infrastructure and observability data to AI.

Kubernetes, Docker, Terraform, Sentry, Grafana, and incident tools let an assistant inspect deployments, read logs, and surface errors. Powerful for on-call work, where read-only scopes are the safe default.

15 servers in this category, 61,114 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
Netdatanot reportedFirst-party0d ago91/100
kubernetes-mcp-server1,984First-party1d ago86/100
mockservernot reportedFirst-party0d ago86/100
sentry-mcp59,130First-party0d ago85/100
kubefwdnot reportedFirst-party3d ago85/100
mcp-grafananot reportedFirst-party0d ago85/100

Best Databases MCP servers

Database MCP servers let an AI query and inspect your data through a controlled interface.

Postgres, MySQL, SQLite, MongoDB, Redis, and managed platforms like Supabase expose schema and read (sometimes write) access over MCP. Useful for natural-language analytics, but scope the credentials carefully, since you are handing an AI a database connection.

15 servers in this category, 220,938 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
Supabase97,145First-party0d ago90/100
MCP Toolbox for Databasesnot reportedFirst-party0d ago90/100
MCP Toolbox for Databasesnot reportedFirst-party0d ago90/100
ClickHouse58,094First-party1d ago89/100
mcpnot reportedFirst-party2d ago89/100
mongodb-mcp-server54,247First-party0d ago88/100

Best Productivity MCP servers

Productivity MCP servers connect AI to notes, docs, files, and project tools.

Notion, Google Drive, filesystem, calendar, and task-manager servers let an AI read and update your working documents and to-dos. Among the most-installed servers because they touch everyday workflows.

13 servers in this category, 922,654 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
Repowisenot reportedFirst-party0d ago96/100
Context7871,893First-party1d ago94/100
mcp-server-filesystemnot reportedFirst-party0d ago94/100
mcp-servernot reportedFirst-party1d ago91/100
XcodeBuildMCP50,636First-party0d ago90/100
XcodeBuildMCPnot reportedFirst-party0d ago90/100

Best Communication MCP servers

Communication MCP servers let AI read and send across chat and email.

Slack, Discord, email, and messaging servers let an assistant summarize threads, draft replies, and post updates. Convenient, but write access to your inbox or channels deserves scrutiny.

10 servers in this category, 0 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
emailmdlibrary-wideFirst-party16d ago86/100
QR Rápidonot reportedFirst-party1d ago85/100
draw.ionot reportedFirst-party39d ago85/100
OpenOSINTnot reportedFirst-party3d ago85/100
Vexanot reportedFirst-party4d ago84/100
bernsteinlibrary-wideFirst-party0d ago84/100

Best Cloud MCP servers

Cloud MCP servers expose AWS, Azure, GCP, and edge platforms to AI.

These servers let an assistant query cloud resources, read storage, and manage services. Among the most sensitive in this list, so prefer scoped, read-only credentials and audit every write.

8 servers in this category, 1,195,703 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
Scrapling MCP Servernot reportedCommunity7d ago93/100
Azure MCP Servernot reportedFirst-party0d ago87/100
mcpnot reportedFirst-party10d ago86/100
next-devtools-mcp49,563First-party2d ago85/100
Amazon ECS MCP Server286,535First-party213d ago71/100
Amazon EKS MCP Server286,535First-party225d ago71/100

Best Finance MCP servers

Finance MCP servers connect AI to payments, accounting, and market data.

Stripe, accounting, and banking servers let an assistant read transactions, draft invoices, and pull financial data. High-stakes by nature, so keep write access tightly scoped.

7 servers in this category, 0 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
CCXTnot reportedFirst-party0d ago94/100
basebalance.cloud - x402 RPC & MCP gatewaynot reportedFirst-party6d ago87/100
Finance Toolkitlibrary-wideCommunity1d ago86/100
tradememory-protocolnot reportedFirst-party3d ago85/100
mcpnot reportedFirst-party0d ago84/100
tradingview-mcpnot reportedCommunity10d ago82/100

Best Design MCP servers

Design MCP servers connect AI to design tools and image generation.

Figma, asset, and image-generation servers let an AI read design files, generate visuals, or produce screenshots. A smaller but fast-growing category as design tools open up MCP access.

6 servers in this category, 31 combined weekly downloads.

ServerWeekly downloadsFirst-partyUpdatedQuality
mcp-server-chartnot reportedFirst-party15d ago89/100
Figma-Context-MCPnot reportedCommunity1d ago88/100
Agent-Native Designnot reportedFirst-party0d ago83/100
Figma MCP Servernot reportedFirst-party1d ago81/100
openflowkit-mcp31Community23d ago79/100
TypeUInot reportedFirst-party69d ago77/100

How this compares to the awesome MCP servers lists

Most people looking for MCP servers land on one of three kinds of page, and they are good at different jobs. Worth saying plainly which one you want, because it is not always this one.

The awesome MCP servers lists on GitHub, appcypher’s and punkpeye’s among them, are hand-curated markdown files grouped by category. They are broad, they move fast, and contributors add servers the registry has not seen.

