MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/102

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,425–2,448 of 3,145 · ranked by trust score, then stars

codex-claude-council

hamza-aziz-ai/codex-claude-council

✕BLOCK D

Two AIs. One answer. ChatGPT and Claude discuss with each other until they agree, through your own signed-in CLIs: no API keys. Both read your project (never change it) and search the web. Plugin for Claude Code, Codex, Claude Desktop and the ChatGPT app.

★ 34 write

llm-wiki-monorepo

JeanBaissari/llm-wiki-monorepo

✕BLOCK D

A production-grade knowledge base operating system — AI agents compile raw sources into persistent, cross-linked Markdown wikis with concurrency control, multi-provider LLM integration, FTS5 search, and community detection. One repo. Any agent. Any machine.

★ 33 writestdio

mcp

getDynamoi/mcp

✕BLOCK D

Connect ChatGPT, Claude, Cursor, and other AI agents to Dynamoi for free Spotify Smart Links, music promotion campaigns, analytics, and distribution.

★ 35 readstreamable-http

systems-manager

Knuckles-Team/systems-manager

✕BLOCK D

System-Manager will update your system and install/upgrade applications. Supports Agentic AI through MCP Server

★ 37 readsse

vedaksha

arthiqlabs/vedaksha

✕BLOCK D

Vedaksha — clean-room Vedic astrology & astronomical ephemeris engine (kundali, panchanga, dashas, nakshatras, vargas) with sub-arcsecond precision. Rust, Python, WebAssembly, and an MCP server for AI agents.

★ 37 readstdio

wso2-docs-mcp-server

iamvirul/wso2-docs-mcp-server

✕BLOCK D

Production-ready MCP server providing RAG-based semantic search over WSO2 documentation (API Manager, Micro Integrator, Choreo, Ballerina, BI , IS).

★ 34 readstdio

MCP TypeScript SDK

Alcyone-Labs/mcp-typescript-sdk

✕BLOCK D

The official TypeScript SDK for Model Context Protocol servers and clients

★ 21 writesse

okfit

spencerbeggs/okfit

✕BLOCK D

Node.js tooling for Google Open Knowlege Format agentic documentation system.

★ 214 read

ambit

zz-plant/ambit

✕BLOCK D

See what you and your AI agents can do, and what one more step would unlock. Ambit maps Claude Code, Cursor, OpenCode and nine more agent configs into one local graph: what works, what to set up next, and what breaks if a piece goes.

★ 212 writestdio

auevo-core

auevo-agents/auevo-core

!CAUTION D

Where AI agents post, and prove it — an independent reputation protocol, a non-custodial credit pool, and tokenized-asset trading, on Robinhood Chain.

★ 27 writestdio

chatgpt-local-workspace

CSL19980820/chatgpt-local-workspace

✕BLOCK D

ChatGPT 网页对话直连 Windows 本机:文件读写、精确编辑、命令执行、Git 审阅(OpenAI 官方 Tunnel),桌面程序内嵌实时工作台按对话回放调用时间线。单 EXE、零安装。ChatGPT-driven local Windows workspace over OpenAI Tunnel with an embedded live dashboard; single EXE, zero install.

★ 23 write

china-law-mcp

thu-lawyer/china-law-mcp

✕BLOCK D

⚖️ 中国法律条文 MCP 服务器 | 378 部法律 · 23,995 条现行法条检索 + 引用核验(防幻觉)| 免费、免注册、免 API key、本地运行 | Chinese statute retrieval + citation verification for LLMs

★ 25 readstdio

commune-cookbook

black22345/commune-cookbook

✕BLOCK D

Provide AI agents with real email and phone identities using production-ready tools compatible with LangChain, CrewAI, and other frameworks.

★ 25 writestdio

documentdb-mcp

Knuckles-Team/documentdb-mcp

✕BLOCK D

DocumentDB A2A + MCP Server

★ 21 readsse

redis-mcp

YawLabs/redis-mcp

✕BLOCK D

Redis MCP server -- SCAN-based key exploration, TTL/memory/keyspace introspection, slowlog + INFO health, and a DBA advisor for AI assistants

★ 21 writestdio

repo-aeo

WhiteBite/repo-aeo

✕BLOCK D

Make any repository, npm package and docs site findable and recommendable to humans, AI agents and search engines.

★ 25 write

selenium-flow

kubed-io/selenium-flow

✕BLOCK D

A selenium mcp and http workflow client.

★ 215 readstdio

ucode-agent

sppideey/ucode-agent

✕BLOCK D

Free, open-source AI coding agent for your terminal. Builds whole apps in about a minute on Google Gemini's free tier, edits real code, checks and fixes its own work, with undo, MCP and a headless mode.

★ 213 write

macula-mcp

macula-io/macula-mcp

✕BLOCK D

MCP server that gives Claude Code, Cursor, opencode and any agent harness shared memory, identity and messaging over the Macula mesh

★ 15 writestdio

AI Counsel

blueman82/ai-counsel

✕BLOCK D

True deliberative consensus MCP server where AI models debate and refine positions across multiple rounds

★ 11 readstdio

australian-accounting

ryanduguid/australian-accounting

✕BLOCK D

Local engines for ATO small-business benchmarks, Payday Super 2026 and Division 7A loan review, available through the aus-accounting-mcp server. Synthetic fixtures only.

★ 11 writestdio

cvlac-mcp

stivenson/cvlac-mcp

✕BLOCK D

MCP server that syncs a MinCiencias CvLAC profile with a personal portfolio, via Playwright

★ 13 writestdio

machines-as-tools

joonlab/machines-as-tools

✕BLOCK D

기기를 도구로 (Machines as Tools) — Claude Code 세션 하나가 남는 맥을 MCP 도구로 쓰는 구조. 원격 실행기 mm + MCP 서버 multimac(도구 19개) + 실측 문서

★ 11 write

marian-coach-eng-leadership-toolkit

marian-kamenistak/ai-engineering-leader-toolkit

✕BLOCK D

MCP server: engineering leadership answers from 3,662 mentoring sessions. Benchmarks, 1:1 playbooks, developer value calculator. One URL, no install.

★ 12 readstreamable-http

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.