MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/116
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,761–2,784 of 3,145 · ranked by trust score, then stars
Docpull
raintree-technology/docpull
Local-first Python CLI and MCP server for versioned, cited context from web and document sources.
agentdeals
robhunter/agentdeals
Catalogue of developer infrastructure free tiers, startup credits and pricing, with side-by-side vendor comparisons for hosting, databases and AI APIs. Website, JSON API and MCP server, read by coding agents choosing a stack.
nanohype
nanohype/nanohype
Template catalog and SDK for AI subsystems — agents, RAG, MCP servers, eval harnesses, infrastructure. Part of the nanohype ecosystem.
Workit
BrainerVirus/workit
Workflow rails for agentic coding: one shared task and policy core with native OpenCode, Cursor, Codex, Pi, and CLI surfaces.
typesafe-mcp
MarkChu-git/typesafe-mcp
MCP server for TypeSafe AI's Jev: typed yes/no, choice and score answers with act / review / abstain gating.
wp-ops
imagewize/wp-ops
CLI and MCP server for WordPress operations — Trellis/Bedrock deployments, backups, security scanning, and monitoring — plus the scripts and guides they wrap
axiom
dragoscv/axiom
The transactional write gate for coding agents: Plan -> canonical Manifest -> set-level checks -> hash-gated two-phase apply. MCP server, CLI, PreToolUse hook, GitHub Action.
robopartpicker
brainbook0/robopartpicker
Open robotics project discovery, bill-of-materials compilation and parts sourcing. Source-linked, evidence-first, live at robopartpicker.com.
sphica
iroha924/sphica
Local memory of past decisions for Claude Code and Codex. Records sessions and decisions in a local SQLite file and recalls them over MCP.
Dbhub
bytebase/dbhub
Token conscious database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite.
Reactuse
childrentime/reactuse
115+ production-ready React Hooks for sensors, UI, state & browser APIs. Tree-shakable, SSR-safe, TypeScript-first. Used by Shopee, PDD & Ctrip. Inspired by VueUse.
RESTHeart
softinstigate/restheart
The Agent-native Backend for MongoDB
Code Context Engine
elara-labs/code-context-engine
Save 94% on AI coding tokens. Index your codebase, agents search instead of reading files. Works with Claude Code, Codex, Copilot, Cursor, Gemini CLI. Local MCP server, free, open source.
rea
morluto/rea
Reverse engineer anything with agents, from app behavior down to native binaries.
Narsil
postrv/narsil-mcp
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
Get Gather
mcp-getgather/mcp-getgather
Exoskeleton for autonomous assistant
Local Coding Agent
longngn204/local-coding-agent
Local MCP coding agent for ChatGPT Web: run files/commands on your own machine via the OpenAI Secure Tunnel, with a Windows tray app and metrics dashboard.
Aiquila
elgorro/aiquila
Private AI for your Nextcloud — an MCP server (316 tools), a native Nextcloud app with chat and Coworkers, and one-command Hetzner deployment.
Lousy Agents
zpratt/lousy-agents
Bootstrap projects with pre-configured instructions, tests, and linters that guide AI coding agents to produce reliable code
coinrithm-agent-trading
CoinRithm/coinrithm-agent-trading
Let any AI agent (Claude, ChatGPT/Codex, Gemini) paper-trade on CoinRithm with a key you mint and control. Hosted MCP, local MCP, OpenAPI, skill + prompts.
The Lead Stack: Agent-Agnostic Workflows
bronz3beard/ai.tech-lead-stack
AI agent workflows for cross-functional teams. Tech Leads, PMs, and HR can run RTK skills via IDE or Web App.
dchub-mcp-server
azmartone67/dchub-mcp-server
DCPI (Data Center Power Index): a daily score of where data centers can get grid power, across 300+ markets. Live power-grid, energy, queue, fiber, gas & M&A data for AI agents: 94 tools, global facility map, 1,700+ tracked M&A deals. Capacity to buy or lease via source_capacity. Remote MCP at dchub
Glaux
cetusk/Glaux
A Lightweight DAW for Making Music with AI
gleanery
iroha924/gleanery
Local memory of past decisions for Claude Code and Codex. Records sessions and decisions in a local SQLite file and recalls them over MCP.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?