What they cannot do is tell you which of two servers in the same category anyone actually uses, whether either is still maintained, or which one the vendor built. Every entry looks identical on the page.

The marketplaces, mcp.so and mcpservers.org, are browsable catalogues with search and categories. Better for discovery than a flat file, and they carry more servers than this report does. They sort by trending or featured rather than by anything you can audit, and featured placement is not always editorial.

This report is the comparison layer. It starts from the official MCP Registry rather than from curation, so inclusion is mechanical, then adds the figures that let you choose between two candidates: weekly downloads, GitHub stars, last commit, licence, first-party status and known advisories.

That is why it ranks 250 servers and not thousands. Everything below the adoption floor is real but unmeasurable, and a ranking of unmeasurable things is just a list again.

Use an awesome list to find MCP servers you did not know existed. Use this page to pick the right MCP server out of the ones you found.

Neither substitutes for reading the MCP server use cases above and deciding what you are connecting. If you want the raw index with nothing on top, that is the registry itself at registry.modelcontextprotocol.io.

The full list: All 250 MCP servers ranked

Every ranked server, ordered by quality score, with the inputs shown so you can check the arithmetic. Click any server to open its repository. Where a value reads “not reported”, the upstream source did not return it and we would rather say so than print a zero.

#MCP serverCategoryWeekly downloadsGitHub starsFirst-partyLicenceUpdatedSecurityQuality
1RepowiseProductivitynot reported6,403First-partyAGPL-3.00d agoNo known advisory96
2Context7Productivity871,89361,869First-partyMIT1d agoNo known advisory94
3CCXTFinancenot reported43,943First-partyMIT0d agoNo known advisory94
4mcp-server-browserSearch & Webnot reported38,932First-partyApache-2.00d agoNo known advisory94
5mcp-server-commandsDeveloper Toolsnot reported38,932First-partyApache-2.00d agoNo known advisory94
6mcp-server-filesystemProductivitynot reported38,932First-partyApache-2.00d agoNo known advisory94
7mcp-server-searchSearch & Webnot reported38,932First-partyApache-2.00d agoNo known advisory94
8Chrome DevTools MCPDeveloper Tools1,051,74851,622First-partyApache-2.00d agoAdvisory, patched93
9Codebase MemoryAI & Memory5,82542,924CommunityMIT1d agoNo known advisory93
10browser-useSearch & Weblibrary-wide114,148First-partyMIT1d agoAdvisory, patched93
11World MonitorOthernot reported86,024First-partyAGPL-3.00d agoNot checked93
12Scrapling MCP ServerCloudnot reported80,159CommunityBSD-3-Clause7d agoNo known advisory93
13apify-mcp-serverOthernot reported6,725First-partyMIT1d agoNot checked93
14playwright-mcpSearch & Webnot reported37,003First-partyApache-2.01d agoAdvisory, patched92
15Serena MCP: the IDE for your agentDeveloper Toolslibrary-wide29,170First-partyMIT3d agoAdvisory, patched92
16firebase-mcpDeveloper Toolslibrary-wide4,465First-partyMIT0d agoAdvisory, patched92
17screenpipeSearch & Web2,55221,530First-partynot reported0d agoNo known advisory91
18kaneoDeveloper Tools979,041First-partyMIT0d agoNo known advisory91
19NetdataDevOps & Monitoringnot reported80,483First-partyGPL-3.00d agoNot checked91
20mcp-serverProductivitynot reported43,506First-partyAGPL-3.01d agoNot checked91
21Reactive ResumeDeveloper Toolsnot reported42,462First-partyMIT0d agoNot checked91
22GitHubDeveloper Toolsnot reported32,860First-partyMIT1d agoNot checked91
23Oh My Posh ValidatorOthernot reported23,443First-partyMIT2d agoNot checked91
24SkyvernSearch & Webnot reported22,971First-partyAGPL-3.00d agoNot checked91
25FunASRDeveloper Toolsnot reported20,281First-partyMIT1d agoNot checked91
26Compiler ExplorerDeveloper Toolsnot reported19,059First-partyBSD-2-Clause1d agoNot checked91
27KeployDeveloper Toolsnot reported18,452First-partyApache-2.00d agoNot checked91
28Firecrawl MCP ServerSearch & Webnot reported7,434First-partyMIT1d agoNo known advisory91
29mcpOtherlibrary-wide55First-partyApache-2.023d agoAdvisory, patched91
30SupabaseDatabases97,1452,901First-partyApache-2.00d agoNo known advisory90
31XcodeBuildMCPProductivity50,6366,369First-partyMIT0d agoNo known advisory90
32dbxDeveloper Tools4,73519,069CommunityApache-2.00d agoNo known advisory90
33claude-flowDeveloper Toolslibrary-wide72,049CommunityMIT0d agoNo known advisory90
34Agent Skills Search ServerSearch & Webnot reported25,224First-partyApache-2.033d agoNot checked90
