MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/121
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,881–2,904 of 3,145 · ranked by trust score, then stars
kansei-mcp-server
kansei-link/kansei-mcp-server
Local-first MCP navigator for AI agents. 11,000+ SaaS services, 200 workflow recipes, 89-97% token savings. Works with Claude Code, Cursor, Cline, Zed, Windsurf.
md-business
meta-taro/md-business
Business documents as Markdown — invoices, design docs and test sheets validated by JSON Schema, rendered to A4 PDF, and editable by AI agents through a built-in MCP server. Tauri desktop app + Chrome extension.
bitHuman docs
bithuman-product/public-docs
Public — source for docs.bithuman.ai (Astro Starlight + auto-generated OpenAPI reference). [public]
datahogo
datahogo/datahogo
Open-source security scanner that runs on your machine — your code never leaves your laptop. 300+ checks for JS/TS, Python, Go, Java, PHP, C#, mobile and Supabase. Plain-language explanations, AI fixes with your own API key.
DataQ
TheurgicDuke771/DataQ
Open-source data quality monitoring: checks across warehouses, lakehouses and object stores, triggered by ADF, Airflow and dbt, with alerting and an MCP server.
flowviant
flowviant/cli
Unstract
zipstack/unstract
LLM-Driven Extraction of Unstructured Data — Built for API Deployments & ETL Pipeline Workflows
Langroid
langroid/langroid
Harness LLMs with Multi-Agent Programming
graphjin
dosco/graphjin
One governed graph for AI agents — GraphQL + MCP over your databases, files, APIs, and code
Stripe AI
stripe/ai
One-stop shop for building AI-powered products and businesses with Stripe.
Minions
hazyresearch/minions
Big & Small LLMs working together
Coolify MCP Server
StuMason/coolify-mcp
MCP server for Coolify — 42 optimized tools for managing self-hosted PaaS through AI assistants
Hevy
chrisdoc/hevy-mcp
Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.
hevy-mcp
chrisdoc/hevy-mcp
Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.
Reversecore
sjkim1127/reversecore_mcp
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
Remindb
radimsem/remindb
An agentic memory database that cuts session tokens by 82–99%. One portable SQLite file — your agent's memory, anywhere.
Pentest
ramkansal/pentestmcp
pentestMCP: AI-Powered Penetration Testing via MCP, an MCP designed for penetration testers.
Vibe Coder
freshtechbro/vibe-coder-mcp
Vibe-Coder-MCP server extends AI assistants with specialized software development tools.
ClinicalTrials.gov
cyanheads/clinicaltrialsgov-mcp-server
Search ClinicalTrials.gov trials, retrieve study details and results, and match patients to eligible trials via MCP. STDIO or Streamable HTTP.
Teradata
teradata/teradata-mcp-server
The community development of a MCP server for a Teradata database
Heimdall App Store Connect
erayendes/app-store-connect-mcp
Heimdall — MCP server for the Apple App Store Connect API and App Store Server API (StoreKit 2). 890 tools across 13 profiles, generated from Apple's OpenAPI spec, plus one-call macros for worldwide pricing, submission readiness and metadata diffs, and confirm-before-write safety. Works with Claude,
Profullstack
profullstack/mcp-server
A generic, modular server for implementing the Model Context Protocol (MCP).
Fastly
fastly/mcp
Model Context Protocol (MCP) server for AI-powered Fastly CDN management.
Janee
rsdouglas/janee
Secrets management for AI agents via MCP • @janeesecure
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?