MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/106
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,521–2,544 of 3,145 · ranked by trust score, then stars
ABAP ADT
fr0ster/mcp-abap-adt
MCP server for SAP BTP ABAP Cloud and On-Premise ECC/S/4HANA ABAP ADT with full CRUD, JWT/XSUAA, and service-key auth.
All About AI
allaboutai-yt/mcp-servers
All About AI MCP Servers
Starter
turboml-inc/mcp-starter
Starter code to add MCPs to Puch AI #BuildWithPuch
NostrDVM
believethehype/nostrdvm
Framework to run NIP90 Nostr DVMs
ServiceNow
happy-technologies-llc/mcp-servicenow-nodejs
Happy Platform MCP v5.1 - Multi-Instance ServiceNow MCP Server
Hyperweave
inneraura/hyperweave
Visual CLI for agents. Deterministic SVG diagrams, tables, and charts with embedded structured metadata. Zero JavaScript. Renders anywhere markdown does.
VideoDB Agent Toolkit
video-db/agent-toolkit
An open-source agent toolkit that auto-syncs SDK versions, docs, and examples—built for seamless integration with LLMs, and AI agents ( MCP compatible).
Claude Code Tips
anipotts/claude-code-tips
guidance for coding with agents in production, from pet projects to startups and big tech
Comet
metrostar/comet
React with TypeScript Component Library based on USWDS 3.0
KuzuMem
jakedismo/kuzumem-mcp
KuzuDB-powered memory bank for code agents built with TypeScript and follows MCP protocol
memspec
siimvene/memspec
container-manager-mcp
Knuckles-Team/container-manager-mcp
Manage containers on docker, podman, compose, and docker swarm through an MCP Server for Agentic AI
OpenDia
aaronjmars/opendia
Connect your browser to AI models. Just use Dia on Chrome, Arc or Firefox.
mcp-framework
QuantGeekDev/mcp-framework
The Typescript MCP Framework
Mcp Framework
quantgeekdev/mcp-framework
The Typescript MCP Framework
Funnel
chris-schra/mcp-funnel
Finally, a proxy that does what grep does for logs - filters out the noise. Stop carrying 70k tokens of tools you'll never use. It's like tree-shaking, but for MCP. 🚀
Spec Workflow
kingkongshot/specs-workflow-mcp
Intelligent spec workflow management MCP server
Slack
ubie-oss/slack-mcp-server
A Slack MCP server
Package Docs
sammcj/mcp-package-docs
An MCP server that provides LLMs with efficient access to package documentation across multiple programming languages
Brain
mordechaipotash/brain-mcp
The recorder for your AI conversations — local-first MCP memory that keeps byte-exact copies of your Claude Code, Codex and Pi sessions (Claude Code deletes its own after 30 days) and answers with a citation or abstains. DuckDB.
WeChat Claude Code
dcatfly/weixin_claude_code
WeChat Channel plugin for Claude Code — bidirectional messaging between WeChat and Claude Code via MCP protocol
WEBGhosting
yranjan06/webghosting-mcp
Intelligent stealth browser MCP server for AI agents with 30 tools, 22 anti fingerprint scripts, and LLM powered extraction. Works seamlessly with Cursor, Claude, VS Code, and any OpenAI compatible LLM.
Luma API
lumalabs/luma-api-mcp
Powered by Ray (video) and Photon (image) models by Luma AI
YaraFlux
threatflux/yaraflux
A yara based MCP Server
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?