MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/114
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,713–2,736 of 3,145 · ranked by trust score, then stars
SwiftLens
swiftlens/swiftlens
SwiftLens is a Model Context Protocol (MCP) server that provides deep, semantic-level analysis of Swift codebases to any AI models. By integrating directly with Apple's SourceKit-LSP, SwiftLens enables AI models to understand Swift code with compiler-grade accuracy.
Pi
TGYD-helige/pi
Pluggable extension packages for the Pi AI-agent runtime. Each package exposes LLM-callable tools via MCP — covering IM workspace integrations (Lark, DingTalk, WeCom), browser & computer automation, persistent memory, telemetry, task scheduling, image generation, web access, security policies, and m
Gofannon
the-ai-alliance/gofannon
A web app for rapidly prototyping AI agents and the lightweight web UIs that wrap them—build flows, preview interactions, and share agent-driven experiences without lock-in.
Research Hub
wenyuchiou/research-hub
AI-operable research workspace for Zotero, Obsidian, and NotebookLM. Use any two, or all three, through CLI, MCP, REST, and dashboard.
Auth Step-by-Step
christian-posta/mcp-auth-step-by-step
Step by step walkthrough of an MCP Authorization implementation
Kollektiv
alexander-zuev/kollektiv-mcp
Kollektiv MCP enables you to chat with and query your own documents directly from IDEs and MCP clients. Private, secure, and integrated into your favorite code editor
proximo
john-broadway/proximo
The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.
Md Redline
dejuknow/md-redline
Inline review comments for markdown specs. Built-in MCP server hands feedback directly to your AI agent.
Enquire
oomkapwn/enquire-mcp
The #1 Obsidian MCP for AI memory — freshness-aware, cited, local-first and read-only by default. Dataview, Bases, PDFs, every agent.
Adaptive Graph Of Thoughts
saptadey/adaptive-graph-of-thoughts-mcp-server
LLM Reasoning Framework for Scientific Research
mainwp-mcp
mainwp/mainwp-mcp
Official MainWP MCP server: manage your WordPress sites from Claude, Cursor, Codex, and other AI tools, with previews and approval before destructive changes.
Agents Remember
foxfire1st/agents-remember
A branch-aware, dual-revision epistemic ledger and control plane for AI coding agents. From requirements and isolated work to validated changes and durable, queryable project truth.
Agents Remember
foxfire1st/agents-remember-md
A branch-aware, dual-revision epistemic ledger and control plane for AI coding agents. From requirements and isolated work to validated changes and durable, queryable project truth.
federal-contracting-mcps
1102tools-dev/federal-contracting-mcps
Free, open-source MCP servers for federal contracting: SAM.gov, USAspending, GSA CALC+, eCFR, Federal Register, and more. 5,571 collected regression tests. In the Claude and ChatGPT directories.
simplenote-mcp-server
docdyhr/simplenote-mcp-server
MCP Server for Simplenote integration with Claude Desktop
Inference Gateway CLI
inference-gateway/cli
A Git-first CLI coding agent that turns ideas, issues, and tasks into real code changes. It can run remotely from your mobile phone or automate your computer.
bullswarm
Bulls-Work/bullswarm
Use every coding-agent plan you pay for. Routes tasks across Claude Code, Codex and Grok by spare quota, runs multi-agent workflows, and checks the results.
ai-nexus
mosesy5688-cell/ai-nexus
Structured AI-entity discovery, evidence, and identity layer for agents.
twzrd-x402-gate
twzrd-sol/twzrd-trust
TWZRD buyer-side x402 trust packages: x402 trust gate, elizaOS trust plugin, and the agent-intel client. Vet a counterparty before you pay.
Peekaboo
steipete/peekaboo
Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.
Xiaozhi ESP32 Server
joey-zhou/xiaozhi-esp32-server-java
小智ESP32的Java企业级管理平台,提供设备监控、音色定制、角色切换和对话记录管理的前后端及服务端一体化解决方案
AgentChat
shy2593666979/agentchat
AgentChat 是一个基于 LLM 的智能体交流平台,内置默认 Agent 并支持用户自定义 Agent。通过多轮对话和任务协作,Agent 可以理解并协助完成复杂任务。项目集成 LangChain、Function Call、MCP 协议、RAG、Memory、HITL、Skill、Milvus 和 ElasticSearch 等技术,实现高效的知识检索与工具调用,使用 FastAPI 构建高性能后端服务。
Claudexor
razzant/claudexor
Multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode: quota-aware rotation across multiple Claude/Codex subscriptions, shared thread context, and cross-model review.
DB
freepeak/db-mcp-server
A powerful multi-database server implementing the Model Context Protocol (MCP) to provide AI assistants with structured access to databases.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?