MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/119
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,833–2,856 of 3,145 · ranked by trust score, then stars
Anymd
SylphxAI/anymd
Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.
PDF Reader
sylphxltd/pdf-reader-mcp
Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.
PDF Reader
sylphxai/pdf-reader-mcp
Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.
Dingo
dataeval/dingo
Dingo: A Comprehensive AI Data, Model and Application Quality Evaluation Tool
McpStore
ip2a/mcpstore
Elegantly manage your MCP services
pgEdge Postgres
pgedge/pgedge-postgres-mcp
pgEdge MCP Server. A PostgreSQL MCP server with a Natural Language Agent CLI and Web UI.
Swagger Gateway
zaizaizhao/mcp-swagger-server
MCP Swagger Server 将任何符合 OpenAPI/Swagger 规范的 REST API 转换为 Model Context Protocol (MCP) 格式,让 AI 助手能够理解和调用您的 API。
Vault
zycaskevin/vault-agent-memory
Local-first memory governance for AI agents: shared, reviewable, auditable memory via SQLite and MCP.
Vault for LLM
zycaskevin/vault-for-llm
Local-first memory governance for AI agents: shared, reviewable, auditable memory via SQLite and MCP.
openrod
OpenRod/OpenRod
One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.
willow-mcp
willow-memory/willow-mcp
Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.
codemcp
mewisme/codemcp
CodeMCP is a workspace-aware execution, context, and agent orchestration server for AI clients.
agentic-engineering-harness
JamesMorales04/agentic-engineering-harness
kleo-mcp
tonnooooo/kleo-mcp
Kleo: remote MCP server that turns a brief into a narrated 4K 60 fps film, realistic or animation, from Claude, ChatGPT, Cursor or any MCP client
Tabularis
tabularisdb/tabularis
Open-source desktop SQL workspace with 3 built-in database drivers and 16 shipped plugins, including SQL Server, DuckDB, ClickHouse and Redis. Built-in MCP server for Claude, Cursor and Devin, SQL notebooks and visual EXPLAIN.
TradeMemory
mnemox-ai/tradememory-protocol
Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP tools.
sigmap
manojmallick/sigmap
~97% token reduction for AI coding sessions — zero deps, 38 languages, MCP server
Openllmetry Js
traceloop/openllmetry-js
Sister project to OpenLLMetry, but in Typescript. Open-source observability for your LLM application, based on OpenTelemetry
Payload CMS
matmax-worldwide/payloadcmsmcp
Payload CMS MCP Server
codelocal
codelocal-cloud/codelocal
The open-source Project Brain for AI coding. Connect ChatGPT, Codex, Claude and MCP-compatible agents to your projects, local tools and persistent knowledge. Fork it, build with it, and help shape the open AI development stack. 🧠⚡
Last.fm MCP Server
rianvdm/lastfm-mcp
An MCP server that provides seamless access to a user's Last.fm listening data and music information via AI assistants like Claude.
Tushare
zhewenzhang/tushare_mcp
api2ai
OpenSourceAGI/dev-tools-starter-agent
💻⚒️ NPM dev tools and core parts for Full Stack Starter App & Docs 🚀DEMO
Codingbuddy
jeremydev87/codingbuddy
Codingbuddy orchestrates 29 specialized AI agents to deliver code quality comparable to a team of human experts through a PLAN → ACT → EVAL workflow.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?