MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/104

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,473–2,496 of 3,145 · ranked by trust score, then stars

ddg-agent-payable-services

daedalusdevelopmentgroup/ddg-agent-payable-services

✕BLOCK D

Pay-per-call x402 gateway for AI agents — MCP server + OpenAI-compatible API for agent tools, market data, RPC, and MCP security audits. Pay in USDC on Base, no account.

★ 09 writestdio

email-mcp-pro

batsama/email-mcp-pro

✕BLOCK D

通用邮箱 MCP 服务器 - 基于 imapflow 重写 IMAP 实现,支持 IMAP ID 命令(RFC 2971),完美兼容网易邮箱

★ 01 writestdio

globalion-video-render

globalion/video-render-mcp

✕BLOCK D

MCP server that renders Hyperplexed-style motion-graphics MP4s from a script. Free msedge-tts voice, Remotion animations, no watermark. Sign in with Google, get an API key, paste the URL into Claude Desktop.

★ 02 readstreamable-http

hallucc-mcp

fredyee/hallucc-mcp

✕BLOCK D

MCP server for AI hallucination detection & agent safety — verify claims, guard prompts, gate CUA actions

★ 05 readstdio

jorgex-stack

jorgehn98/jorgex-stack

✕BLOCK D

Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI y OpenCode

★ 01 readstreamable-http

juridico-pt

linofcp007/juridico-pt

✕BLOCK D

Advogado pessoal e empresarial em Portugal — plugin Claude Code + servidor MCP (referencias, templates, playbooks, checklists e calculadoras juridicas). PT/EN.

★ 038 readstdio

kinjot-mcp

zainzaidi37/kinjot-mcp

✕BLOCK D

jotnow - Save useful agent outputs

★ 02 writestdio

ko-qmd

tak-bro/ko-qmd

✕BLOCK D

Local hybrid search for Korean Markdown notes & Obsidian vaults (BM25 + Hangul bigram + Qwen3 + rerank, MCP/CLI/SDK) · 한국어 마크다운 로컬 검색

★ 05 readstdio

koala-studios-newton-browser

Koala-Studios/newton-browser

✕BLOCK D
★ 02 write

leanix-agent

Knuckles-Team/leanix-agent

✕BLOCK D
★ 01 readsse

librecrawl-mcp

bridgettmirthful637/librecrawl-mcp

✕BLOCK D

Audit websites with this self-hosted SEO crawler. Connect LibreCrawl to Claude and perform unlimited technical audits without per-crawl fees.

★ 02 writestreamable-http

mac-voice-mcp

jeet0007/mac-voice-mcp

✕BLOCK D

Talk with Claude out loud on your Mac — on-device speech with whisper.cpp. An MCP server.

★ 02 readstdio

MangoMe

tonnestate/MangoMe

✕BLOCK D

Persistent multi-agent work graph and document-state machine for contracts, specs, slices, evidence, verification, handoffs, and cost-aware AI execution.

★ 024 writestreamable-http

mcp-dotnet

jgbright/mcp-dotnet

✕BLOCK D

Two MCP stdio servers in .NET 10: Microsoft Teams (teams, channels, chats, messages, search) via Microsoft Graph, and Azure DevOps (work items, pull requests, pipelines, repos, search) via its REST API. Interactive Entra ID sign-in instead of PATs; read-only by default with opt-in write and send gat

★ 01 read

mcprobe

Amalleheavy908/mcprobe

✕BLOCK D

Validate MCP servers by inspecting tools, schemas, and resource URIs to identify security risks before connection.

★ 01 write

mv-agent-broker

kuzyasun/mv-agent-broker

✕BLOCK D

Local MCP broker for coding agents from Cursor, Antigravity, ZCode, Codex, and Claude Code. Configure agent pools, models, and effort across projects; run parallel workers in isolated workspaces and coordinate independent reviews with durable sessions and artifacts.

★ 03 write

ObsidianKnowledgeCurator

c-ibarra/ObsidianKnowledgeCurator

✕BLOCK D

Autonomous, modular knowledge lifecycle agent built on the Antigravity 2.0 SDK and Model Context Protocol (MCP) for deterministic Obsidian graph curation.

★ 08 writestdio

portainer-agent

Knuckles-Team/portainer-agent

✕BLOCK D

Portainer - Manage your Portainer instance through the Portainer Agent/MCP!

★ 02 readsse

publedge

snapsynapse/publedge

✕BLOCK D

Open recordkeeping protocol for fact-specific written interpretations between two parties: JIAs, RMAs, no-action letters, private letter rulings, advisory opinions. Drafting in public.

★ 06 readstdio

radmail-mcp

radmail-ai/radmail-mcp

✕BLOCK D

Email MCP server / email operating system for AI agents: two-axis triage (importance x urgency), a Right Now lane, commitment follow-through, reviewable drafts, and a machine-verifiable BEC hard-stop (money/banking-change/first-contact = human-only). Zero-auth sandbox; the hosted tier never sends ma

★ 03 writestdio

snayyar00-webability

snayyar00/webability-mcp

✕BLOCK D

Free accessibility MCP server (WCAG 2.2, ADA, Section 508, EAA). Hosted at https://mcp.webability.io/mcp, no API key for scans. Three engines, structured fixes, verify_fix.

★ 01 writestdio

sonovault

rekordcloud/sonovault-mcp

✕BLOCK D

MCP server for the SonoVault music metadata API. Search 90M+ tracks, artists, and releases from AI assistants.

★ 015 readstdio

trustscoreagent

trustscoreagent/trustscoreagent

✕BLOCK D

Free, open reputation registry for AI microservices. Agents check trust scores before calling any service.

★ 01 writestdio

ugc-vz-neu

shufflethis/ugc-vz-neu

✕BLOCK D

Kostenloses UGC-Creator-Verzeichnis für DACH – echte Creator mit Portfolio- und Social-Nachweisen. Next.js, REST API v1, MCP-Server (ugc-vz-mcp) für AI-Agents. Keine Provision, keine KI-Avatare.

★ 04 readstreamable-http

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.