MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/111
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,641–2,664 of 3,145 · ranked by trust score, then stars
aicode-toolkit
AgiFlow/aicode-toolkit
Toolkit for Coding Agents to work reliably with repo of any size.
AI Code Toolkit
agiflow/aicode-toolkit
Toolkit for Coding Agents to work reliably with repo of any size.
Mnemo Cortex
guymanndude/mnemo-cortex
Open-source cognitive coprocessor with active memory for AI agents — persistent recall, semantic search, overnight dreaming, verified facts, encrypted USB sync. MCP server; works with Claude, ChatGPT, and any local LLM. Built by one maker and his agents.
Universal Tool Calling Protocol (UTCP) for TypeScript
universal-tool-calling-protocol/typescript-utcp
Official typescript implementation of UTCP. UTCP is an open standard that lets AI agents call any API directly, without extra middleware.
U.S. Census Bureau Data API
uscensusbureau/us-census-bureau-data-api-mcp
The U.S. Census Bureau Data API MCP connects AI Assistants with official Census Bureau statistics.
AI Agents Orchestrator
hoangsonww/ai-agents-orchestrator
Intelligent orchestration system that coordinates multiple AI coding assistants (Claude, Codex, Gemini CLI, Copilot CLI) to collaborate on complex software development tasks via REPL or a Vue/Nuxt UI dashboard. Also includes an Agentic Team runtime with role-based multi-agent open communication & le
Poke Gate
f/poke-gate
Expose your machine to your Poke AI assistant via MCP tunnel
Ctxo
alperhankendi/ctxo
MCP server for AI coding agents. Instead of reading files one by one, your agent gets dependency graphs, git intent, blast radius, and change health in a single call. Works with any language deep analysis for TypeScript,Java, Go, and C#.
1xn AI Workflow Composer
1xn-labs/1xn-vmcp
vMCP - Virtual Model Context Protocol
Mcp Logic
angrysky56/mcp-logic
Fully functional AI Logic Calculator utilizing Prover9/Mace4 via Python based Model Context Protocol (MCP-Server)- tool for Windows, Linux, Claude App etc
Prompt Decorators
synaptiai/prompt-decorators
A standardized framework for enhancing how LLMs process and respond to prompts through composable decorators, featuring an official open standard specification and Python reference implementation. Claude Code plugin and MCP server integration.
Congress
amurshak/congressmcp
An MCP server allowing AI agents and MCP clients to interface with the Congress.gov API
Sourced
ryancodrai/sourced
Maps packages to source code. Allows coding agents to search any dependency with grep.
SSH Orchestrator
samerfarida/mcp-ssh-orchestrator
Secure SSH access for AI agents via MCP. Execute commands across your server fleet with policy enforcement, network controls, and comprehensive audit logging.
desktop-touch-mcp
Harusame64/desktop-touch-mcp
Windows computer-use MCP server: drive any desktop app via semantic discover-then-act targeting (entities + leases, not pixel coordinates), with per-action perception guards, a native Rust UIA engine, Chrome CDP, and Key Locker credential autofill for ssh/sudo password prompts. Works with Claude, Cu
A2A ADK
rubenszimbres/a2a_adk_mcp
Multi-Agent Systems with Google's Agent Development Kit + A2A + MCP
openswissdata
cammac-creator/openswissdata
Swiss federal reference data for AI agents: customs tariff (TARES), FINMA register and warnings list, NOGA/NACE/ISIC crosswalks. Free MCP server, no key. Signed dataset files.
Cloudflare
cloudflare/mcp-server-cloudflare
iai Personal Memory Engine
codeabra/iai-personal-memory-engine
A cyber brain for your AI. It never forgets a detail, remembers exactly what you said, and learns how you work over time. Free, local, works with Cursor, Claude Code, Codex, OpenClaw, Hermes and more. MIT.
ssh-mcp
tufantunc/ssh-mcp
MCP server exposing SSH control for Linux servers via Model Context Protocol.
bagel
Extelligence-ai/bagel
Query robotics, drone, and IoT data in plain English through an MCP server, with an intelligent edge data reduction pipeline that keeps only the data that matters.
HomeButler
higangssh/homebutler
🏠 Tells you what changed on your server — only what's worth telling. Single Go binary, no database, nothing running on the machines it watches. MCP server built in.
ClawMem
yoloshii/clawmem
On-device memory layer for AI agents. Claude Code, OpenClaw and Hermes. Hooks + MCP server + hybrid RAG search.
Jules SDK
google-labs-code/jules-sdk
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?