MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/107
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,545–2,568 of 3,145 · ranked by trust score, then stars
expo-agent-cli
expo/expo-agent-cli
Agent-native CLI on top of the Expo CLI family
pattern-mcp
donaldrichard19-LVD/pattern-mcp
Pattern checks a coding agent's UI decisions against your own design system before it builds, whether that lives in code or in Figma. It helps the agent reuse what the product already has and build only what is actually missing. An opt-in enforcement boundary can make that check required, and every
Marlo
KarthikSubramanian07/Marlo
Fixes accessibility violations and proves it. Multi-engine WCAG detection routed by measured accuracy, verified minimal-diff repairs, and a published error rate.
Cloudflare
cloudflare/mcp
MCP server for the Cloudflare API
After Effects
dakkshin/after-effects-mcp
MCP Server for Adobe After Effects. Enables remote control (compositions, text, shapes, solids, properties) via the Model Context Protocol using ExtendScript.
MCP Server Tauri
hypothesi/mcp-server-tauri
A Model Context Protocol (MCP) server and plugin for Tauri v2 development
Aleph
hmbown/aleph
Skill + MCP server to turn your agent into an RLM. Load context, iterate with search/code/think tools, converge on answers.
IDA
jtsylve/ida-mcp
A headless MCP server for IDA Pro and Ghidra
Kodit
helixml/kodit
👩💻 MCP server to index external repositories
Grainulator
grainulation/grainulator
Research that compiles.
dispatchseo
NeoZi12/dispatchseo
Turn your AI agent into your SEO manager - works today with Claude Code, Codex, and Cursor. The open-source alternative to SEObot and Outrank
Ripgrep
mcollina/mcp-ripgrep
An MCP server to wrap ripgrep
GreptimeDB
greptimeteam/greptimedb-mcp-server
A Model Context Protocol (MCP) server for GreptimeDB
vault-cortex
aliasunder/vault-cortex
Standalone MCP server for Obsidian vaults — hybrid search, structured memory, task management, files, OAuth 2.1. Run locally, self-host, or one-click deploy for remote access.
mcp-events-bridge
hookdeck/mcp-events-bridge
Turn third-party webhooks into MCP Events for AI agents, with Hookdeck Event Gateway receiving and delivering them. Built-in providers: Resend and GitHub.
codelives-ainecto
codelives/ainecto
AiNecto MCP connector for workspace, document, ERD, diagram, task, and attachment workflows.
corpus
ryanjdillon/corpus
Semantic search and structured query over your own content
xcodebuildmcp
getsentry/XcodeBuildMCP
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
Mobile Build
getsentry/mobilebuildmcp
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuild
cameroncooke/xcodebuildmcp
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuild
getsentry/xcodebuildmcp
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
PHP MCP
php-mcp/server
Core PHP implementation for the Model Context Protocol (MCP) server
Tauri
hypothesi/mcp-server-tauri
A Model Context Protocol (MCP) server and plugin for Tauri v2 development
Hugging Face
evalstate/hf-mcp-server
Hugging Face MCP Server
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?