35MCP Toolbox for DatabasesDatabasesnot reported16,366First-partyApache-2.00d agoNot checked90
36MCP Toolbox for DatabasesDatabasesnot reported16,366First-partyApache-2.00d agoNot checked90
37OpenMetadataSearch & Webnot reported15,169First-partyApache-2.00d agoNot checked90
38CoderDeveloper Toolsnot reported14,437First-partyAGPL-3.00d agoNot checked90
39XcodeBuildMCPProductivitynot reported6,369First-partyMIT0d agoNo known advisory90
40ClickHouseDatabases58,094869First-partyApache-2.01d agoNo known advisory89
41Windows-MCPDeveloper Tools13,9926,971First-partyMIT1d agoAdvisory, patched89
42Microsoft Fabric MCP ServerOther7693,664First-partyMIT0d agoNo known advisory89
43mcpDatabasesnot reported12,076First-partyApache-2.02d agoNot checked89
44agent-deviceDeveloper Toolslibrary-wide4,520First-partyMIT0d agoNo known advisory89
45agent-deviceDeveloper Toolsnot reported4,520First-partyMIT0d agoNo known advisory89
46mcp-server-chartDesignnot reported4,363First-partyMIT15d agoNo known advisory89
47nx-consoleAI & Memory55,7211,414First-partyMIT0d agoNo known advisory88
48nx-mcpAI & Memory55,7211,414First-partyMIT0d agoNo known advisory88
49mongodb-mcp-serverDatabases54,2471,126First-partyApache-2.00d agoNo known advisory88
50mobile-mcpDeveloper Tools14,3846,644First-partyApache-2.00d agoAdvisory, patched88
51mcpAI & Memory223,434First-partyApache-2.01d agoNo known advisory88
52tldrawDeveloper Toolsnot reported50,279First-partynot reported0d agoNot checked88
53MetabaseSearch & Webnot reported49,192First-partynot reported0d agoNot checked88
54PostHog MCP ServerDeveloper Toolsnot reported39,740First-partynot reported0d agoNot checked88
55Figma-Context-MCPDesignnot reported15,837CommunityMIT1d agoAdvisory, patched88
56mobilerunDeveloper Toolsnot reported9,346First-partyMIT0d agoNot checked88
57openstatusOthernot reported9,101First-partyAGPL-3.00d agoNot checked88
58HonchoAI & Memorynot reported7,111First-partyAGPL-3.01d agoNot checked88
59basic-memoryAI & Memorylibrary-wide3,930First-partyAGPL-3.01d agoNo known advisory88
60DBHubDatabasesnot reported3,495First-partyMIT1d agoNo known advisory88
61semAI & Memorylibrary-wide3,341First-partyApache-2.00d agoNo known advisory88
62BoostedTravelSearch & Webnot reported2,001First-partynot reported0d agoNo known advisory88
63ha-mcpAI & Memory90,4714,687First-partyMIT0d agoAdvisory, patched87
64Zotero MCPSearch & Web2,8184,990CommunityMIT17d agoNo known advisory87
65basebalance.cloud - x402 RPC & MCP gatewayFinancenot reported6,308First-partyMIT6d agoNot checked87
66exaSearch & Webnot reported4,990First-partyMIT21d agoNot checked87
67Azure MCP ServerCloudnot reported3,664First-partyMIT0d agoAdvisory, patched87
68ArgentSearch & Weblibrary-wide2,772First-partyApache-2.00d agoNo known advisory87
69SemioticDeveloper Toolslibrary-wide2,705First-partyApache-2.00d agoNo known advisory87
70brightdata-mcpSearch & Webnot reported2,635First-partyMIT30d agoNo known advisory87
71tavily-mcpSearch & Webnot reported2,378First-partyMIT1d agoNo known advisory87
72mcp-serverDeveloper Tools48,54699First-partyApache-2.00d agoNo known advisory86
73CloudBaseDeveloper Tools20,8981,102First-partyMIT0d agoNo known advisory86
74Power BI Modeling MCP ServerOther4,0781,142First-partyMIT3d agoNo known advisory86
75kubernetes-mcp-serverDevOps & Monitoring1,9842,077First-partyApache-2.01d agoNo known advisory86
76Claude Code Ultimate GuideSearch & Web4275,950CommunityCC-BY-SA-4.01d agoNo known advisory86
77Finance ToolkitFinancelibrary-wide5,319CommunityMIT1d agoNo known advisory86
78JitsuOthernot reported5,068First-partyMIT0d agoNot checked86
79mockserverDevOps & Monitoringnot reported4,969First-partyApache-2.00d agoNot checked86
80mcpCloudnot reported4,183First-partyApache-2.010d agoNot checked86
81PaperBananaDeveloper Toolsnot reported2,347First-partyMIT2d agoNo known advisory86
82pg-aiguideDeveloper Toolsnot reported1,835First-partyApache-2.02d agoNo known advisory86
83emailmdCommunicationlibrary-wide1,371First-partyMIT16d agoNo known advisory86
84gitlab-mcpDeveloper Tools65,6941,967CommunityMIT2d agoNo known advisory85
85sentry-mcpDevOps & Monitoring59,130846First-partynot reported0d agoNo known advisory85
86next-devtools-mcpCloud49,563819First-partynot reported2d agoNo known advisory85
87brave-search-mcp-serverSearch & Web7,6791,433First-partyMIT1d agoNo known advisory85
88mcp-server-browserbaseSearch & Web1,8383,404First-partyApache-2.053d agoNo known advisory85
89IWEAI & Memory4651,634First-partyApache-2.02d agoNo known advisory85
