MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/102
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,425–2,448 of 3,145 · ranked by trust score, then stars
codex-claude-council
hamza-aziz-ai/codex-claude-council
Two AIs. One answer. ChatGPT and Claude discuss with each other until they agree, through your own signed-in CLIs: no API keys. Both read your project (never change it) and search the web. Plugin for Claude Code, Codex, Claude Desktop and the ChatGPT app.
llm-wiki-monorepo
JeanBaissari/llm-wiki-monorepo
A production-grade knowledge base operating system — AI agents compile raw sources into persistent, cross-linked Markdown wikis with concurrency control, multi-provider LLM integration, FTS5 search, and community detection. One repo. Any agent. Any machine.
mcp
getDynamoi/mcp
Connect ChatGPT, Claude, Cursor, and other AI agents to Dynamoi for free Spotify Smart Links, music promotion campaigns, analytics, and distribution.
systems-manager
Knuckles-Team/systems-manager
System-Manager will update your system and install/upgrade applications. Supports Agentic AI through MCP Server
vedaksha
arthiqlabs/vedaksha
Vedaksha — clean-room Vedic astrology & astronomical ephemeris engine (kundali, panchanga, dashas, nakshatras, vargas) with sub-arcsecond precision. Rust, Python, WebAssembly, and an MCP server for AI agents.
wso2-docs-mcp-server
iamvirul/wso2-docs-mcp-server
Production-ready MCP server providing RAG-based semantic search over WSO2 documentation (API Manager, Micro Integrator, Choreo, Ballerina, BI , IS).
MCP TypeScript SDK
Alcyone-Labs/mcp-typescript-sdk
The official TypeScript SDK for Model Context Protocol servers and clients
okfit
spencerbeggs/okfit
Node.js tooling for Google Open Knowlege Format agentic documentation system.
ambit
zz-plant/ambit
See what you and your AI agents can do, and what one more step would unlock. Ambit maps Claude Code, Cursor, OpenCode and nine more agent configs into one local graph: what works, what to set up next, and what breaks if a piece goes.
auevo-core
auevo-agents/auevo-core
Where AI agents post, and prove it — an independent reputation protocol, a non-custodial credit pool, and tokenized-asset trading, on Robinhood Chain.
chatgpt-local-workspace
CSL19980820/chatgpt-local-workspace
ChatGPT 网页对话直连 Windows 本机:文件读写、精确编辑、命令执行、Git 审阅(OpenAI 官方 Tunnel),桌面程序内嵌实时工作台按对话回放调用时间线。单 EXE、零安装。ChatGPT-driven local Windows workspace over OpenAI Tunnel with an embedded live dashboard; single EXE, zero install.
china-law-mcp
thu-lawyer/china-law-mcp
⚖️ 中国法律条文 MCP 服务器 | 378 部法律 · 23,995 条现行法条检索 + 引用核验(防幻觉)| 免费、免注册、免 API key、本地运行 | Chinese statute retrieval + citation verification for LLMs
commune-cookbook
black22345/commune-cookbook
Provide AI agents with real email and phone identities using production-ready tools compatible with LangChain, CrewAI, and other frameworks.
documentdb-mcp
Knuckles-Team/documentdb-mcp
DocumentDB A2A + MCP Server
redis-mcp
YawLabs/redis-mcp
Redis MCP server -- SCAN-based key exploration, TTL/memory/keyspace introspection, slowlog + INFO health, and a DBA advisor for AI assistants
repo-aeo
WhiteBite/repo-aeo
Make any repository, npm package and docs site findable and recommendable to humans, AI agents and search engines.
selenium-flow
kubed-io/selenium-flow
A selenium mcp and http workflow client.
ucode-agent
sppideey/ucode-agent
Free, open-source AI coding agent for your terminal. Builds whole apps in about a minute on Google Gemini's free tier, edits real code, checks and fixes its own work, with undo, MCP and a headless mode.
macula-mcp
macula-io/macula-mcp
MCP server that gives Claude Code, Cursor, opencode and any agent harness shared memory, identity and messaging over the Macula mesh
AI Counsel
blueman82/ai-counsel
True deliberative consensus MCP server where AI models debate and refine positions across multiple rounds
australian-accounting
ryanduguid/australian-accounting
Local engines for ATO small-business benchmarks, Payday Super 2026 and Division 7A loan review, available through the aus-accounting-mcp server. Synthetic fixtures only.
cvlac-mcp
stivenson/cvlac-mcp
MCP server that syncs a MinCiencias CvLAC profile with a personal portfolio, via Playwright
machines-as-tools
joonlab/machines-as-tools
기기를 도구로 (Machines as Tools) — Claude Code 세션 하나가 남는 맥을 MCP 도구로 쓰는 구조. 원격 실행기 mm + MCP 서버 multimac(도구 19개) + 실측 문서
marian-coach-eng-leadership-toolkit
marian-kamenistak/ai-engineering-leader-toolkit
MCP server: engineering leadership answers from 3,662 mentoring sessions. Benchmarks, 1:1 playbooks, developer value calculator. One URL, no install.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?