mcp-remote — security grade SAFE, quality 71/100

Security audit verdict: SAFE · quality 71/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by punkpeye · MCP Server · ★ 1.6k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is mcp-remote safe to install? View the security audit →

About mcp-remote

Connect an MCP Client that only supports local (stdio) servers to a Remote MCP Server, with auth support: Note: this is a working proof-of-concept but should be considered experimental. Why is this necessary? So far, the majority of MCP servers in the wild are installed locally, using the stdio transport. This has some benefits: both the client and the server can implicitly trust each other as the user has granted them both permission to run. Adding secrets like API keys can be done using environment variables and never leave your machine. And building on and has allowed users to avoid explicit install steps, too. But there's a reason most software that could be moved to the web did get moved to the web: it's so much easier to find and fix bugs & iterate on new features when you can push updates to all your users with a single deploy. With the latest MCP Authorization specification, we now have a secure way of sharing our MCP servers with the world without running code on user's laptops. Or at least, you would, if all the popular MCP clients supported it yet. Most are stdio-only, and those that do support HTTP+SSE don't yet support the OAuth flows required. That's where comes in.

mcp

Quick Facts

Stars1,587
Forks291
LanguageTypeScript
CategoryMCP Server
LicenseMIT
Quality Score70.6127038831943/100
Last Updated2026-09-13
Created2025-03-20
Platformscli, mcp, node
Est. Tokens~17k

Compatible Skills

These tools work well together with mcp-remote for enhanced workflows:

  • MCP — semantic(0.66)+same_lang+similar_pop+shared_platform (58%)
  • touchdesigner-mcp — semantic(0.48)+same_lang+similar_pop+shared_platform (52%)
  • raindrop-mcp — semantic(0.45)+same_lang+similar_pop+shared_platform (51%)
  • claudeus-wp-mcp — semantic(0.43)+same_lang+similar_pop+shared_platform (50%)
  • figma-mcp-server — semantic(0.43)+same_lang+similar_pop+shared_platform (50%)

mcp-remote alternative? Top 6 similar tools

Looking for a mcp-remote alternative? If you're comparing mcp-remote with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • osaurus by osaurus-ai · ⭐ 7.9k

    Own your AI. The native macOS harness for AI agents -- any model, persistent memory, autonomous execution, cry

  • Awesome-MCP-ZH by yzfly · ⭐ 7.6k

    MCP 资源精选, MCP指南,Claude MCP,MCP Servers, MCP Clients

  • firecrawl-mcp-server by firecrawl · ⭐ 7.5k

    🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM c

  • browser-tools-mcp by AgentDeskAI · ⭐ 7.3k

    Monitor browser logs directly from Cursor and other MCP compatible IDEs.

  • mcp by BrowserMCP · ⭐ 6.9k

    Browser MCP is a Model Context Provider (MCP) server that allows AI applications to control your browser

  • XcodeBuildMCP by getsentry · ⭐ 6.4k

    A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is mcp-remote?

mcp-remote is Connect an MCP Client that only supports local (stdio) servers to a Remote MCP Server.. It is categorized as a MCP Server with 1.6k GitHub stars.

What programming language is mcp-remote written in?

mcp-remote is primarily written in TypeScript. It covers topics such as mcp.

How do I install or use mcp-remote?

You can find installation instructions and usage details in the mcp-remote GitHub repository at github.com/punkpeye/mcp-remote. The project has 1.6k stars and 291 forks, indicating an active community.

What license does mcp-remote use?

mcp-remote is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to mcp-remote?

The top alternatives to mcp-remote on Agent Skills Hub include osaurus, Awesome-MCP-ZH, firecrawl-mcp-server. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools