MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/104
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,473–2,496 of 3,145 · ranked by trust score, then stars
ddg-agent-payable-services
daedalusdevelopmentgroup/ddg-agent-payable-services
Pay-per-call x402 gateway for AI agents — MCP server + OpenAI-compatible API for agent tools, market data, RPC, and MCP security audits. Pay in USDC on Base, no account.
email-mcp-pro
batsama/email-mcp-pro
通用邮箱 MCP 服务器 - 基于 imapflow 重写 IMAP 实现,支持 IMAP ID 命令(RFC 2971),完美兼容网易邮箱
globalion-video-render
globalion/video-render-mcp
MCP server that renders Hyperplexed-style motion-graphics MP4s from a script. Free msedge-tts voice, Remotion animations, no watermark. Sign in with Google, get an API key, paste the URL into Claude Desktop.
hallucc-mcp
fredyee/hallucc-mcp
MCP server for AI hallucination detection & agent safety — verify claims, guard prompts, gate CUA actions
jorgex-stack
jorgehn98/jorgex-stack
Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI y OpenCode
juridico-pt
linofcp007/juridico-pt
Advogado pessoal e empresarial em Portugal — plugin Claude Code + servidor MCP (referencias, templates, playbooks, checklists e calculadoras juridicas). PT/EN.
kinjot-mcp
zainzaidi37/kinjot-mcp
jotnow - Save useful agent outputs
ko-qmd
tak-bro/ko-qmd
Local hybrid search for Korean Markdown notes & Obsidian vaults (BM25 + Hangul bigram + Qwen3 + rerank, MCP/CLI/SDK) · 한국어 마크다운 로컬 검색
koala-studios-newton-browser
Koala-Studios/newton-browser
leanix-agent
Knuckles-Team/leanix-agent
librecrawl-mcp
bridgettmirthful637/librecrawl-mcp
Audit websites with this self-hosted SEO crawler. Connect LibreCrawl to Claude and perform unlimited technical audits without per-crawl fees.
mac-voice-mcp
jeet0007/mac-voice-mcp
Talk with Claude out loud on your Mac — on-device speech with whisper.cpp. An MCP server.
MangoMe
tonnestate/MangoMe
Persistent multi-agent work graph and document-state machine for contracts, specs, slices, evidence, verification, handoffs, and cost-aware AI execution.
mcp-dotnet
jgbright/mcp-dotnet
Two MCP stdio servers in .NET 10: Microsoft Teams (teams, channels, chats, messages, search) via Microsoft Graph, and Azure DevOps (work items, pull requests, pipelines, repos, search) via its REST API. Interactive Entra ID sign-in instead of PATs; read-only by default with opt-in write and send gat
mcprobe
Amalleheavy908/mcprobe
Validate MCP servers by inspecting tools, schemas, and resource URIs to identify security risks before connection.
mv-agent-broker
kuzyasun/mv-agent-broker
Local MCP broker for coding agents from Cursor, Antigravity, ZCode, Codex, and Claude Code. Configure agent pools, models, and effort across projects; run parallel workers in isolated workspaces and coordinate independent reviews with durable sessions and artifacts.
ObsidianKnowledgeCurator
c-ibarra/ObsidianKnowledgeCurator
Autonomous, modular knowledge lifecycle agent built on the Antigravity 2.0 SDK and Model Context Protocol (MCP) for deterministic Obsidian graph curation.
portainer-agent
Knuckles-Team/portainer-agent
Portainer - Manage your Portainer instance through the Portainer Agent/MCP!
publedge
snapsynapse/publedge
Open recordkeeping protocol for fact-specific written interpretations between two parties: JIAs, RMAs, no-action letters, private letter rulings, advisory opinions. Drafting in public.
radmail-mcp
radmail-ai/radmail-mcp
Email MCP server / email operating system for AI agents: two-axis triage (importance x urgency), a Right Now lane, commitment follow-through, reviewable drafts, and a machine-verifiable BEC hard-stop (money/banking-change/first-contact = human-only). Zero-auth sandbox; the hosted tier never sends ma
snayyar00-webability
snayyar00/webability-mcp
Free accessibility MCP server (WCAG 2.2, ADA, Section 508, EAA). Hosted at https://mcp.webability.io/mcp, no API key for scans. Three engines, structured fixes, verify_fix.
sonovault
rekordcloud/sonovault-mcp
MCP server for the SonoVault music metadata API. Search 90M+ tracks, artists, and releases from AI assistants.
trustscoreagent
trustscoreagent/trustscoreagent
Free, open reputation registry for AI microservices. Agents check trust scores before calling any service.
ugc-vz-neu
shufflethis/ugc-vz-neu
Kostenloses UGC-Creator-Verzeichnis für DACH – echte Creator mit Portfolio- und Social-Nachweisen. Next.js, REST API v1, MCP-Server (ugc-vz-mcp) für AI-Agents. Keine Provision, keine KI-Avatare.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?