MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/103

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,449–2,472 of 3,145 · ranked by trust score, then stars

mcp

fetchsandbox/mcp

✕BLOCK D

A deterministic verification engine for agents. Fires the edge cases your sandbox never sends — duplicate webhooks, declined cards, rate limits — then proves a fix: the same scenario fails on the old code and passes on the new. npm: fetchsandbox-mcp

★ 18 writestdio

mcp-code-mode

Jame0077/mcp-code-mode

✕BLOCK D

🤖 Enable AI code generation using the Code Execution MCP Server, integrating large language models with the Model Context Protocol for seamless tool use.

★ 13 writestdio

mcp-server

223n/mcp-server

✕BLOCK D

ローカルOllmaを参照、公開するMCPサーバー

★ 12 writestreamable-http

opik-openclaw

brucekumar/opik-openclaw

✕BLOCK D

Export OpenClaw agent traces to monitoring systems for improved observability and diagnostic insights.

★ 11 read

podcastindex-mcp-cli

thenavidm/podcastindex-mcp-cli

✕BLOCK D

Podcast Index MCP server and CLI for Claude Code, Codex and AI agents. 36 tools for podcast search, episode transcripts you can actually read and search, Podcasting 2.0 tags, value-for-value data, feed health and index stats.

★ 11 write

remote-ssh-mcp

the-nine-nation/remote-ssh-mcp

✕BLOCK D

Persistent, stateful remote SSH sessions for AI agents via MCP. Keep cwd, env & shell state across commands — powered by your local OpenSSH. Works with Claude, Cursor & any MCP host.

★ 11 writestdio

tossinbox

mohamed-khairy-5i/tossinbox

✕BLOCK D

Disposable email (temp mail) CLI + MCP server for AI agents. Spawn a throwaway inbox, wait for the OTP verification code, toss it. --json on every command, exit codes 0-4, no sign-up, no API keys. Node 18+, Homebrew, npm, npx, GitHub Action.

★ 11 writestdio

vision-driven-design

simonmak-ascent/vision-driven-design

✕BLOCK D

Spec-driven development MCP server for AI coding agents — 8 phases, bi-directional traceability, and 7 quality gates, 15 tools over Streamable HTTP (MIT)

★ 13 writestdio

Open Claude Funnel

interactive-inc/open-claude-funnel

✕BLOCK D
★ 02 writestdio

ModWrench

171county/modwrench

✕BLOCK D

One MCP server for mod platforms and local modding diagnostics. Search Thunderstore, read your real load order from MO2/r2modman/Vortex, and trace a crash log to the mod that caused it — from inside Claude, Cursor, or any MCP client. Free and MIT.

★ 02 writestdio

Rockhopper MCP Server

Rockhopper-Co/mcp-server

✕BLOCK D
★ 04 writestdio

@sealmetrics/mcp

sealmetrics/mcp

✕BLOCK D

Model Context Protocol server for Sealmetrics — privacy-first, cookieless analytics in Claude, ChatGPT and any MCP client. Includes the Claude Desktop extension (.mcpb).

★ 02 writestdio

@shiftleftpt/sbd-toe-mcp

SbD-ToE/sbd-toe-mcp

✕BLOCK D

PoC para um MCP sobre o knowledge base do SbD-ToE

★ 04 write

acqpath-distribution

reflectme-source/acqpath-distribution

✕BLOCK D

Check declared content rights before RAG, AI input, summarization, training or indexing. Signed RSL evidence via HTTP x402; no legal clearance.

★ 01 readstreamable-http

aga-mcp-server

attestedintelligence/aga-mcp-server

✕BLOCK D

Signed decision records for agent vendors facing customer evidence reviews. Public reference gateway and static verifier; pre-pilot, with documented limits.

★ 011 readstdio

AgentKit

Yacine-ai-tech/AgentKit

✕BLOCK D

Governed MCP server and agent runtime: signed action approvals, typed tool effects and audit logs for Claude Desktop, Cursor and custom agents.

★ 01 readsse

AgentNexus

Strategiumfinancepartner/AgentNexus

✕BLOCK D

Continuously verified registry of the APIs, MCP servers and CLIs that AI agents call — live health checks, reliability history, and an anonymous MCP endpoint agents can connect to without a consent screen.

★ 02 writestreamable-http

armadoc-cli

waimun/armadoc-cli

✕BLOCK D

Local MCP server and CLI for Armadoc. Lets your AI agent send and read end-to-end encrypted documents; your private key and plaintext never leave your machine.

★ 01 writestdio

awesome-ai-red-teaming-jp

Ajay77187718/awesome-ai-red-teaming-jp

✕BLOCK D

整理された日本語のAIレッドチーミング情報集。攻撃手法、ツール、規制、防御、論文をまとめて学べるリソース集

★ 04 readstdio

base-http402-extractor-api

psicossz29-netizen/base-http402-extractor-api

✕BLOCK D

Autonomous HTTP 402 Web-to-Markdown API & MCP Server powered by Base L2 micropayments (0.05 USDC).

★ 03 readstdio

bolthub

signaltech-org/bolthub-sdk

✕BLOCK D

Source for bolthub's published SDK packages (npm @bolthub/*, PyPI bolthub)

★ 04 writestdio

canon

moonlight-lupin/canon

✕BLOCK D

Local-first, multilingual church system: plan the service, print the bulletin, project the slides, keep members, rotas, records and the church's books. Runs on an office PC or Docker. AI assistants such as Claude connect through a permission-controlled MCP server.

★ 013 readstreamable-http

Claudex

Mcalesteryahoo411/Claudex

✕BLOCK D

Connect Claude Code interfaces to Codex and native Claude models using a local bridge.

★ 01 read

dayze

gohluke/dayze-mcp

✕BLOCK D

Dayze gives connected AI tools Life Context: your people, plans and memories in a private, correctable record. Hosted MCP (OAuth): https://dayze.com/api/mcp

★ 014 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.