90Business Contact FinderOthernot reported7,235First-partynot reported1d agoNot checked85
91Contractor Licence ChangesOthernot reported7,235First-partynot reported1d agoNot checked85
92Contact AffordanceOthernot reported7,235First-partynot reported1d agoNot checked85
93Domain LivenessOthernot reported7,235First-partynot reported1d agoNot checked85
94QR RápidoCommunicationnot reported7,235First-partynot reported1d agoNot checked85
95draw.ioCommunicationnot reported5,383First-partyApache-2.039d agoNot checked85
96kubefwdDevOps & Monitoringnot reported4,167First-partyApache-2.03d agoNot checked85
97AdsAgentDeveloper Toolsnot reported3,723First-partyMIT0d agoNot checked85
98NotFairSearch & Webnot reported3,723First-partyMIT0d agoNot checked85
99NotFair-MetaAdsDeveloper Toolsnot reported3,723First-partyMIT0d agoNot checked85
100mcp-grafanaDevOps & Monitoringnot reported3,449First-partyApache-2.00d agoNot checked85
101Radar Kubernetes MCP ServerDevOps & Monitoringnot reported3,322First-partyApache-2.00d agoNot checked85
102mcpOthernot reported2,671First-partyApache-2.00d agoNot checked85
103tooluniverseDeveloper Toolsnot reported1,680First-partyApache-2.02d agoNo known advisory85
104OpenOSINTCommunicationnot reported1,555First-partyMIT3d agoNo known advisory85
105ros-mcp-serverDeveloper Toolsnot reported1,448First-partyApache-2.01d agoNo known advisory85
106tradememory-protocolFinancenot reported1,416First-partyMIT3d agoNo known advisory85
107voicemodeOthernot reported1,358First-partyMIT2d agoNo known advisory85
108mcpSearch & Webnot reported1,313First-partyApache-2.00d agoNo known advisory85
109arxiv-mcp-serverSearch & Web9,9603,132CommunityApache-2.015d agoNo known advisory84
110mcp-neo4j-data-modelingDeveloper Tools2,288980First-partyMIT2d agoNo known advisory84
111pyscnDeveloper Tools1,0411,061First-partyMIT1d agoNo known advisory84
112mcp-neo4j-aura-managerDatabases23980First-partyMIT2d agoNo known advisory84
113OuroborosDeveloper Toolslibrary-wide5,807CommunityMIT0d agoAdvisory, patched84
114Unity-MCPDevOps & Monitoringnot reported4,238CommunityApache-2.07d agoNot checked84
115socraticodeSearch & Webnot reported3,294CommunityAGPL-3.00d agoNo known advisory84
116VexaCommunicationnot reported2,775First-partyApache-2.04d agoNot checked84
117claude-real-videoSearch & Weblibrary-wide2,129CommunityMIT0d agoNo known advisory84
118mcpFinancenot reported1,798First-partyMIT0d agoNot checked84
119PersomeAI & Memorynot reported1,321First-partyApache-2.021d agoNo known advisory84
120bernsteinCommunicationlibrary-wide1,157First-partyApache-2.00d agoNo known advisory84
121bernsteinDeveloper Toolslibrary-wide1,157First-partyApache-2.00d agoNo known advisory84
122mcp-neo4j-memoryAI & Memorynot reported980First-partyMIT2d agoNo known advisory84
123MemorixAI & Memorynot reported756CommunityApache-2.00d agoNo known advisory84
124StackQL MCP ServerDatabases121958First-partyMIT2d agoNo known advisory83
125Claude Code Explorer MCPSearch & Web286,244Communitynot reported4d agoNo known advisory83
126blitzDeveloper Tools221,752First-partyApache-2.059d agoNo known advisory83
127Airweave SearchSearch & Webnot reported6,564First-partyMIT98d agoNo known advisory83
128Agent-Native AnalyticsDeveloper Toolsnot reported4,717First-partynot reported0d agoNot checked83
129Agent-Native AssetsSearch & Webnot reported4,717First-partynot reported0d agoNot checked83
130Agent-Native BrainCommunicationnot reported4,717First-partynot reported0d agoNot checked83
131Agent-Native CalendarProductivitynot reported4,717First-partynot reported0d agoNot checked83
132Agent-Native ChatCommunicationnot reported4,717First-partynot reported0d agoNot checked83
133Agent-Native ClipsDeveloper Toolsnot reported4,717First-partynot reported0d agoNot checked83
134Agent-Native ContentAI & Memorynot reported4,717First-partynot reported0d agoNot checked83
135Agent-Native DesignDesignnot reported4,717First-partynot reported0d agoNot checked83
136Agent-Native DispatchCommunicationnot reported4,717First-partynot reported0d agoNot checked83
137Agent-Native FormsDeveloper Toolsnot reported4,717First-partynot reported0d agoNot checked83
138Agent-Native MailCommunicationnot reported4,717First-partynot reported0d agoNot checked83
139Agent-Native PlanDeveloper Toolsnot reported4,717First-partynot reported0d agoNot checked83
140Agent-Native SlidesDeveloper Toolsnot reported4,717First-partynot reported0d agoNot checked83
141EdgarToolsDeveloper Toolsnot reported2,697CommunityMIT2d agoNo known advisory83
