MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/114

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,713–2,736 of 3,145 · ranked by trust score, then stars

SwiftLens

swiftlens/swiftlens

✕BLOCK F

SwiftLens is a Model Context Protocol (MCP) server that provides deep, semantic-level analysis of Swift codebases to any AI models. By integrating directly with Apple's SourceKit-LSP, SwiftLens enables AI models to understand Swift code with compiler-grade accuracy.

★ 1261 write

Pi

TGYD-helige/pi

✕BLOCK F

Pluggable extension packages for the Pi AI-agent runtime. Each package exposes LLM-callable tools via MCP — covering IM workspace integrations (Lark, DingTalk, WeCom), browser & computer automation, persistent memory, telemetry, task scheduling, image generation, web access, security policies, and m

★ 792 writestdio

Gofannon

the-ai-alliance/gofannon

✕BLOCK F

A web app for rapidly prototyping AI agents and the lightweight web UIs that wrap them—build flows, preview interactions, and share agent-driven experiences without lock-in.

★ 684 read

Research Hub

wenyuchiou/research-hub

✕BLOCK F

AI-operable research workspace for Zotero, Obsidian, and NotebookLM. Use any two, or all three, through CLI, MCP, REST, and dashboard.

★ 6413 writestdio

Auth Step-by-Step

christian-posta/mcp-auth-step-by-step

✕BLOCK F

Step by step walkthrough of an MCP Authorization implementation

★ 621 read

Kollektiv

alexander-zuev/kollektiv-mcp

✕BLOCK F

Kollektiv MCP enables you to chat with and query your own documents directly from IDEs and MCP clients. Private, secure, and integrated into your favorite code editor

★ 611 read

proximo

john-broadway/proximo

✕BLOCK F

The Proxmox MCP you can hand the keys. All four products: PVE, PBS, PMG, PDM.

★ 522 readstdio

Md Redline

dejuknow/md-redline

✕BLOCK F

Inline review comments for markdown specs. Built-in MCP server hands feedback directly to your AI agent.

★ 393 writestdio

Enquire

oomkapwn/enquire-mcp

✕BLOCK F

The #1 Obsidian MCP for AI memory — freshness-aware, cited, local-first and read-only by default. Dataview, Bases, PDFs, every agent.

★ 345 writestdio

Adaptive Graph Of Thoughts

saptadey/adaptive-graph-of-thoughts-mcp-server

✕BLOCK F

LLM Reasoning Framework for Scientific Research

★ 3213 readstdio

mainwp-mcp

mainwp/mainwp-mcp

✕BLOCK F

Official MainWP MCP server: manage your WordPress sites from Claude, Cursor, Codex, and other AI tools, with previews and approval before destructive changes.

★ 293 writestdio

Agents Remember

foxfire1st/agents-remember

✕BLOCK F

A branch-aware, dual-revision epistemic ledger and control plane for AI coding agents. From requirements and isolated work to validated changes and durable, queryable project truth.

★ 2720 write

Agents Remember

foxfire1st/agents-remember-md

✕BLOCK F

A branch-aware, dual-revision epistemic ledger and control plane for AI coding agents. From requirements and isolated work to validated changes and durable, queryable project truth.

★ 2720 write

federal-contracting-mcps

1102tools-dev/federal-contracting-mcps

!CAUTION F

Free, open-source MCP servers for federal contracting: SAM.gov, USAspending, GSA CALC+, eCFR, Federal Register, and more. 5,571 collected regression tests. In the Claude and ChatGPT directories.

★ 231 writestdio

simplenote-mcp-server

docdyhr/simplenote-mcp-server

!CAUTION F

MCP Server for Simplenote integration with Claude Desktop

★ 192 writestdio

Inference Gateway CLI

inference-gateway/cli

✕BLOCK F

A Git-first CLI coding agent that turns ideas, issues, and tasks into real code changes. It can run remotely from your mobile phone or automate your computer.

★ 78 readstreamable-http

bullswarm

Bulls-Work/bullswarm

✕BLOCK F

Use every coding-agent plan you pay for. Routes tasks across Claude Code, Codex and Grok by spare quota, runs multi-agent workflows, and checks the results.

★ 21 write

ai-nexus

mosesy5688-cell/ai-nexus

✕BLOCK F

Structured AI-entity discovery, evidence, and identity layer for agents.

★ 111 readstreamable-http

twzrd-x402-gate

twzrd-sol/twzrd-trust

✕BLOCK F

TWZRD buyer-side x402 trust packages: x402 trust gate, elizaOS trust plugin, and the agent-intel client. Vet a counterparty before you pay.

★ 02 writestdio

Peekaboo

steipete/peekaboo

✕BLOCK F

Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.

★ 5,1941 read

Xiaozhi ESP32 Server

joey-zhou/xiaozhi-esp32-server-java

✕BLOCK F

小智ESP32的Java企业级管理平台,提供设备监控、音色定制、角色切换和对话记录管理的前后端及服务端一体化解决方案

★ 1,3575 read

AgentChat

shy2593666979/agentchat

✕BLOCK F

AgentChat 是一个基于 LLM 的智能体交流平台,内置默认 Agent 并支持用户自定义 Agent。通过多轮对话和任务协作,Agent 可以理解并协助完成复杂任务。项目集成 LangChain、Function Call、MCP 协议、RAG、Memory、HITL、Skill、Milvus 和 ElasticSearch 等技术,实现高效的知识检索与工具调用,使用 FastAPI 构建高性能后端服务。

★ 9022 readstdio

Claudexor

razzant/claudexor

!CAUTION F

Multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode: quota-aware rotation across multiple Claude/Codex subscriptions, shared thread context, and cross-model review.

★ 49310 writestdio

DB

freepeak/db-mcp-server

✕BLOCK F

A powerful multi-database server implementing the Model Context Protocol (MCP) to provide AI assistants with structured access to databases.

★ 4312 writestreamable-http

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.