MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/116

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,761–2,784 of 3,145 · ranked by trust score, then stars

Docpull

raintree-technology/docpull

✕BLOCK F

Local-first Python CLI and MCP server for versioned, cited context from web and document sources.

★ 281 writestdio

agentdeals

robhunter/agentdeals

!CAUTION F

Catalogue of developer infrastructure free tiers, startup credits and pricing, with side-by-side vendor comparisons for hosting, databases and AI APIs. Website, JSON API and MCP server, read by coding agents choosing a stack.

★ 2212 readstdio

nanohype

nanohype/nanohype

✕BLOCK F

Template catalog and SDK for AI subsystems — agents, RAG, MCP servers, eval harnesses, infrastructure. Part of the nanohype ecosystem.

★ 21 writestdio

Workit

BrainerVirus/workit

✕BLOCK F

Workflow rails for agentic coding: one shared task and policy core with native OpenCode, Cursor, Codex, Pi, and CLI surfaces.

★ 12 writestdio

typesafe-mcp

MarkChu-git/typesafe-mcp

✕BLOCK F

MCP server for TypeSafe AI's Jev: typed yes/no, choice and score answers with act / review / abstain gating.

★ 15 readstreamable-http

wp-ops

imagewize/wp-ops

✕BLOCK F

CLI and MCP server for WordPress operations — Trellis/Bedrock deployments, backups, security scanning, and monitoring — plus the scripts and guides they wrap

★ 19 writestdio

axiom

dragoscv/axiom

!CAUTION F

The transactional write gate for coding agents: Plan -> canonical Manifest -> set-level checks -> hash-gated two-phase apply. MCP server, CLI, PreToolUse hook, GitHub Action.

★ 06 writestdio

robopartpicker

brainbook0/robopartpicker

✕BLOCK F

Open robotics project discovery, bill-of-materials compilation and parts sourcing. Source-linked, evidence-first, live at robopartpicker.com.

★ 018 readstreamable-http

sphica

iroha924/sphica

✕BLOCK F

Local memory of past decisions for Claude Code and Codex. Records sessions and decisions in a local SQLite file and recalls them over MCP.

★ 02 writestdio

Dbhub

bytebase/dbhub

✕BLOCK F

Token conscious database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite.

★ 3,5491 writestdio

Reactuse

childrentime/reactuse

✕BLOCK F

115+ production-ready React Hooks for sensors, UI, state & browser APIs. Tree-shakable, SSR-safe, TypeScript-first. Used by Shopee, PDD & Ctrip. Inspired by VueUse.

★ 1,0613 readstdio

RESTHeart

softinstigate/restheart

✕BLOCK F

The Agent-native Backend for MongoDB

★ 8892 write

Code Context Engine

elara-labs/code-context-engine

✕BLOCK F

Save 94% on AI coding tokens. Index your codebase, agents search instead of reading files. Works with Claude Code, Codex, Copilot, Cursor, Gemini CLI. Local MCP server, free, open source.

★ 4251 writestdio

rea

morluto/rea

✕BLOCK F

Reverse engineer anything with agents, from app behavior down to native binaries.

★ 4181 writestdio

Narsil

postrv/narsil-mcp

✕BLOCK F

Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more

★ 18412 write

Get Gather

mcp-getgather/mcp-getgather

✕BLOCK F

Exoskeleton for autonomous assistant

★ 731 read

Local Coding Agent

longngn204/local-coding-agent

✕BLOCK F

Local MCP coding agent for ChatGPT Web: run files/commands on your own machine via the OpenAI Secure Tunnel, with a Windows tray app and metrics dashboard.

★ 562 writestreamable-http

Aiquila

elgorro/aiquila

✕BLOCK F

Private AI for your Nextcloud — an MCP server (316 tools), a native Nextcloud app with chat and Coworkers, and one-command Hetzner deployment.

★ 382 readstdio

Lousy Agents

zpratt/lousy-agents

✕BLOCK F

Bootstrap projects with pre-configured instructions, tests, and linters that guide AI coding agents to produce reliable code

★ 136 writestdio

coinrithm-agent-trading

CoinRithm/coinrithm-agent-trading

✕BLOCK F

Let any AI agent (Claude, ChatGPT/Codex, Gemini) paper-trade on CoinRithm with a key you mint and control. Hosted MCP, local MCP, OpenAPI, skill + prompts.

★ 44 writestdio

The Lead Stack: Agent-Agnostic Workflows

bronz3beard/ai.tech-lead-stack

✕BLOCK F

AI agent workflows for cross-functional teams. Tech Leads, PMs, and HR can run RTK skills via IDE or Web App.

★ 34 writestdio

dchub-mcp-server

azmartone67/dchub-mcp-server

✕BLOCK F

DCPI (Data Center Power Index): a daily score of where data centers can get grid power, across 300+ markets. Live power-grid, energy, queue, fiber, gas & M&A data for AI agents: 94 tools, global facility map, 1,700+ tracked M&A deals. Capacity to buy or lease via source_capacity. Remote MCP at dchub

★ 31 writestreamable-http

Glaux

cetusk/Glaux

✕BLOCK F

A Lightweight DAW for Making Music with AI

★ 133 readstreamable-http

gleanery

iroha924/gleanery

✕BLOCK F

Local memory of past decisions for Claude Code and Codex. Records sessions and decisions in a local SQLite file and recalls them over MCP.

★ 12 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.