142LetsFG - Flights & HotelsSearch & Webnot reported2,001First-partynot reported0d agoNo known advisory83
143Microsoft Learn MCPProductivitynot reported1,884First-partyCC-BY-4.01d agoNot checked83
144AppllamaOthernot reported1,451First-partyMIT5d agoNot checked83
145ArcadeDB MCP ServerDatabasesnot reported1,146First-partyApache-2.00d agoNot checked83
146GoModelDevOps & Monitoringnot reported1,144First-partyMIT0d agoNot checked83
147Atlassian Rovo MCP ServerSearch & Webnot reported1,033First-partyApache-2.00d agoNot checked83
148Microsoft 365 MCP ServerDeveloper Toolsnot reported965First-partyMIT0d agoNo known advisory83
149PDF Reader MCPDeveloper Toolsnot reported921First-partyMIT1d agoNo known advisory83
150UniFi Network MCPDeveloper Tools18,669805CommunityMIT1d agoNo known advisory82
151mcp-neo4j-cypherDatabases11,226980First-partyMIT2d agoAdvisory, patched82
152tradingview-mcpFinancenot reported4,419CommunityMIT10d agoNot checked82
153TolgeeSearch & Webnot reported4,098First-partynot reported1d agoNot checked82
154ShipSwiftDeveloper Toolsnot reported2,988First-partyMIT33d agoNot checked82
155MindwtrProductivitynot reported1,998CommunityAGPL-3.00d agoNo known advisory82
156TerraVisionDevOps & Monitoringnot reported1,629CommunityAGPL-3.07d agoNo known advisory82
157Microsoft NuGetAI & Memorynot reported1,553First-partynot reported1d agoNo known advisory82
158TerraformDevOps & Monitoringnot reported1,527First-partyMPL-2.00d agoNot checked82
159SuperlogOthernot reported1,443First-partyApache-2.01d agoNot checked82
160MeasureOthernot reported1,392First-partyApache-2.00d agoNot checked82
161monitorDevOps & Monitoringnot reported1,300First-partynot reported2d agoNo known advisory82
162Agent SwarmDatabaseslibrary-wide760First-partyMIT0d agoNo known advisory82
163Docling MCPDeveloper Toolsnot reported739First-partyMIT4d agoNo known advisory82
164skylosDeveloper Toolslibrary-wide718CommunityApache-2.00d agoNo known advisory82
165Nova3DDeveloper Toolsnot reported704First-partyMIT30d agoNo known advisory82
166Emilia ProtocolDeveloper Toolsnot reported650First-partyApache-2.01d agoNo known advisory82
167yutuDeveloper Toolsnot reported635First-partyApache-2.04d agoNo known advisory82
168ref-tools-mcpSearch & Web3341,173First-partyMIT77d agoNo known advisory81
169Desktop CommanderProductivitylibrary-wide9,538CommunityMIT1d agoOPEN ADVISORY81
170wigoloSearch & Webnot reported5,225Communitynot reported0d agoNo known advisory81
171RevoGrid DataGrid MCPAI & Memorynot reported3,442CommunityMIT0d agoNot checked81
172RevoGrid DataGrid MCP ProProductivitynot reported3,442CommunityMIT0d agoNot checked81
173Figma MCP ServerDesignnot reported1,977First-partynot reported1d agoNot checked81
174MCP Server for WinDbg Crash AnalysisAI & Memorynot reported1,567CommunityMIT1d agoNo known advisory81
175minutesSearch & Webnot reported1,472CommunityMIT1d agoNo known advisory81
176AutoTSSearch & Webnot reported1,429CommunityMIT17d agoNo known advisory81
177pm-claude-skillsDeveloper Toolsnot reported1,356CommunityMIT1d agoNo known advisory81
178SafeDep Vet MCPDeveloper Toolsnot reported1,106First-partyApache-2.08d agoNot checked81
179QueryWeaverDatabasesnot reported1,075First-partyAGPL-3.03d agoNot checked81
180Scaleway MCP serverDeveloper Toolsnot reported997First-partyApache-2.00d agoNot checked81
181HOL GuardDeveloper Toolsnot reported591First-partyApache-2.00d agoNo known advisory81
182jCodemunch MCPDeveloper Tools7,6462,679Communitynot reported0d agoNo known advisory80
183jshookmcpSearch & Web4821,984CommunityAGPL-3.01d agoAdvisory, patched80
184idea-reality-mcpDeveloper Tools53815First-partyMIT31d agoNo known advisory80
185Usertour MCP ServerDeveloper Toolsnot reported2,302First-partynot reported0d agoNot checked80
186LLM SandboxDeveloper Toolsnot reported1,119CommunityMIT1d agoNo known advisory80
187unreal-engine-mcpDeveloper Toolsnot reported864CommunityMIT0d agoNo known advisory80
188UniFi Protect MCPDeveloper Tools4,870805CommunityMIT1d agoNo known advisory79
189UniFi Access MCPDeveloper Tools2,185805CommunityMIT1d agoNo known advisory79
190reddit-mcp-buddySearch & Web1,185820CommunityMIT25d agoNo known advisory79
191agent-harnessesDeveloper Tools153836CommunityCC-BY-SA-4.02d agoNo known advisory79
192openflowkit-mcpDesign31758CommunityMIT23d agoNo known advisory79
193PraisonAIDeveloper Toolslibrary-wide9,043CommunityMIT1d agoOPEN ADVISORY79
194strataOthernot reported5,802First-partyApache-2.0102d agoNot checked79
195openshortsDeveloper Toolsnot reported3,986Communitynot reported1d agoNot checked79
