MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/12
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
265–288 of 3,145 · ranked by trust score, then stars
Run Python
pydantic/mcp-run-python
MCP server to run Python code in a sandbox.
eliasbiondo/linkedin-mcp-server
🔗 A Model Context Protocol (MCP) server for LinkedIn — search people, companies, and jobs, scrape profiles, and get structured data via any MCP-compatible AI client.
Lsp
jonrad/lsp-mcp
An Model Context Protocol (MCP) server that provides LLMs/AI Agents with the capabilities of a language server protocol (LSP) server. This gives the AI the ability to get language aware context from the codebase.
Toolbox Langchain SDK
googleapis/mcp-toolbox-sdk-python
Python SDK for interacting with the MCP Toolbox for Databases.
Bilibili
huccihuang/bilibili-mcp-server
MCP Server for the Bilibili API, supporting various operations.
Playwright Plus
blackwhite084/playwright-plus-python-mcp
Scholarly
adityak74/mcp-scholarly
A MCP server to search for accurate academic articles.
Bocha Search
bochaai/bocha-search-mcp
Bocha Search MCP Server.
Dash
kapeli/dash-mcp-server
MCP server for Dash, the macOS API documentation browser
LiteMCP
wong2/litemcp
A TypeScript framework for building MCP servers elegantly
OpenClaw
freema/openclaw-mcp
🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication
Quick-Start Auto
teddynote-lab/mcp-usecase
Anki
scorzeth/anki-mcp-server
An MCP server for Anki
Aws Finops
ravikiranvm/aws-finops-mcp-server
An MCP (Model Context Protocol) server that brings powerful AWS FinOps capabilities directly into your AI assistant. Analyze cloud costs, audit for waste, and get budget insights using natural language, all while keeping your credentials secure on your local machine.
unsnooze
saaranshM/unsnooze
Automatically resume Claude Code, Codex CLI, Grok, Qwen Code, Kimi CLI, OpenCode, and Antigravity sessions when 5-hour or weekly usage limits reset—across tmux, Zellij, VS Code, and desktop apps.
Comet
hanzili/comet-mcp
MCP Server connecting to Perplexity Comet browser
Claude Historian
vvkmnn/claude-historian-mcp
📜 An MCP server for conversation history search and retrieval in Claude Code
Historian
vvkmnn/claude-historian
📜 An MCP server for conversation history search and retrieval in Claude Code
DuckDB Server
ktanaka101/mcp-server-duckdb
A Model Context Protocol (MCP) server implementation for DuckDB, providing database interaction capabilities
Korea Stock
jjlabsio/korea-stock-mcp
MCP Server for Korean stock analysis. 한국 주식 분석을 위한 MCP 서버입니다.
In Memoria
pi22by7/in-memoria
Persistent Intelligence Infrastructure for AI Agents
Ourmem
ourmem/omem
Shared Memory That Never Forgets — persistent memory for AI agents with Space-based sharing across agents and teams. Plugins for OpenCode, Claude Code, OpenClaw, MCP Server.
Shodan
burtthecoder/mcp-shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
Langfuse Prompts
langfuse/mcp-server-langfuse
Model Context Protocol (MCP) Server for Langfuse Prompt Management. This server allows you to access and manage your Langfuse prompts through the Model Context Protocol.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?