MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/100
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,377–2,400 of 3,145 · ranked by trust score, then stars
SFCC Dev
taurgis/sfcc-dev-mcp
Supercharge your Salesforce B2C Commerce Cloud development with AI-powered documentation access, real-time log analysis, and intelligent best practices guidance
Terminal
weidwonder/terminal-mcp-server
Make LLM can control your PC or Server with ssh or terminal.
Blaze
outfitter-dev/blz
Local-first, line-accurate search for blazing-fast lookups of llms.txt documentation. Human-friendly, Agent-ready.
roast-my-design-system
gregkozakiewicz/roast-my-design-system
AI design system scanner + mcp server. Scores repos 0-100, writes fix prompts. 27K+ npm downloads.
Frontend Testing
studentofjs/mcp-frontend-testing
Frontend testing tools for Model Context Protocol
Callcenter.js
gerkensm/callcenter.js-mcp
Callcenter.JS AI Voice Agent VOIP Connector, MCP + CLI
RAGStack
hatmanstack/ragstack-lambda
Search, chat, upload, and scrape a serverless RAGStack knowledge base on AWS.
Readwise
iamalexander/readwise-mcp
MCP server for Readwise
genaiwithms/twitter-mcp
MCP server for X (Twitter) that enables AI assistants to post tweets, upload images, and search Twitter using natural language via the Twitter API.
Aws Resources
baryhuang/mcp-server-aws-resources-python
A Python-based MCP server that lets Claude run boto3 code to query and manage AWS resources. Execute powerful AWS operations directly through Claude with proper sandboxing and containerization. No need for complex setups - just pass your AWS credentials and start interacting with all AWS services.
Codex
x51xxx/codex-mcp-tool
MCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review
Data Agents
hottechstack/dataagents
Data Agents are intelligent assistants built by data engineers to help non-data professionals navigate the organization’s data infrastructu
Authenticated Cloud Run
the-freetech-company/mcp-sse-authenticated-cloud-run
Host an Model Context Protocol SSE deployment on Cloud Run, Authenticating with IAM.
Blowback
esnark/blowback
MCP Server for Frontend dev environment (formerly known as vite-mcp-server)
Move Agent Kit
metamove/move-agent-kit
Move Agent Kit is a comprehensive toolkit designed to simplify AI agents' interactions with Move-based blockchains
Nodit
noditlabs/nodit-mcp-server
A Model Context Protocol (MCP) server for AI agents to interact with blockchain data via Nodit’s Web3 Data and Node APIs. Enables LLMs to access structured, multi-chain blockchain context with zero blockchain-specific logic.
T2000
mission69b/t2000
Agent marketplace
Gateway
eznix86/mcp-gateway
Too much tools in context. Use a gateway
Noema
Fail-Safe/Noema
The intentional memory layer for your AI agents.
Telegram Notifications
kstonekuan/telegram-notification-mcp
Simple MCP server to send you notifications on telegram
Unleash MCP Server
Unleash/unleash-mcp
An MCP server for Unleash feature flagging server, and your new best coding buddy
ENCODE Toolkit
ammawla/encode-toolkit
MCP server and Claude Code plugin for the ENCODE Project: search, download and analyze ChIP-seq, ATAC-seq, RNA-seq, WGBS, Hi-C and CUT&RUN data with 20 tools, 47 skills and 7 Nextflow pipelines
opennote
opennote-org/opennote
An AI native notebook app built with pure Rust and GPUI
servicenow-api
Knuckles-Team/servicenow-api
ServiceNow MCP Server and API Wrapper
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?