196Google Ads + Meta Ads + GA4 MCPDeveloper Toolsnot reported1,715CommunityMIT2d agoNot checked79
197testkube-mcpDevOps & Monitoringnot reported1,656First-partynot reported1d agoNot checked79
198braveSearch & Webnot reported1,433CommunityMIT1d agoNot checked79
199treg.toDeveloper Toolsnot reported1,352First-partynot reported0d agoNot checked79
200Octocode MCP - AI Context PlatformSearch & Webnot reported932CommunityMIT1d agoNo known advisory79
201projectmemAI & Memorylibrary-wide804CommunityMIT4d agoNo known advisory79
202deja-vuAI & Memorylibrary-wide802CommunityMIT0d agoNo known advisory79
203comfyui-mcpDeveloper Toolsnot reported738CommunityMIT1d agoNo known advisory79
204xbbg MCPDeveloper Toolsnot reported716First-partyApache-2.00d agoNot checked79
205SandBase HarnessDeveloper Toolsnot reported642First-partyApache-2.05d agoNot checked79
206Marmot Data CatalogSearch & Webnot reported613First-partyMIT0d agoNot checked79
207Hex LineProductivity125558CommunityMIT6d agoNo known advisory78
208Hex GraphDeveloper Tools91558CommunityMIT6d agoNo known advisory78
209Apple HealthDatabases82567CommunityMIT15d agoNo known advisory78
210Hex ResearchDeveloper Tools13558CommunityMIT6d agoNo known advisory78
211browserbasehq-mcp-browserbaseSearch & Webnot reported3,404CommunityApache-2.053d agoNot checked78
212Solana MCP by VybeDeveloper Toolsnot reported1,223First-partynot reported18d agoNot checked78
213Solana MCP by VybeDeveloper Toolsnot reported1,223First-partynot reported18d agoNot checked78
214SearXNG SearchSearch & Webnot reported1,220CommunityMIT0d agoAdvisory, patched78
215ref-tools-mcpSearch & Webnot reported1,173First-partyMIT77d agoNot checked78
216docsSearch & Webnot reported1,156First-partynot reported0d agoNot checked78
217token-saviorAI & Memorylibrary-wide1,147CommunityMIT32d agoNo known advisory78
218SSH - policy-gated remote accessDeveloper Toolsnot reported717CommunityMIT1d agoNo known advisory78
219MCP Server for ExcelDeveloper Toolsnot reported682CommunityMIT0d agoNo known advisory78
220obsidian-mcp-serverSearch & Webnot reported675CommunityApache-2.02d agoNo known advisory78
221VestigeAI & Memorynot reported617CommunityAGPL-3.00d agoNo known advisory78
222haiku.ragSearch & Webnot reported606CommunityMIT0d agoNo known advisory78
223coolifySearch & Webnot reported589CommunityMIT0d agoNo known advisory78
224TypeUIDesignnot reported1,904First-partynot reported69d agoNot checked77
225Gearboy MCP ServerDeveloper Toolsnot reported1,200CommunityGPL-3.02d agoNot checked77
226Magic CloudDatabasesnot reported1,189CommunityMIT2d agoNot checked77
227loki-modeDeveloper Toolslibrary-wide1,056Communitynot reported0d agoNo known advisory77
228ChiR24-unreal_mcpOthernot reported864CommunityMIT0d agoNot checked77
229ChiR24-unreal_mcp_serverAI & Memorynot reported864CommunityMIT0d agoNot checked77
230runnoDeveloper Tools35771CommunityMIT41d agoNo known advisory76
231token-savior-recallAI & Memorylibrary-wide1,147CommunityMIT32d agoNo known advisory76
232CRW Web ScraperSearch & Webnot reported973CommunityAGPL-3.00d agoNot checked76
233fastCRWSearch & Webnot reported973CommunityAGPL-3.00d agoNot checked76
234Tapo MCPDeveloper Toolsnot reported799CommunityMIT1d agoNot checked76
235SonarQube MCP ServerDevOps & Monitoringnot reported644First-partynot reported0d agoNot checked76
236CompartmentAI & Memorylibrary-wide586CommunityApache-2.00d agoNo known advisory76
237OpenBrandDeveloper Tools22791First-partyMIT122d agoNo known advisory75
238ref-tools-ref-tools-mcpOthernot reported1,173CommunityMIT77d agoNot checked75
239FableCutSearch & Webnot reported661CommunityMIT0d agoNot checked75
240rustunnelDeveloper Toolsnot reported655CommunityAGPL-3.08d agoNot checked75
241TokenSaveProductivitynot reported625CommunityMIT3d agoNot checked75
242Sessy - Amazon SES observabilityDevOps & Monitoringnot reported924Communitynot reported2d agoNot checked73
243TickDB Market DataFinancenot reported779CommunityMIT83d agoNot checked73
244sqzAI & Memorynot reported621Communitynot reported14d agoNot checked72
245KodySearch & Webnot reported610Communitynot reported0d agoNot checked72
246Amazon ECS MCP ServerCloud286,535not reportedFirst-partynot reported213d agoNo known advisory71
247Amazon EKS MCP ServerCloud286,535not reportedFirst-partynot reported225d agoNo known advisory71
248AWS MCP ServerCloud286,535not reportedCommunitynot reported211d agoNo known advisory68
249AWS MCP ServerCloud286,535not reportedCommunitynot reported280d agoNo known advisory68
250hustcc-mcp-mermaidOthernot reported634CommunityMIT119d agoNot checked68

