MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/12

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

265–288 of 3,145 · ranked by trust score, then stars

Run Python

pydantic/mcp-run-python

✓SAFE B

MCP server to run Python code in a sandbox.

★ 1941 writestdio

LinkedIn

eliasbiondo/linkedin-mcp-server

✓SAFE B

🔗 A Model Context Protocol (MCP) server for LinkedIn — search people, companies, and jobs, scrape profiles, and get structured data via any MCP-compatible AI client.

★ 1931 readstdio

Lsp

jonrad/lsp-mcp

✓SAFE B

An Model Context Protocol (MCP) server that provides LLMs/AI Agents with the capabilities of a language server protocol (LSP) server. This gives the AI the ability to get language aware context from the codebase.

★ 1921 writestdio

Toolbox Langchain SDK

googleapis/mcp-toolbox-sdk-python

✓SAFE B

Python SDK for interacting with the MCP Toolbox for Databases.

★ 1921 read

Bilibili

huccihuang/bilibili-mcp-server

✓SAFE B

MCP Server for the Bilibili API, supporting various operations.

★ 1904 readstdio

Playwright Plus

blackwhite084/playwright-plus-python-mcp

✓SAFE B
★ 1892 writestdio

Scholarly

adityak74/mcp-scholarly

✓SAFE B

A MCP server to search for accurate academic articles.

★ 1861 readstdio

Bocha Search

bochaai/bocha-search-mcp

✓SAFE B

Bocha Search MCP Server.

★ 1852 readstdio

Dash

kapeli/dash-mcp-server

✓SAFE B

MCP server for Dash, the macOS API documentation browser

★ 1851 writestdio

LiteMCP

wong2/litemcp

✓SAFE B

A TypeScript framework for building MCP servers elegantly

★ 1854 writestdio

OpenClaw

freema/openclaw-mcp

!CAUTION B

🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication

★ 1852 writesse

Quick-Start Auto

teddynote-lab/mcp-usecase

✓SAFE B
★ 1856 read

Anki

scorzeth/anki-mcp-server

✓SAFE B

An MCP server for Anki

★ 1841 writestdio

Aws Finops

ravikiranvm/aws-finops-mcp-server

✓SAFE B

An MCP (Model Context Protocol) server that brings powerful AWS FinOps capabilities directly into your AI assistant. Analyze cloud costs, audit for waste, and get budget insights using natural language, all while keeping your credentials secure on your local machine.

★ 1831 writestdio

unsnooze

saaranshM/unsnooze

✓SAFE B

Automatically resume Claude Code, Codex CLI, Grok, Qwen Code, Kimi CLI, OpenCode, and Antigravity sessions when 5-hour or weekly usage limits reset—across tmux, Zellij, VS Code, and desktop apps.

★ 1821 read

Comet

hanzili/comet-mcp

!CAUTION B

MCP Server connecting to Perplexity Comet browser

★ 1802 writestdio

Claude Historian

vvkmnn/claude-historian-mcp

✓SAFE B

📜 An MCP server for conversation history search and retrieval in Claude Code

★ 1799 readstdio

Historian

vvkmnn/claude-historian

✓SAFE B

📜 An MCP server for conversation history search and retrieval in Claude Code

★ 1799 readstdio

DuckDB Server

ktanaka101/mcp-server-duckdb

✓SAFE B

A Model Context Protocol (MCP) server implementation for DuckDB, providing database interaction capabilities

★ 1781 writestdio

Korea Stock

jjlabsio/korea-stock-mcp

✓SAFE B

MCP Server for Korean stock analysis. 한국 주식 분석을 위한 MCP 서버입니다.

★ 1778 readstdio

In Memoria

pi22by7/in-memoria

✓SAFE B

Persistent Intelligence Infrastructure for AI Agents

★ 1742 writestdio

Ourmem

ourmem/omem

✓SAFE B

Shared Memory That Never Forgets — persistent memory for AI agents with Space-based sharing across agents and teams. Plugins for OpenCode, Claude Code, OpenClaw, MCP Server.

★ 1743 writestdio

Shodan

burtthecoder/mcp-shodan

✓SAFE B

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

★ 1747 readstdio

Langfuse Prompts

langfuse/mcp-server-langfuse

✓SAFE B

Model Context Protocol (MCP) Server for Langfuse Prompt Management. This server allows you to access and manage your Langfuse prompts through the Model Context Protocol.

★ 1732 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.