MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/117

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,785–2,808 of 3,145 · ranked by trust score, then stars

serverkit

gusnips/serverkit

✕BLOCK F

The shared base of a TypeScript backend on Postgres: plain SQL migrations first.

★ 01 writestreamable-http

CareLoop-AI

workatustadarshajay/CareLoop-AI

✕BLOCK F

The foundation flow accepts a doctor's note, uses a Gemini tool-calling agent to save each actionable item as a card in Postgres, and displays all saved cards in the frontend.

★ 06 readstreamable-http

MCP Agent

lastmile-ai/mcp-agent

✕BLOCK F

Build effective agents using Model Context Protocol and simple workflow patterns

★ 8,5496 writesse

Terravision

patrickchugh/terravision

✕BLOCK F

Professional cloud architecture diagrams with official AWS, Azure and GCP icons, from Terraform code or a plain JSON graph. MCP server + agent skill.

★ 1,6392 readsse

elementor-mcp

msrbuilds/elementor-mcp

✕BLOCK F

WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.

★ 7332 readstreamable-http

App Builder SDK

baidubce/app-builder

✕BLOCK F

appbuilder-sdk, 千帆AppBuilder-SDK帮助开发者灵活、快速的搭建AI原生应用

★ 5865 writestdio

Nextcloud

cbcoutinho/nextcloud-mcp-server

!CAUTION F

Nextcloud MCP Server

★ 3732 writestdio

WeftCut

WeftCut/WeftCut

✕BLOCK F

Free, open-source AI video editor for macOS, Windows and Linux — drive the whole timeline from any MCP client.

★ 1852 writestdio

Pepper

skwallace36/pepper

✕BLOCK F

iOS dynamic library MCP for agents

★ 1054 readstdio

Lilbee

tobocop2/lilbee

✕BLOCK F

The whole local AI stack in one executable: it runs and manages local AI models across every GPU, and it's a search engine you can talk to, with cited answers from your files, code, and the web. MCP server for coding agents, web crawler, TUI, CLI, REST API, Python library. No Ollama or LM Studio nee

★ 636 readstreamable-http

Knowledge Base

jeanibarz/knowledge-base-mcp-server

✕BLOCK F

This MCP server provides tools for listing and retrieving content from different knowledge bases.

★ 5422 readsse

Tree-sitter Analyzer

aimasteracc/tree-sitter-analyzer

✕BLOCK F

Cross-language-safe code-intelligence MCP for AI agents: 13 languages, family-gated call graph, blast radius, health grading, 8 facade tools, JSON envelopes, 100% local. Run miswire-audit on your repo.

★ 543 readstdio

NeuronDB

neurondb/neurondb

✕BLOCK F

NeuronDB PostgreSQL extension: vector similarity search (HNSW, IVFFlat), embeddings, kNN, ML in SQL, and hybrid full-text + vector retrieval.

★ 511 read

Open Code Review

raye-deng/open-code-review

✕BLOCK F

🤖 AI code quality gate for AI-generated code. Detects hallucinated packages, phantom dependencies, stale APIs, and more. MCP Server + CLI + CI/CD Action.

★ 404 readstdio

answerLoops

answerLoops/answerLoops

✕BLOCK F

🚀 Agent-native AI support that turns your docs into answers for your community. Built for your agents with skills and MCP.

★ 191 write

GroundTruth-MCP

rm-rf-prod/GroundTruth-MCP

✕BLOCK F

Self-hosted MCP server for live documentation, code audits, and best practices. 793+ curated libraries, 107 audit patterns, no rate limits.

★ 633 readstdio

hronaut

hronaut/hronaut

✕BLOCK F

The browser your coding agent can come back to — visible, persistent, isolated workspaces over MCP.

★ 618 readstdio

Trusty Squire

Trusty-Squire/trusty-squire

✕BLOCK F

Trusty Squire signs up / in to websites for you so you don’t have to.

★ 33 writestdio

celeste-cli

whykusanagi/celeste-cli

✕BLOCK F

Agentic terminal AI assistant with a Bubble Tea TUI, code-graph review, semantic search, multi-provider LLMs, and MCP tools.

★ 12 readstreamable-http

MCPGateway

yeelam-gordon/MCPGateway

✕BLOCK F

Share local MCP servers across coding-agent sessions: avoid duplicate backend memory and startup work. Keep the agent-side MCP connection across settled configuration-only restarts (SDK/stdio). Tool discovery and exclusive workflows; sharing adds overhead.

★ 013 readstdio

CodeGraphContext

shashankss1205/codegraphcontext

✕BLOCK F

An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.

★ 4,24210 read

Crw

us/crw

✕BLOCK F

Fast, lightweight Firecrawl/Tavily alternative in Rust. Web scraper, crawler & search API with MCP server for AI agents. Drop-in Firecrawl-compatible API (/scrape, /crawl, /search). 2.3x faster than Tavily, 1.5x faster than Firecrawl in 1K-URL benchmarks. 6 MB RAM, single binary. Self-host or use ma

★ 1,0841 readstdio

agent-inspect

rajudandigam/agent-inspect

✕BLOCK F

Local evidence debugger and trajectory-test toolkit for TypeScript AI agents: inspect causal runs, catch wrong tool paths in CI, and share safe offline evidence.

★ 1656 write

CKB

simplyliz/ckb

✕BLOCK F

Code intelligence for AI assistants - MCP server, CLI, and HTTP API with symbol navigation, impact analysis, and architecture mapping

★ 1107 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.