MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 28 Oct 2026. https://modelsatlas.com/mcp/no-destructive

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

1–24 of 3,145 · ranked by trust score, then stars

figma-developer-mcp

GLips/Figma-Context-MCP

✓SAFE B

MCP server to provide Figma layout information to AI coding agents like Cursor

★ 15,9732 readstdio

Figma Context

glips/figma-context-mcp

✓SAFE B

MCP server to provide Figma layout information to AI coding agents like Cursor

★ 15,8812 readstdio

Eino

cloudwego/eino

!CAUTION B

The ultimate LLM/AI application development framework in Go.

★ 13,1031 write

Ghidra

lauriewired/ghidramcp

!CAUTION B

MCP Server for Ghidra

★ 10,1298 writesse

Graft

nanonets/graft

!CAUTION B

Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.

★ 8,8392 write

Graft

trailhq/graft

!CAUTION B

Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.

★ 8,8372 write

Graft

trailhq/Graft

!CAUTION B

Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.

★ 8,8372 write

Mobile Next

mobile-next/mobile-mcp

!CAUTION B

Model Context Protocol Server for Mobile Automation and Scraping (iOS, Android, Emulators, Simulators and Real Devices)

★ 6,7791 readstdio

WhatsApp

lharries/whatsapp-mcp

✓SAFE B

WhatsApp MCP server

★ 6,2923 writestdio

Godot MCP

Coding-Solo/godot-mcp

✓SAFE B

MCP server for interfacing with Godot game engine. Provides tools for launching the editor, running projects, and capturing debug output.

★ 6,0216 writestdio

Godot

coding-solo/godot-mcp

✓SAFE B

MCP server for interfacing with Godot game engine. Provides tools for launching the editor, running projects, and capturing debug output.

★ 5,7586 writestdio

Excalidraw

excalidraw/excalidraw-mcp

!CAUTION B

Fast and streamable Excalidraw MCP App

★ 5,3401 readstdio

exa-mcp-server

exa-labs/exa-mcp-server

✓SAFE B

Exa MCP for web search and web crawling!

★ 5,0892 writestdio

PPTAgent

icip-cas/pptagent

✓SAFE B

An Agentic Framework for Reflective PowerPoint Generation

★ 5,0462 readstdio

Exa

exa-labs/exa-mcp-server

✓SAFE B

Exa MCP for web search and web crawling!

★ 5,0342 writesse

Chart Generator

antvis/mcp-server-chart

✓SAFE B

🤖 A visualization mcp & skills contains 25+ visual charts using @antvis. Using for chart generation and data analysis.

★ 4,37726 readsse

Browserbase

browserbase/mcp-server-browserbase

✓SAFE B

Allow LLMs to control a browser with Browserbase and Stagehand

★ 3,4131 writestdio

Apple

supermemoryai/apple-mcp

✓SAFE B

Collection of apple-native tools for the model context protocol.

★ 3,1306 writestdio

Apple

dhravya/apple-mcp

✓SAFE B

Collection of apple-native tools for the model context protocol.

★ 3,1286 writestdio

Ableton

ahujasid/ableton-mcp

✓SAFE B

Control Ableton Live with any LLM: create tracks, arrange clips & compose music via MCP

★ 3,0811 write

N8n MCP Client

nerding-io/n8n-nodes-mcp

✓SAFE B

n8n custom node for MCP

★ 3,0431 readstreamable-http

Markdownify

zcaceres/markdownify-mcp

✓SAFE B

A Model Context Protocol server for converting almost anything to Markdown

★ 2,99611 readstdio

DDGS

deedy5/ddgs

!CAUTION B

A metasearch library that aggregates results from diverse web search services

★ 2,9816 read

Supabase

supabase-community/mcp-supabase

✓SAFE B

Connect Supabase to your AI assistants

★ 2,9372 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.