MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/105
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,497–2,520 of 3,145 · ranked by trust score, then stars
verifiable-science-envs
jasonbrelsford/verifiable-science-envs
Verifiable-reward RL environments and evals for scientific domains, starting with HLA/immunogenetics
vikunja-mcp
SkyliveLLC/vikunja-mcp
MCP server for Vikunja. Lets Claude Code, Codex and Claude Desktop read and update your tasks, with a one-command setup CLI.
vision-relay
nan1010082085/claude-plugins
跨环境 AI CLI 插件统一仓库 - Claude Code / Codex CLI / Cursor 等插件集合
voicelayer
EtanHey/voicelayer
Voice I/O MCP for AI coding agents — local TTS + STT, 2 tools (`voice_speak`, `voice_ask`) with ToolAnnotations
wiki-formant
tutmoses/wiki-formant
The portable half of a wiki: derived taxonomy, a spec-correct MCP transport, markdown twins, and conditional-GET plumbing. Zero runtime dependencies.
Context7
upstash/context7-mcp
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
Context7
upstash/context7
Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
Antigravity Link
cafetechne/antigravity-link-extension
Mobile companion for Google's Antigravity IDE. Mirror AI sessions on your phone, send messages, stop generation, automate via 9 MCP tools or OpenAPI.
Blatant Why
001tmf/blatant-why
AI-powered biologics design campaign agent — multi-agent orchestration with BoltzGen, PXDesign, Protenix, and 200+ cloud tools. Antibodies, nanobodies, de novo binders, and beyond.
Media Crawler
mcp-service/media-crawler-mcp-service
一个功能强大的多平台自媒体数据采集MCP工具,支持B站、小红书、抖音、快手、抖音微博、贴吧、知乎等主流平台的公开信息抓取。
godot-agent
aigengame/godot-agent
Godot automation for AI agents to build and verify projects through a CLI, Agent Skill, or MCP server, with structured results, headless operations, and live runtime control.
mcp-postgres-server
antonorlov/mcp-postgres-server
MCP server for PostgreSQL. Works with VS Code, Cursor, Claude Code, Codex, and Windsurf.
relay
valtors/relay
MCP server with 40 tools for AI agents. Memory, web fetch, search, file ops, screenshots, and multi-agent coordination in one Go binary.
nlp2sql
luiscarbonel1991/nlp2sql
Enterprise-ready Natural Language to SQL converter with multi-provider AI support (OpenAI, Anthropic, Gemini). Built for production scale databases (1000+ tables) with Clean Architecture.
robinhood-toolkit
nirholas/robinhood-toolkit
Build on Robinhood Chain and Robinhood Crypto: verified network constants, a chain SDK, a read-only MCP server, runnable examples, and 64 build prompts.
agent_gateway
creverse-ai-lab/agent_gateway
Let the coding agent you already use delegate work to Claude Code, Codex, and Grok on demand — a local MCP server and Agent Client Protocol (ACP) gateway with persistent sessions, interactive approvals, and crash-safe recovery. No predefined workflows.
Armature MCP Analytics for TypeScript
armature-tech/mcp-analytics
V0 architecture plan for MCP analytics SDK
rustyhand
Tamang4607/rustyhand
Build an open-source Rust agent OS for autonomous Telegram agents, with one binary, APIs, and a tested Rust codebase
Lex
Guffawaffle/lex
Policy-aware work continuity with receipts.
Lex
SmarterGPT/lex
Policy-aware work continuity with receipts.
LetsFG
letsfg/letsfg
Agent-native flight & hotel search and booking — MCP server, CLI, and Python/JS SDKs. Every airline in the world, major booking sites and OTAs, with per-flight reliability history.
LLM Sandbox
vndee/llm-sandbox
Lightweight and portable LLM sandbox runtime (code interpreter) Python library.
Elementor
msrbuilds/elementor-mcp
WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.
Flow Nexus
ruvnet/flow-nexus
Flow Nexus is the first competitive agentic platform built entirely on MCP. Deploy autonomous AI swarms, train neural networks, and compete in coding challenges while earning rUv credits. Transform agentic engineering mastery into lived experience through gamified cloud development where agents sp
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?