MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/10

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

217–240 of 3,145 · ranked by trust score, then stars

Figma Flutter

mhmzdev/figma-flutter-mcp

✓SAFE B

An MCP server that provides the coding agents Figma's design token to write Flutter code.

★ 24413 readstdio

DrissionPage

wxhzhwxhzh/drissionpagemcp

✓SAFE B

基于DrissionPage和FastMCP的浏览器自动化MCP服务器,提供丰富的浏览器操作API供AI调用

★ 2434 writestdio

DrssionPage

wxhzhwxhzh/drssionpagemcp

✓SAFE B

基于DrissionPage和FastMCP的浏览器自动化MCP服务器,提供丰富的浏览器操作API供AI调用

★ 2434 writestdio

Google Analytics

surendranb/google-analytics-mcp

✓SAFE B

Google Analytics 4 data to AI agents, agentic workflows, and MCP clients. Give agents analysis-ready access to website traffic, user behavior, and performance data with schema discovery, server-side aggregation, and safe defaults that reduce data wrangling.

★ 24211 readstdio

Reqable

elonjask/reqable-mcp

✓SAFE B

MCP server for Reqable local capture data

★ 2421 write

Mindmap

yuchenssr/mindmap-mcp-server

✓SAFE B

mindmap, mcp server, artifact

★ 2401 readstdio

Uber Eats

ericzakariasson/uber-eats-mcp-server

✓SAFE B
★ 2391 writestdio

XiYan

xgenerationlab/xiyan_mcp_server

✓SAFE B

A Model Context Protocol (MCP) server that enables natural language queries to databases

★ 2391 readstreamable-http

Unsplash

hellokaton/unsplash-mcp-server

✓SAFE B

🔎 A MCP server for Unsplash image search.

★ 2371 read

unsplash-mcp-server

hellokaton/unsplash-mcp-server

✓SAFE B

🔎 A MCP server for Unsplash image search.

★ 2371 read

Drawio2go

menghuan1918/drawio2go

!CAUTION B

A modern DrawIO editor application. AI-Powered, Human-AI Collaboration | AI 加持,人机共绘drawio

★ 2351 writestreamable-http

Backlog

nulab/backlog-mcp-server

✓SAFE B
★ 2341 write

Discord

v-3/discordmcp

✓SAFE B

Discord MCP Server for Claude Integration

★ 2341 writestdio

Server Commands

g0t4/mcp-server-commands

✓SAFE B

Model Context Protocol server to run commands (tool: `runProcess`)

★ 2341 writestdio

Nano Banana

conechoai/nano-banana-mcp

✓SAFE B

A Nano Banana MCP server, which you can integrate to cursor/claude code and any mcp client

★ 2321 writestdio

Find Flights

ravinahp/flights-mcp

✓SAFE B

An MCP server to search for flights.

★ 2313 readstdio

Image-Gen

fengin/image-gen-server

✓SAFE B

一个能与Cursor集成的图片生成mcp server工具,实现调用即梦逆向接口

★ 2292 read

Toleno

tolenonetwork/toleno-mcp

✓SAFE B

Toleno Network MCP Server — Control your Toleno mining account directly from Claude AI using natural language.

★ 2272 writestdio

OpenStreetMap

jagan-shanmugam/open-streetmap-mcp

✓SAFE B

An OpenStreetMap MCP server implementation that enhances LLM capabilities with location-based services and geospatial data.

★ 22612 read

Apple Mail

patrickfreyer/apple-mail-mcp

✓SAFE B

MCP server giving AI assistants full access to Apple Mail - read, search, compose, organize & analyze emails via natural language

★ 2231 readstdio

Bifrost

biegehydra/bifrostmcp

✓SAFE B

VSCode Extension with an MCP server that exposes semantic tools like Find Usages and Rename to LLMs

★ 2232 writesse

MinerU-Ecosystem

opendatalab/mineru-ecosystem

✓SAFE B

Parse PDFs, images, doc, docx, ppt, pptx, xls, xlsx, html into Markdown using MinerU API.

★ 2201 readstdio

Perfetto

antarikshc/perfetto-mcp

✓SAFE B

This is a Model Context Protocol (MCP) server that gets answers from your Perfetto Traces. It turns natural‐language prompts into focused Perfetto analyses.

★ 2201 writestdio

RepoMapper

pdavis68/repomapper

✓SAFE B

A tool to produce a map of a codebase within a git repository. Based entirely on the "Repo Map" functionality in Aider.chat

★ 2172 read

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.