MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/115
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,737–2,760 of 3,145 · ranked by trust score, then stars
Sudocode
sudocode-ai/sudocode
Lightweight agent orchestration dev tool that lives in your repo
dsh-config-manager
xiajiajun516/dsh-config-manager
DeepSeek Harness (DSH) backup & restore plugin — export, import, migrate and sync your complete DSH configuration, plugins, MCP servers, skills and workspace. One-click migration to another machine.
Ultimate
dicklesworthstone/ultimate_mcp_server
Comprehensive MCP server exposing dozens of capabilities to AI agents: multi-provider LLM delegation, browser automation, document processing, vector ops, and cognitive memory systems
Nitan
nitansde/nitan-mcp
MCP client and Skill for US Card Forum
Codebase
anrgct/autodev-codebase
A vector embedding-based code semantic search tool with MCP server and multi-model integration. Can be used as a pure CLI tool. Supports Ollama for fully local embedding and reranking, enabling complete offline operation and privacy protection for your code repository
Search Scrape
devshero/search-scrape
A unified web extraction and stateful automation engine for AI. Replaces heavy testing frameworks with token-optimized browser control, deep research, and HITL.
Curion
geanatz/curion
Curion is a project-local memory layer for AI coding agents, published as an MCP server for Claude Code, Codex, OpenCode, and other MCP clients.
Roku Dev Studio
paramount-engineering/roku-dev-studio
Cross-platform Electron desktop studio for Roku developers: remote control, device queries, sideload, telnet console, RALE/App Connector, BrightScript Fiddle, JSON Action Scripts, an `rds` CLI, an MCP server for AI agents, and an internet relay.
footprintjs
footprintjs/footPrint
The flowchart pattern for backend code — self-explainable systems that AI can reason about. Causal traces, auto-generated tool descriptions, transactional state.
repopilot
azen07508-debug/repopilot
Release gate for public GitHub repositories. Give it a repo URL and it returns a ship-or-block verdict with file-and-line evidence, the fixes that clear the gate, and the deployment plan and launch copy you ship with. HTTP + MCP. Static analysis only; no code execution.
triumvirate
michaeljboscia/triumvirate
Five AI agents. One coordination layer. No relay server. Plus a trust layer that checks whether the review actually happened.
tool-control-plane
Abhishek-chohan/tool-control-plane
The unglamorous half of agent tooling: a gRPC control plane for sessions, machines, fenced writes, and capability-scoped keys. HTTP and MCP gateways; Python, TypeScript, and Go SDKs.
ThinkWatch
thinkwatchproject/thinkwatch
Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthropic, Gemini, and self-hosted LLMs.
Context
neuledge/context
Local-first documentation for AI agents
ue-mcp
db-lyon/ue-mcp
Complete Unreal Engine development toolkit exposed as MCP tools.
Task Orchestrator
jpicklyk/task-orchestrator
Server-enforced workflow discipline for AI agents. An MCP server providing persistent work items, dependency graphs, quality gates, and actor attribution. Schemas define what agents must produce — the server blocks the call if they don't. Works with any MCP-compatible client.
Context Sync
intina47/context-sync
Local persistent memory store for LLM applications including continue.dev, cursor, claude desktop, github copilot, codex, antigravity, etc.
Context Lattice
sheawinkler/contextlattice
The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.
Linear Streamable
iceener/linear-streamable-mcp-server
MCP Server for interacting with Linear API. Written in TypeScript, Node and Hono.dev
Netlify Examples
netlify/examples
A collection of examples and demonstrations to help people building the web with Netlify
Globalping
jsdelivr/globalping-mcp-server
Remote MCP server that gives LLMs access to run network commands
Talkito
robdmac/talkito
TalkiTo lets developers interact with AI systems through speech across multiple channels (terminal, API, phone). It can be used as both a command-line tool and a Python library.
fury-antidetect-browser
furyteamtop/fury-antidetect-browser
Free, open-source anti-detect browser. A Chromium 155 fork that spoofs the fingerprint in C++ rather than with injected JavaScript, with per-profile personas and proxies, a built-in MCP server for AI assistants, and a self-hostable team server with per-project access. No seats, no per-profile pricin
Dense-Mem
markhuangai/dense-mem
Self-hosted AI agent memory server with MCP, evidence provenance, typed claims, conflict detection, embeddings, recall, PostgreSQL, and pgvector
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?