MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/108

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,569–2,592 of 3,145 · ranked by trust score, then stars

Actionmcp

seuros/action_mcp

✕BLOCK D

Rails Engine with MCP compliant Spec.

★ 1213 write

Metro

steve228uk/metro-mcp

✕BLOCK D

🚇 A plugin-based MCP server for React Native runtime debugging, inspection, and automation. Connects to Metro bundler via Chrome DevTools Protocol — no app code changes needed for most features.

★ 831 writestdio

Transloadit JavaScript/TypeScript SDKs

transloadit/node-sdk

!CAUTION D

Transloadit's official Node.js SDK

★ 731 readstdio

Archive Agent

shredengineer/archive-agent

✕BLOCK D

Find your files with natural language and ask questions.

★ 637 read

HeroUI MCP Monorepo

heroui-inc/heroui-mcp

✕BLOCK D

⚙️ MCP servers for HeroUI React v3 and HeroUI Native.

★ 612 writestdio

Autosearch

0xmariowu/autosearch

✕BLOCK D

Open-source deep research for AI agents: 40 channels, 10+ Chinese sources.

★ 498 writestdio

navvi

fellowship-dev/navvi

✕BLOCK D

Turn a browser task into a reusable scraper.

★ 107 read

PostMCP

BraveRam/postmcp

!CAUTION D

The Postman for MCP.

★ 61 writestdio

claude-code-tools-installer

SteveKinzey/claude-code-tools-installer

✕BLOCK D

Desktop app for macOS, Windows, and Linux that installs Claude Code and curated tools — every action shown as a plan and confirmed before it runs.

★ 11 write

EMET

dreamforgestudiollc/EMET

✕BLOCK D

EMET is an MCP memory server built for ISO 9001 / ISO 13485 document control: persistent, shared memory for AI agents and bot teams. Nothing is deleted; records are superseded, retired and retained. Controlled templates, verified writes, a word-for-word transcript tier, stdio and remote HTTP with OA

★ 14 writestdio

peertable

kitepon/peertable

✕BLOCK D

A round table of peer agents. No orchestrator at the head. Turn Claude Code sessions into a team of equal, long-lived peers.

★ 01 writestdio

Google Gen AI

googleapis/python-genai

✕BLOCK D

Google Gen AI Python SDK provides an interface for developers to integrate Google's generative models into their Python applications.

★ 3,9833 writestreamable-http

Nerve

evilsocket/nerve

✕BLOCK D

The Simple Agent Development Kit.

★ 1,3166 readstdio

Mcp-get

michaellatman/mcp-get

✕BLOCK D

Archived: mcp-get is no longer maintained.

★ 5052 read

samyama-graph

samyama-ai/samyama-graph

✕BLOCK D

Rust graph-vector database: OpenCypher (99.9% of evaluated TCK scenarios pass), vector search, graph algorithms, RESP + HTTP. LDBC SNB Interactive and BI complete; 1B edges on one machine.

★ 1762 write

RagRabbit

madarco/ragrabbit

✕BLOCK D

Open Source, Self-Hosted, AI Search and LLM.txt for your website

★ 1362 readstdio

Itsyconnect

nickustinov/itsyconnect-macos

✕BLOCK D

Better App Store Connect

★ 1251 writestreamable-http

Music Studio

linxule/mcp-music-studio

✕BLOCK D

Two-mode MCP music studio: scored composition (ABC notation) and live performance (Strudel). Interactive ext-apps UI with sheet music rendering, 30+ instruments, style presets, and live coding REPL.

★ 747 writestdio

MDMA

mobilereality/mdma

✕BLOCK D

Interactive documents from Markdown. Extends MD with forms, approvals, webhooks, and more — built for next gen apps

★ 693 writestdio

Hammer

praetorian-inc/mcphammer

✕BLOCK D

MCP security testing framework for evaluating Model Context Protocol server vulnerabilities

★ 352 readstdio

Azure Diagram

dminkovski/azure-diagram-mcp

✕BLOCK D

MCP server that turns natural-language prompts into Microsoft Azure architecture diagrams (PNG) using Python Diagrams + Graphviz.

★ 261 read

Deepseek Mcp Server

arikusi/deepseek-mcp-server

✕BLOCK D

MCP server for DeepSeek V4 (v4-flash, v4-pro, 1M context): chat, reasoning, function calling, thinking mode, cost tracking. deepseek-chat/reasoner aliases supported.

★ 214 readstdio

mockloop-mcp

MockLoop/mockloop-mcp

✕BLOCK D

Intelligent Model Context Protocol (MCP) server for AI-assisted API development. Generate mock servers from OpenAPI specs with advanced logging, performance analytics, and server discovery. Optimized for AI development workflows with comprehensive testing insights and automated analysis.

★ 1713 writestdio

codegraph

lzehrung/codegraph

✕BLOCK D

CLI, MCP and TS library that turns source code into a map of files, symbols, references, and dependencies using tree-sitter.

★ 83 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.