What this data says about MCP right now

Five conclusions, all checkable against the tables above:

  1. MCP is still mostly a local-process protocol. 162 of 250 servers run over stdio, and while 93 now publish a hosted endpoint, that leaves the majority installable only on the machine that runs the AI client. It is shifting, but MCP is still a developer-machine technology more than a team one.
  2. First-party is the signal to buy on. 67% of servers are vendor-built and they take 82.1% of all download volume, so the ecosystem is consolidating around official bridges.
  3. Adoption is concentrated, but less than published figures suggest. Once library-wide packages are set aside, the most-downloaded MCP server takes 27.0% of attributable volume against a median of 4,078 a week. That is still a steep curve, and it is the honest version of it.
  4. The clean security record is a maturity artefact, not a guarantee. 52 advisories across 250 servers, all patched, is not evidence that MCP servers are safe: 107 of them publish nothing an advisory database can be queried against, so their record is unknown rather than clean. Scope every credential you hand a server as if a disclosure were coming.
  5. Nothing here is abandoned yet. Median 1 days since update, which is the healthiest maintenance profile of any ecosystem in this series.

“The star counts and the awesome-lists tell you what developers find interesting. What actually decides whether you should install an MCP server is narrower: did the vendor build it, what credentials does it want, and can you run it anywhere other than your own laptop. On that last one the answer is still mostly no, and that is the real state of MCP in 2026, whatever the server count suggests.”
Alston Antony, founder of zplatform.ai and Senior Digital Marketing Manager at Brainstorm Force

Connecting AI to other places instead? The best AI WordPress plugins report carries a full CVE audit, the best Hugging Face models report ranks open-weight models on download data, and the AI Chrome extensions and AI Firefox add-ons reports cover the browser. More sit in best AI tools.

Frequently Asked Questions

What is an MCP server?

An MCP server is a program that exposes tools, data and prompts to AI applications through the Model Context Protocol. It acts as a standardised bridge so an assistant like Claude, Cursor or ChatGPT can read from and act on an external system, a database, a GitHub repo, a Slack workspace, without custom integration code.

What does MCP stand for?

MCP stands for Model Context Protocol, an open standard introduced by Anthropic in November 2024 for connecting AI applications to external tools and data sources.

What are the best MCP servers?

By weekly package downloads the leader is Chrome DevTools MCP at 1,051,748. By our composite quality score, which weighs maintenance, trust and security alongside adoption, the leader is Repowise at 96/100. Both full rankings are above, and the category sections narrow it to the job you actually have.

Where can I find a list of MCP servers?

This page is one, built from the official MCP Registry and enriched with adoption, maintenance and security data. The canonical source is the registry itself at registry.modelcontextprotocol.io; this report adds the comparison layer on top so you can rank and filter rather than only browse.

Are MCP servers free?

Most are free and open-source, and you install them at no cost. Some connect to paid third-party services (a database host, a SaaS API) that need your own account and API key, but the server software itself is typically free. Every row shows the install method and package registry.

By weekly downloads: Chrome DevTools MCP (1,051,748), Context7 (871,893) and Amazon ECS MCP Server (286,535). Popularity clusters around Developer Tools, which takes 32.3% of all download volume from 81 servers.

MCP versus RAG: what is the difference?

RAG retrieves relevant text and injects it into a prompt. MCP is a connection protocol that lets an AI call live tools and read data sources directly, including taking actions. They are complementary: an MCP server can power retrieval for RAG, but MCP also covers actions RAG alone does not.

What are the best MCP servers for Claude Code?

