Best MCP Hosting Platforms for Remote Servers in 2026

The best MCP hosting platform depends on what you already run. Cloudflare Workers and Vercel suit web teams, AWS AgentCore, Google Cloud Run and Azure Functions suit cloud-first companies, and FastMCP Gateway, Alpic, Manufact Cloud and Blaxel are built only for MCP.

A remote MCP server is one that AI apps reach over the internet, using the Streamable HTTP transport. Hosting it means running that endpoint reliably, protecting it with sign-in, and paying for compute when it is used. Local servers that run on a laptop over stdio do not need hosting at all.

Below are nine platforms that document MCP hosting. We checked each one against its official docs and pricing page on 28 October 2026. One well-known option is missing on purpose: Smithery's hosted endpoints shut down on 31 October 2026 (details below).

How we chose

We included a platform only if it passed these tests:

1. Documented MCP hosting. The vendor has a live page explaining how to deploy an MCP server, which we opened on 28 October 2026.
2. Published pricing. We could read prices or a free tier on the official pricing page.
3. Security basics. The docs describe how to protect the endpoint, such as OAuth, IAM or access keys.
4. Still operating. We excluded services with an announced shutdown.

We did not deploy servers to these platforms for this review. Claims come from the linked vendor docs. If you are still choosing a language or library, start with our MCP frameworks and SDKs roundup. This list is part of our best-of MCP series.

Comparison table

1. Cloudflare Workers: global edge hosting

What it is. Cloudflare's remote MCP server guide deploys servers to Workers using createMcpHandler from its Agents SDK. Each request gets a fresh server instance, and state that must persist goes in KV, D1 or Durable Objects.

Auth uses an OAuthAuthorizationServer Worker and an OAuthResourceServer wrapper. Cloudflare's MCP overview recommends giving "each operation its own scopes."

Best for: Public remote servers that need low latency worldwide at low cost.

Pricing: From Workers pricing: the free plan includes 100,000 requests a day. The paid plan has a $5 monthly minimum, with 10 million requests and 30 million CPU milliseconds included, then $0.30 per extra million requests.

Pros

• Built-in OAuth building blocks for MCP.
• No charge for wall-clock duration on Workers Paid, only CPU time.
• An authless starter template for quick experiments.

Cons

• Workers runtime is not full Node, so some libraries need changes.
• The older McpAgent API is deprecated, so legacy code needs migrating.

Checked against: Cloudflare remote MCP server guide on 28 October 2026.

2. Vercel: MCP endpoints inside your web app

What it is. Vercel's MCP deployment docs add a server to a Next.js app with the open-source mcp-handler package. It runs on Vercel Functions with Fluid compute, which Vercel says handles MCP's "long idle times, quick message bursts" pattern.

Production features include Instant Rollback, Deployment Protection for previews, the Vercel Firewall and Rolling Releases. withMcpAuth checks bearer tokens, but you bring the authorization server.

Best for: Teams who already host their site or app on Vercel.

Pricing: From Vercel pricing: Hobby is $0 but "for personal, non-commercial use." Pro is $20 a month plus $20 per extra developer seat, with a $20 included usage credit. Enterprise is custom.

Pros

• One route file adds MCP to an existing app.
• Rollbacks and gradual rollouts reduce release risk.
• Preview deployments for testing server changes.

Cons

• Hobby cannot be used for commercial servers.
• No token issuing built in; you need an identity provider.

Checked against: Vercel MCP deployment docs on 28 October 2026.

3. FastMCP Gateway (Prefect): managed hosting for FastMCP

What it is. Prefect's FastMCP Gateway (its web address still says Horizon) deploys each server "to a managed production URL with OAuth 2.1." Every push to main auto-deploys, and pull requests get preview environments.

It adds identity provider integrations such as Okta, Microsoft Entra ID and Google Workspace, plus tool-level role-based access control and audit logs. See our Prefect spotlight.

Best for: Python teams building with FastMCP who want Git-based deploys and governance.

Pricing: From Prefect's pricing page: Personal is free (1 developer, 1-day log retention). Developer is $35 per developer per month plus usage. Enterprise is custom.

Pros

• Managed OAuth 2.1 with dynamic client registration.
• Branch previews and instant rollback.
• Free tier with no credit card required.

Cons

• Best fit for FastMCP projects.
• Personal plan keeps logs for only one day.

Checked against: FastMCP Gateway product page on 28 October 2026.

4. Alpic: hosting and distribution for AI plugins

What it is. Alpic takes a project "from a repository to a listed plugin in ChatGPT and Claude." It auto-detects the TypeScript and Python SDKs, xmcp and FastMCP, and deploys Skybridge apps with views and assets.

Security options include authentication, IP allowlisting and fixed outbound IPs, and Alpic says it runs on SOC 2 Type II certified infrastructure. Analytics include session replay of UI interactions. See our Alpic spotlight.

Best for: Companies shipping MCP Apps to ChatGPT and Claude directories.

Pricing: From Alpic pricing: Free includes 10,000 requests a month. Pro is $50 a month for 200,000 requests and 30-day analytics. Enterprise is "Contact us" and adds bring-your-own cloud and SSO.

Pros

• Directory submission help for ChatGPT and Claude.
• MCP-aware analytics and session replay.
• Works with several frameworks, not just its own.

Cons

• Request caps on Free and Pro.
• SSO and BYO cloud are Enterprise-only.

Checked against: Alpic docs on 28 October 2026.

