MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/103
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,449–2,472 of 3,145 · ranked by trust score, then stars
mcp
fetchsandbox/mcp
A deterministic verification engine for agents. Fires the edge cases your sandbox never sends — duplicate webhooks, declined cards, rate limits — then proves a fix: the same scenario fails on the old code and passes on the new. npm: fetchsandbox-mcp
mcp-code-mode
Jame0077/mcp-code-mode
🤖 Enable AI code generation using the Code Execution MCP Server, integrating large language models with the Model Context Protocol for seamless tool use.
mcp-server
223n/mcp-server
ローカルOllmaを参照、公開するMCPサーバー
opik-openclaw
brucekumar/opik-openclaw
Export OpenClaw agent traces to monitoring systems for improved observability and diagnostic insights.
podcastindex-mcp-cli
thenavidm/podcastindex-mcp-cli
Podcast Index MCP server and CLI for Claude Code, Codex and AI agents. 36 tools for podcast search, episode transcripts you can actually read and search, Podcasting 2.0 tags, value-for-value data, feed health and index stats.
remote-ssh-mcp
the-nine-nation/remote-ssh-mcp
Persistent, stateful remote SSH sessions for AI agents via MCP. Keep cwd, env & shell state across commands — powered by your local OpenSSH. Works with Claude, Cursor & any MCP host.
tossinbox
mohamed-khairy-5i/tossinbox
Disposable email (temp mail) CLI + MCP server for AI agents. Spawn a throwaway inbox, wait for the OTP verification code, toss it. --json on every command, exit codes 0-4, no sign-up, no API keys. Node 18+, Homebrew, npm, npx, GitHub Action.
vision-driven-design
simonmak-ascent/vision-driven-design
Spec-driven development MCP server for AI coding agents — 8 phases, bi-directional traceability, and 7 quality gates, 15 tools over Streamable HTTP (MIT)
Open Claude Funnel
interactive-inc/open-claude-funnel
ModWrench
171county/modwrench
One MCP server for mod platforms and local modding diagnostics. Search Thunderstore, read your real load order from MO2/r2modman/Vortex, and trace a crash log to the mod that caused it — from inside Claude, Cursor, or any MCP client. Free and MIT.
Rockhopper MCP Server
Rockhopper-Co/mcp-server
@sealmetrics/mcp
sealmetrics/mcp
Model Context Protocol server for Sealmetrics — privacy-first, cookieless analytics in Claude, ChatGPT and any MCP client. Includes the Claude Desktop extension (.mcpb).
@shiftleftpt/sbd-toe-mcp
SbD-ToE/sbd-toe-mcp
PoC para um MCP sobre o knowledge base do SbD-ToE
acqpath-distribution
reflectme-source/acqpath-distribution
Check declared content rights before RAG, AI input, summarization, training or indexing. Signed RSL evidence via HTTP x402; no legal clearance.
aga-mcp-server
attestedintelligence/aga-mcp-server
Signed decision records for agent vendors facing customer evidence reviews. Public reference gateway and static verifier; pre-pilot, with documented limits.
AgentKit
Yacine-ai-tech/AgentKit
Governed MCP server and agent runtime: signed action approvals, typed tool effects and audit logs for Claude Desktop, Cursor and custom agents.
AgentNexus
Strategiumfinancepartner/AgentNexus
Continuously verified registry of the APIs, MCP servers and CLIs that AI agents call — live health checks, reliability history, and an anonymous MCP endpoint agents can connect to without a consent screen.
armadoc-cli
waimun/armadoc-cli
Local MCP server and CLI for Armadoc. Lets your AI agent send and read end-to-end encrypted documents; your private key and plaintext never leave your machine.
awesome-ai-red-teaming-jp
Ajay77187718/awesome-ai-red-teaming-jp
整理された日本語のAIレッドチーミング情報集。攻撃手法、ツール、規制、防御、論文をまとめて学べるリソース集
base-http402-extractor-api
psicossz29-netizen/base-http402-extractor-api
Autonomous HTTP 402 Web-to-Markdown API & MCP Server powered by Base L2 micropayments (0.05 USDC).
bolthub
signaltech-org/bolthub-sdk
Source for bolthub's published SDK packages (npm @bolthub/*, PyPI bolthub)
canon
moonlight-lupin/canon
Local-first, multilingual church system: plan the service, print the bulletin, project the slides, keep members, rotas, records and the church's books. Runs on an office PC or Docker. AI assistants such as Claude connect through a permission-controlled MCP server.
Claudex
Mcalesteryahoo411/Claudex
Connect Claude Code interfaces to Codex and native Claude models using a local bridge.
dayze
gohluke/dayze-mcp
Dayze gives connected AI tools Life Context: your people, plans and memories in a private, correctable record. Hosted MCP (OAuth): https://dayze.com/api/mcp
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?