MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/112
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,665–2,688 of 3,145 · ranked by trust score, then stars
GitHits
githits-com/githits-cli
CLI & MCP for GitHits - The Code Context Layer for AI Coding Agents
Cynical Sally
w1ckedxt/cynical-sally
Brutally honest senior-engineer code reviews for Claude Code, Cursor & Windsurf - and your terminal. Scores, evidence-backed issues, usable fixes.
TAM
gvaibhav/tam-mcp-server
A comprehensive Model Context Protocol (MCP) server for market sizing analysis, TAM/SAM calculations, and industry research. Built with TypeScript, Express.js, and following the MCP specification.
Comfy Cozy
josephoibrahim/comfy-cozy
Say 'dreamier' and your ComfyUI workflow shifts — instantly, reversibly. An AI co-pilot for VFX artists: zero-LLM recipes (dreamier/sharper/faster), 133 MCP tools, EXR-aware vision, workflow.lock provenance, full undo, native sidebar, 5 swappable brains (Claude, GPT, Gemini, Ollama, Nemotron).
mcp-web-validator
AKzar1el/mcp-web-validator
W3C HTML/CSS Validator and Technical SEO Audit MCP Server. Part of the DigestSEO (https://digestseo.com) suite.
skgate
helv-io/skgate
Any MCP server. Anywhere. An OAuth-protected MCP gateway that can also run the servers, plus SI provider proxying with model aliases, and your Grok subscription as an OpenAI-compatible API with no API key.
wallet-to-social
starl3xx/wallet-to-social
walletlink.social: resolve EVM wallet addresses to the X and Farcaster accounts their owners published, and resolve a handle back to its wallets. REST API, MCP server and an x402 rail, across eight onchain networks.
@mrrlin-dev/external-agents — Multi-LLM MCP Server
mrrlin-dev/external-agents
One MCP server routes LLM calls across 20+ providers, using round-robin dispatch and fallback to reduce rate-limit interruptions and cut costs up to 100x.
Stata
hanlulong/stata-mcp
Stata MCP Extension for VS Code, Cursor, and Antigravity IDE
db-mcp-server
FreePeak/db-mcp-server
A powerful multi-database server implementing the Model Context Protocol (MCP) to provide AI assistants with structured access to databases.
Databricks AI Bridge library
databricks/databricks-ai-bridge
pi-code
ilovepixelart/pi-code
Claude Code experience for the pi coding agent: reads your .claude config (rules, commands, skills, hooks, output styles, MCP, agents) and adds todo, checkpoints, memory, web search, and subagents.
GH
veoery/gh_mcp_server
This is a MCP Server that allows LLM to interact with Rhino and Grasshopper directly.
Social Media
tayler-id/social-media-mcp
A Model Context Protocol (MCP) server that connects to multiple social media platforms
ctxlint
YawLabs/ctxlint
Lint your AI agent context files (CLAUDE.md, AGENTS.md, etc.) against your codebase
agenda-intelligence-md
vassiliylakhonin/agenda-intelligence-md
Deterministic evidence-packet checks for AI-generated claims: references, quotes, numbers, and support gaps. CLI, Python, MCP, and review adapters.
dead-letter
BigCactusLabs/dead-letter
Convert .eml email exports to Markdown with YAML front matter
gatherthread
TH060419/gatherthread
GatherThread 共序:本地 AI 编程 Agent 多人联机协作、实时共享上下文。Self-hostable collaboration for local AI coding agents, Codex Desktop connector & DeepSeek Harness plugin.
xgen-dex-cli
PlateerLab/xgen-dex-core
XGEN Dex — 데스크톱 · CLI · VSCode 확장이 하나의 코어를 공유하는 저장소
ozc
joemekw-code/ozc
Your AI's trust filter, owned by you. Rate any URL, filter your AI's sources, build transparent information markets. MCP server + REST API + Python SDK.
social-flow
ttalkkaklab/social-flow
Claude Code plugin: a channel-based short-form/long-form social content pipeline — storyboard with adversarial quality gates, video production, HITL-approved publishing, and autonomous growth loops. Built-in MCP server, 46 tools.
a0
Joe-Simo/a0
A0: the programming language built for AI, not for people. Compiler in TypeScript; programs compile to native code, wasm, JVM, .NET, Metal, and SystemVerilog.
Devframe
devframes/devframe
Framework-neutral foundation for building generic DevTools.
Hookdeck
hookdeck/hookdeck-cli
CLI for Hookdeck: forward webhooks to localhost (ngrok alternative), manage and query Event Gateway resources (sources, connections, destinations, events), run the MCP server for AI agents. Free for dev.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?