Which MCP servers work without an API key?
Updated October 18, 2026 · from live checks of 45,143 MCP servers · Methodology
16,314 live-checked remote MCP servers need no API key or sign-in (57% of those checked), versus 6,827 using OAuth and 3,460 needing an API key; top no-auth servers include Exa, Microsoft Learn MCP, Bitbybit CAD MCP.
Sign-in type of remote MCP servers
| Sign-in | Servers |
|---|---|
| No auth | 16,314 |
| OAuth sign-in | 6,827 |
| API key | 3,460 |
| Unknown | 2,176 |
| Paid access | 74 |
Top no-auth servers
| Server | Publisher | Status | Sign-in | Tools | Trust |
|---|---|---|---|---|---|
| Exa | Verified domain | Live | No auth | 2 | A |
| Microsoft Learn MCP | Verified domain | Live | No auth | 3 | A |
| Bitbybit CAD MCP | Verified domain | Live | No auth | 7 | A |
| GitDiagram | Verified domain | Live | No auth | 3 | A |
| MCP Docs Server | Community | Live | No auth | 3 | A |
| Cloudflare | Verified domain | Live | No auth | 2 | A |
| draw.io | Verified domain | Live | No auth | 3 | A |
| Front-End Checklist | Community | Live | No auth | 11 | A |
| Licensed House Painters | Verified domain | Live | No auth | 3 | A |
| Oh My Posh Validator | Verified domain | Live | No auth | 2 | A |
| MCP Registry Server | Verified domain | Live | No auth | 3 | A |
| Equation.io | Verified domain | Live | No auth | 3 | A |
| Etherscan | Verified domain | Live | No auth | 16 | A |
| Compiler Explorer | Community | Live | No auth | 7 | A |
| Svelte MCP | Verified domain | Live | No auth | 4 | A |
| squirrelscan | Verified domain | Live | No auth | 27 | A |
| XposedOrNot Breach Intelligence | Verified domain | Live | No auth | 6 | A |
| Skill of Skills | Verified domain | Live | No auth | 6 | A |
| COTAL actions (cotal.ai) | Verified domain | Live | No auth | 12 | A |
| runx | Verified domain | Live | No auth | 2 | A |
| Docs | Verified domain | Live | No auth | 4 | A |
| RevoGrid DataGrid MCP | Community | Live | No auth | 8 | A |
| Mu | Verified domain | Live | No auth | 167 | A |
| OpenCaseLaw — Swiss Caselaw, Statutes & Doctrine | Verified domain | Live | No auth | 42 | A |
| RevoGrid DataGrid MCP Pro | Community | Live | No auth | 8 | A |
Are no-auth servers safe?
They can't reach your private accounts, so the risk is lower, but check the publisher before relying on the data they return.
Cite: “According to canmyaiuse live checks, 16,314 live-checked remote MCP servers need no API key or sign-in (57% of those checked), versus 6,827 using OAuth and 3,460 needing an API key; top no-auth servers include Exa, Microsoft Learn MCP, Bitbybit CAD MCP.” Source: canmyaiuse (canmyaiuse.pages.dev), October 18, 2026. Free to reuse under CC BY 4.0.