MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/117
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,785–2,808 of 3,145 · ranked by trust score, then stars
serverkit
gusnips/serverkit
The shared base of a TypeScript backend on Postgres: plain SQL migrations first.
CareLoop-AI
workatustadarshajay/CareLoop-AI
The foundation flow accepts a doctor's note, uses a Gemini tool-calling agent to save each actionable item as a card in Postgres, and displays all saved cards in the frontend.
MCP Agent
lastmile-ai/mcp-agent
Build effective agents using Model Context Protocol and simple workflow patterns
Terravision
patrickchugh/terravision
Professional cloud architecture diagrams with official AWS, Azure and GCP icons, from Terraform code or a plain JSON graph. MCP server + agent skill.
elementor-mcp
msrbuilds/elementor-mcp
WordPress plugin that turns Elementor & WordPress into an MCP server. 500+ AI-ready tools for building, editing, and managing page designs programmatically.
App Builder SDK
baidubce/app-builder
appbuilder-sdk, 千帆AppBuilder-SDK帮助开发者灵活、快速的搭建AI原生应用
Nextcloud
cbcoutinho/nextcloud-mcp-server
Nextcloud MCP Server
WeftCut
WeftCut/WeftCut
Free, open-source AI video editor for macOS, Windows and Linux — drive the whole timeline from any MCP client.
Pepper
skwallace36/pepper
iOS dynamic library MCP for agents
Lilbee
tobocop2/lilbee
The whole local AI stack in one executable: it runs and manages local AI models across every GPU, and it's a search engine you can talk to, with cited answers from your files, code, and the web. MCP server for coding agents, web crawler, TUI, CLI, REST API, Python library. No Ollama or LM Studio nee
Knowledge Base
jeanibarz/knowledge-base-mcp-server
This MCP server provides tools for listing and retrieving content from different knowledge bases.
Tree-sitter Analyzer
aimasteracc/tree-sitter-analyzer
Cross-language-safe code-intelligence MCP for AI agents: 13 languages, family-gated call graph, blast radius, health grading, 8 facade tools, JSON envelopes, 100% local. Run miswire-audit on your repo.
NeuronDB
neurondb/neurondb
NeuronDB PostgreSQL extension: vector similarity search (HNSW, IVFFlat), embeddings, kNN, ML in SQL, and hybrid full-text + vector retrieval.
Open Code Review
raye-deng/open-code-review
🤖 AI code quality gate for AI-generated code. Detects hallucinated packages, phantom dependencies, stale APIs, and more. MCP Server + CLI + CI/CD Action.
answerLoops
answerLoops/answerLoops
🚀 Agent-native AI support that turns your docs into answers for your community. Built for your agents with skills and MCP.
GroundTruth-MCP
rm-rf-prod/GroundTruth-MCP
Self-hosted MCP server for live documentation, code audits, and best practices. 793+ curated libraries, 107 audit patterns, no rate limits.
hronaut
hronaut/hronaut
The browser your coding agent can come back to — visible, persistent, isolated workspaces over MCP.
Trusty Squire
Trusty-Squire/trusty-squire
Trusty Squire signs up / in to websites for you so you don’t have to.
celeste-cli
whykusanagi/celeste-cli
Agentic terminal AI assistant with a Bubble Tea TUI, code-graph review, semantic search, multi-provider LLMs, and MCP tools.
MCPGateway
yeelam-gordon/MCPGateway
Share local MCP servers across coding-agent sessions: avoid duplicate backend memory and startup work. Keep the agent-side MCP connection across settled configuration-only restarts (SDK/stdio). Tool discovery and exclusive workflows; sharing adds overhead.
CodeGraphContext
shashankss1205/codegraphcontext
An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.
Crw
us/crw
Fast, lightweight Firecrawl/Tavily alternative in Rust. Web scraper, crawler & search API with MCP server for AI agents. Drop-in Firecrawl-compatible API (/scrape, /crawl, /search). 2.3x faster than Tavily, 1.5x faster than Firecrawl in 1K-URL benchmarks. 6 MB RAM, single binary. Self-host or use ma
agent-inspect
rajudandigam/agent-inspect
Local evidence debugger and trajectory-test toolkit for TypeScript AI agents: inspect causal runs, catch wrong tool paths in CI, and share safe offline evidence.
CKB
simplyliz/ckb
Code intelligence for AI assistants - MCP server, CLI, and HTTP API with symbol navigation, impact analysis, and architecture mapping
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?