MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/108
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,569–2,592 of 3,145 · ranked by trust score, then stars
Actionmcp
seuros/action_mcp
Rails Engine with MCP compliant Spec.
Metro
steve228uk/metro-mcp
🚇 A plugin-based MCP server for React Native runtime debugging, inspection, and automation. Connects to Metro bundler via Chrome DevTools Protocol — no app code changes needed for most features.
Transloadit JavaScript/TypeScript SDKs
transloadit/node-sdk
Transloadit's official Node.js SDK
Archive Agent
shredengineer/archive-agent
Find your files with natural language and ask questions.
HeroUI MCP Monorepo
heroui-inc/heroui-mcp
⚙️ MCP servers for HeroUI React v3 and HeroUI Native.
Autosearch
0xmariowu/autosearch
Open-source deep research for AI agents: 40 channels, 10+ Chinese sources.
navvi
fellowship-dev/navvi
Turn a browser task into a reusable scraper.
PostMCP
BraveRam/postmcp
The Postman for MCP.
claude-code-tools-installer
SteveKinzey/claude-code-tools-installer
Desktop app for macOS, Windows, and Linux that installs Claude Code and curated tools — every action shown as a plan and confirmed before it runs.
EMET
dreamforgestudiollc/EMET
EMET is an MCP memory server built for ISO 9001 / ISO 13485 document control: persistent, shared memory for AI agents and bot teams. Nothing is deleted; records are superseded, retired and retained. Controlled templates, verified writes, a word-for-word transcript tier, stdio and remote HTTP with OA
peertable
kitepon/peertable
A round table of peer agents. No orchestrator at the head. Turn Claude Code sessions into a team of equal, long-lived peers.
Google Gen AI
googleapis/python-genai
Google Gen AI Python SDK provides an interface for developers to integrate Google's generative models into their Python applications.
Nerve
evilsocket/nerve
The Simple Agent Development Kit.
Mcp-get
michaellatman/mcp-get
Archived: mcp-get is no longer maintained.
samyama-graph
samyama-ai/samyama-graph
Rust graph-vector database: OpenCypher (99.9% of evaluated TCK scenarios pass), vector search, graph algorithms, RESP + HTTP. LDBC SNB Interactive and BI complete; 1B edges on one machine.
RagRabbit
madarco/ragrabbit
Open Source, Self-Hosted, AI Search and LLM.txt for your website
Itsyconnect
nickustinov/itsyconnect-macos
Better App Store Connect
Music Studio
linxule/mcp-music-studio
Two-mode MCP music studio: scored composition (ABC notation) and live performance (Strudel). Interactive ext-apps UI with sheet music rendering, 30+ instruments, style presets, and live coding REPL.
MDMA
mobilereality/mdma
Interactive documents from Markdown. Extends MD with forms, approvals, webhooks, and more — built for next gen apps
Hammer
praetorian-inc/mcphammer
MCP security testing framework for evaluating Model Context Protocol server vulnerabilities
Azure Diagram
dminkovski/azure-diagram-mcp
MCP server that turns natural-language prompts into Microsoft Azure architecture diagrams (PNG) using Python Diagrams + Graphviz.
Deepseek Mcp Server
arikusi/deepseek-mcp-server
MCP server for DeepSeek V4 (v4-flash, v4-pro, 1M context): chat, reasoning, function calling, thinking mode, cost tracking. deepseek-chat/reasoner aliases supported.
mockloop-mcp
MockLoop/mockloop-mcp
Intelligent Model Context Protocol (MCP) server for AI-assisted API development. Generate mock servers from OpenAPI specs with advanced logging, performance analytics, and server discovery. Optimized for AI development workflows with comprehensive testing insights and automated analysis.
codegraph
lzehrung/codegraph
CLI, MCP and TS library that turns source code into a map of files, symbols, references, and dependencies using tree-sitter.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?