5. Manufact Cloud: hosting from the mcp-use team

What it is. Manufact pairs the open-source mcp-use framework with Manufact Cloud, "a zero-config hosting platform." You link a GitHub repo once and each push deploys, with branch previews, custom domains and monitoring.

Its Cloud Inspector can "trace, replay, and debug MCP traffic in production." See our Manufact spotlight.

Best for: Teams building MCP Apps and servers with mcp-use.

Pricing: From Manufact pricing: Free is $0 with $5 of included usage and one project. Pay as you go has no subscription fee. Pro is $250 a month plus usage, or $3,000 billed annually. Build minutes cost $0.07 each.

Pros

• Preview deploys and custom domains on every plan.
• Production traffic inspection built in.
• Multi-region options on Pro.

Cons

• Cold-start prevention only on Pro and Enterprise.
• Pro is a big step up in price from pay as you go.

Checked against: Manufact pricing on 28 October 2026.

6. Blaxel: serverless MCP servers beside sandboxes

What it is. Blaxel hosts MCP servers from its store or from your code, and "automates its hosting, execution and scaling." Servers use Streamable HTTP and get "one single global endpoint." It can also turn an OpenAPI spec into a code-mode server.

The docs note that deployed servers "have a maximum runtime of 15 minutes" and "cannot be installed locally." See our Blaxel spotlight.

Best for: Agent builders who want MCP tools hosted next to Blaxel sandboxes.

Pricing: From Blaxel pricing: pay as you go with "up to $200 in free credits." MCP hosting is $0.000007 per GB of RAM per second while active, plus $0.045 per GB per month for images.

Pros

• Pay only for active compute.
• OpenAPI to MCP conversion built in.
• Can adapt existing stdio servers.

Cons

• 15-minute maximum runtime per server.
• Auth setup is not described on the overview page.

Checked against: Blaxel MCP hosting docs on 28 October 2026.

7. AWS AgentCore Runtime: MCP on AWS

What it is. Amazon Bedrock AgentCore Runtime runs MCP server containers at 0.0.0.0:8000/mcp. It supports both stateless and stateful Streamable HTTP servers. Stateful mode enables elicitation, sampling and progress notifications.

Inbound auth uses a custom JWT authorizer, with Cognito or Auth0 in AWS's examples. Missing tokens get a 401 with a protected resource metadata pointer.

Best for: Enterprises that keep workloads and identity in AWS.

Pricing: From AgentCore pricing: Runtime v2 consumption is $0.1276 per vCPU-hour and $0.0169 per GB-hour, billed per second with a 1-second minimum. Idle memory is reclaimed after 120 seconds.

Pros

• Supports stateful MCP features many hosts skip.
• Standard OAuth discovery for clients.
• Per-second billing on actual use.

Cons

• More setup: AgentCore CLI, containers and an identity provider.
• AWS's own example still uses the v1 Python SDK.

Checked against: AgentCore MCP docs on 28 October 2026.

8. Google Cloud Run: containers on Google Cloud

What it is. Google's Cloud Run MCP guide says it "supports hosting MCP servers with streamable HTTP transport, but not MCP servers with stdio transport." You deploy from a container image or from source.

By default every request needs the Cloud Run Invoker role. Local clients can use the Cloud Run proxy, an OIDC ID token or Identity-Aware Proxy.

Best for: Teams already shipping containers on Google Cloud.

Pricing: From Cloud Run pricing: with request-based billing, the monthly free tier is 180,000 vCPU-seconds, 360,000 GiB-seconds and 2 million requests. Usage beyond that is billed by region.

Pros

• Locked down by IAM out of the box.
• Any language that runs in a container.
• Generous monthly free tier.

Cons

• No stdio servers.
• IAM-based auth suits internal tools more than public OAuth flows.

Checked against: Cloud Run MCP hosting guide on 28 October 2026.

9. Azure Functions: serverless MCP on Microsoft's cloud

What it is. Azure Functions offers two options: an MCP extension with a tool trigger, or self-hosting a server built with the official SDKs. The second option "is currently in preview."

By default, clients need an access key. A preview "Turn on MCP authentication" button sets up Microsoft Entra ID OAuth for you. The tutorial covers C#, Python and TypeScript.

Best for: Companies standardized on Azure and Entra ID.

Pricing: From Azure Functions pricing: the Flex Consumption plan includes "a monthly free grant of 250,000 executions and 100,000 GB-s." Rates beyond that vary by region.

Pros

• One-click Entra ID auth for MCP (preview).
• Works with VS Code and Microsoft Foundry agents.
• Servers can be listed in Azure API Center.

Cons

• SDK-based hosting and built-in MCP auth are both preview.
• Only three languages covered in the tutorial.

Checked against: Azure Functions MCP tutorial on 28 October 2026.

A caution about Smithery

Smithery was a popular place to host servers. Its shutdown notice says that on 31 October 2026 it is "shutting down Smithery's connection management services." Server URLs on run.tools and server.smithery.ai stop working, along with the API, CLI and accounts. The public directory stays, "powered by Arcade.dev." If you host there, move now and update every client config.

How to pick

Pick a general cloud if your team already deploys there and has an identity provider. Pick an MCP-native host if you want Git deploys, MCP analytics and managed OAuth without building them. If you need central control over many servers rather than hosting one, see our MCP gateways list.

Next step

If you want a remote server built, secured and deployed on the right platform, our MCP development team can handle it end to end.

Frequently asked questions