MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/113
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,689–2,712 of 3,145 · ranked by trust score, then stars
Russian Marketplace Data
vladimir-human/ru-marketplace-mcp
Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.
ru-marketplace-mcp
Vladimir-Human/ru-marketplace-mcp
Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.
Discord
cappyeo/discord-mcp
Open-source Discord MCP server for Claude, Codex, Cursor and other AI clients: 209 typed tools, caller-owned bots, safety controls and verifiable guild builds.
VibeCraft
amenti-labs/vibecraft
AI-driven vibe based Minecraft building via MCP. Describe a build, watch your agent construct it in Minecraft.
PrimeUIX
primefaces/primeuix
PrimeUIX is a shared package used by all Prime libraries, allowing PrimeTek teams to unify theming.
CodingBaby Browser
buyitsydney/codingbaby-browser-mcp
MCP Server allowing AI agents to control Google Chrome via the CodingBaby Extension
cmuxlayer
EtanHey/cmuxlayer
10 public MCP tools for controlling cmux workspaces and managing Claude, Codex, Gemini, Kiro, and Cursor agents.
FylloCode
fioooooooo/fyllocode
FylloCode 是一个开源桌面应用,把 Claude Code、Codex 等本地 Coding Agent 接进项目工作流。派任务、审方案、追溯每一次改动,积累下来的规范和结论,换一个 Agent 也能继承。
AI-Native Open-source Casino Platform Framework
blurifycom/openora
Open-source Casino Platform Framework - AI-Native, Self-hosted, Headless, Plugin-based 🎰
tianshu-mcp
lanlan0811/tianshu-mcp
天枢harness × AI-Agent 编排 MCP server:调度外部 Agent 干活,用运行时证据做客观验收,不通过自动返修闭环。
aiterm-mcp
kitepon/aiterm-mcp
One persistent MCP terminal your AI drives — and launches other coding agents (Codex/Grok/Composer) into. SSH, containers, and REPLs nest as text you send in. tmux-backed, token-reduced reads, headless over MCP.
fluent-ui-plugin
ArasaniRohithReddy/fluent-ui-plugin
Agents, skills and MCP tools to build and adopt Microsoft Fluent 2 (Fluent UI 2.0) across Web, native iOS/Android/Windows, Power BI and Power Platform - plus Fluent 1 (v8) support, v8-to-v9 migration and Figma. Works in Copilot CLI, VS Code, Cursor, Claude, Gemini and more.
WEALTH
ariffazil/WEALTH
Capital intelligence: risk, NPV, markets. Research and evidence only. Never moves money.
designesy-org
LE-VAI/designesy-org
Scores any URL against a 44-check design contract (A-F grade), validates DTCG tokens, and checks drift and AI readiness.
rolling-design-sync
deven-bryant/rolling-design-sync
Per-node design-implementation ledger: a Figma plugin, API, and agent tooling that tell coding agents exactly which design changes aren't built yet.
tw-market-live-data-intelligence
SmartyJohnway/tw-market-live-data-intelligence
Local-first Taiwan market evidence workbench for AI agents — TWSE/TPEx, persistent Watchlists, governed MCP, auditable evidence, explicit execute-once.
Open Multi Agent
open-multi-agent/open-multi-agent
Self-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.
Deep Research
u14app/deep-research
Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.
fastCRW
fastcrw/crw
Fast, lightweight Firecrawl/Tavily alternative in Rust. Web scraper, crawler & search API with MCP server for AI agents. Drop-in Firecrawl-compatible API (/scrape, /crawl, /search). 2.3x faster than Tavily, 1.5x faster than Firecrawl in 1K-URL benchmarks. 6 MB RAM, single binary. Self-host or use ma
Unreal Editor
db-lyon/ue-mcp
Complete Unreal Engine development toolkit exposed as MCP tools.
AutoPentest
bhavsec/autopentest-ai
Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.
www-project-agent-memory-guard
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
Vnsh
raullenchai/vnsh
One workspace all your AI agents can read and write. Encrypted client-side, model-agnostic, gone 24h after the last edit.
Reshapr
reshaprio/reshapr
The open source, no-code MCP Server for AI-Native API Access
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?