Every server in this list works with Claude Code and ships a copy-paste “claude mcp add” command. For coding specifically the useful groups are developer tools, filesystem, databases, and browser or search servers. Use the Developer Tools section above, which is the largest category at 81 servers.

Do I need to be a developer to set up an MCP server?

For most servers, no. Adding one to Claude Desktop or Cursor means pasting a JSON block into a settings file, and Claude Code takes a single command.

You do need to be comfortable finding a config file and generating an API key for whatever service you are connecting. Remote servers are the easiest, since there is nothing to install locally, and only 93 of 250 servers offer one.

Can one MCP server connect to multiple tools at once?

One server wraps one system, and a client connects to many servers at once, which is the normal setup. An AI coding session might have a GitHub MCP server, a Postgres server and a browser server all connected in the same workflow. Aggregator and gateway servers also exist that put several behind one endpoint, useful when a client caps how many connections it allows.

What is the official MCP Registry?

The official MCP Registry (registry.modelcontextprotocol.io) is the canonical index of MCP servers, where publishers register under an ownership-verified reverse-DNS namespace. That verification is what makes the first-party badge in this report meaningful, and this list is built from it.

How do I install an MCP server in Claude Desktop?

Open Claude Desktop settings, edit claude_desktop_config.json, add the server under “mcpServers” with its command, args and any required environment variables, then restart Claude Desktop. Every row in the full list above provides the exact JSON, along with the equivalent for Cursor, VS Code and Claude Code.

How many MCP servers are there?

The official registry lists thousands and grows daily. This report ranks the 250 that clear the quality gate and adoption floor: a description, a working install method, and real adoption, as of 11 September 2026.

Who created MCP?

Anthropic created the Model Context Protocol and released it as an open standard in November 2024. It has since been adopted by many AI vendors, with an open-source community maintaining the specification and the official registry.

Methodology and how to cite this data

Sources: server identity, install methods and status from the official MCP Registry; stars, licence and last-commit recency from the GitHub REST and GraphQL APIs; weekly downloads from npm and PyPI; security advisories from the GitHub Advisory Database. 7 snapshots retained for trend history.

Sample: 250 servers, 3,897,997 combined weekly downloads, 11 categories, 168 first-party, 250 with install snippets across 4 AI clients.

Ranking formula: Quality Score = 35% adoption (GitHub stars and weekly package downloads, log-scaled) + 25% maintenance (update recency and release cadence) + 15% growth (30-day trend from our own snapshots) + 15% trust (first-party namespace, open-source licence, public repository) + 10% security (known unpatched advisories).

Inclusion: automatic. Every registry server with a description, a working install method and real adoption. Deleted servers excluded, deprecated servers kept and badged. No hand-picking, no paid placement.

Download attribution rule: a server’s download count is only counted when the npm or PyPI package it points at is the MCP server itself, which we test by requiring the package name to reference MCP. Registry entries pointing at a wider general-purpose library are excluded from every download total and marked library-wide in the full list, because that count measures the library rather than the server.

In this build that excluded 26 servers and 4,015,103 weekly downloads, 51% of the raw sum. The rule is deliberately mechanical, so it is reproducible and it errs toward excluding a genuine MCP package rather than inflating a total. It cannot split a single shared package across a family of servers.

Stated limitations: adoption is a proxy. MCP has no universal usage metric, so package downloads and stars stand in for it and are never presented as install counts.

Where the upstream GitHub fetch does not return data for a server, its stars, licence and release history read “not reported” rather than zero, and any trend figure that would imply a total collapse as a result is suppressed rather than published. Coverage in this build: 246 of 250 servers with a star count, 200 with a licence, 57 with attributable download data, 241 with a usable trend (0 suppressed as artefacts). Security is “not checked” for servers with no queryable package rather than reported as clean.

On the length of this page: the pages ranking for “mcp servers” run a median of nine sections and around 2,300 words, and this one runs roughly double both. That is deliberate rather than padding.

A page whose job is to let you compare 250 servers has to carry the tables, the per-category breakdowns and the method, and a reader who wants the short version has the summary block at the top and the category sections in the middle. Where a section here exists only because the format demands it, it is short.

Cite as: zplatform.ai, “Best MCP Servers: The Complete Ranked List,” data pulled 11 September 2026.

MCP servers provide the connective layer that AI systems have been missing, and the deployment story is still the weakest part of it: most of what is published runs on one laptop. Every number here traces to a row in the tables above, and where a number is missing this page says so instead of guessing. That is the whole point of publishing the method next to the ranking: the best MCP server for you depends on what you are connecting and what credentials you are willing to hand over, and you should be able to check the working rather than take my word for it.

Preferred Source on Google

Liked this guide? Pin ZPlatform as your Preferred Source.

Pinning us tells Google to make our hands-on AI reviews, verified lifetime deals, and founder interviews more likely to appear prominently for you in Top Stories and eligible AI Search experiences (AI Mode, AI Overviews). Set it once, no account needed on our end.

  • 500+ AI tools tested with real budgets
  • Verified deals - no dead affiliate links
  • Editor: Alston Antony, 15+ years in SaaS & SEO
Opens Google · takes 2 seconds
Table of Contents