MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/122
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,905–2,928 of 3,145 · ranked by trust score, then stars
Barbacane
barbacane-dev/barbacane
Barbacane API and Bidirectional AI Gateway
ai-dossier
imboard-ai/ai-dossier
An open standard for signed, versioned agent skills. Model-driven orchestration with a deterministic shell — host anywhere, verify who wrote it. CLI, registry, MCP, VS Code.
hbhqq9-bde-score
hbhqq9/bde-score
🏆 Open-source multi-factor stock scoring API (0-100) | US/HK/A-Share 74 stocks | Zero signup | shields.io badges | GitHub Action | EU AI Act compliant
Trazum
Davmunrey/Trazum
Know what your AI agents cost, per project, without your prompts leaving the machine. CLI, MCP server and CI gate. Zero dependencies, offline.
limetry
limetry/limetry
Limetry is open-source agent action governance: check tool intents against policy before irreversible runs. Returns allow, deny, or approval_required with signed receipts and privacy-safe audit. TypeScript SDK, CLI, and MCP for IDE like Cursor, VS Code, GitHub Copilot, Claude. Optional CI, SQL, and
Synorive
arturoaeriform174/Synorive
Search your files by meaning and fact-check the web, fully offline.
GPT Researcher
assafelovic/gpt-researcher
An autonomous agent that conducts deep research on any data using any LLM providers
Npcpy
cagostino/npcpy
The python library for research and development in NLP, multimodal LLMs, Agents, ML, Knowledge Graphs, and more.
Npcpy
npc-worldwide/npcpy
The python library for research and development in NLP, multimodal LLMs, Agents, ML, Knowledge Graphs, and more.
npcpy
NPC-Worldwide/npcpy
The python library for research and development in NLP, multimodal LLMs, Agents, ML, Knowledge Graphs, and more.
Coolify
stumason/coolify-mcp
MCP server for Coolify — 42 optimized tools for managing self-hosted PaaS through AI assistants
Beever Atlas
beever-ai/beever-atlas
Your First LLM-Wiki Conversation Knowledge Base
agents-can-communicate
automatis-tools/agents-can-communicate
Messages between AI coding sessions in different vendors' clients, such as Claude Code and Codex. Local, open source, no lead agent.
DeployStack
deploystackio/deploystack
Open source MCP hosting - deploy MCP servers to HTTP endpoints for n8n, Dify, Voiceflow, and any MCP client.
Xcode
polarvista/xcode-mcp-server
Xiaozhi Tools
zhongzitongxue/xiaozhi-mcptools
一个图形化界面的小智MCP服务连接器,包含多种工具! 自动部署服务,方便小白给小智Ai添加MCP工具
Lunchmoney
leafeye/lunchmoney-mcp-server
Hecate
hecatehq/hecate
AI workspace and runtime for projects, chats, providers, memory, approvals, and supervised agents.
platform
GCTRL-TECH/platform
Governed graph-native agent memory: knowledge extraction, fusion, hybrid RAG, scoped access tokens. A push for data sovereignty.
Bizarharness
PolderLabsVOF/BizarHarness
Guarded multi-agent harness for Claude Code: model aliases, OpenKan planning, isolated worktrees, and evidence-led verification.
trantor
sashabogi/trantor
The hub-world for AI agent crews — orchestrate Claude Code, Codex, Gemini, Kimi & DeepSeek as live crews with a plan-aware Advisor, a Kanban/flow command center, a testing gate, and an economics brain (Scrooge).
eurostat-mcp-server
barrylecherous932/eurostat-mcp-server
Query Eurostat datasets on economy, health, and regional data through the Model Context Protocol using STDIO or HTTP.
llm-wiki-compiler
atomicstrata/llm-wiki-compiler
The knowledge compiler. Raw sources in, interlinked wiki out. Inspired by Karpathy's LLM Wiki pattern.
octocode-mcp
bgauryy/octocode
Code research platform for AI agents; find, understand, and prove context across your code and all of GitHub, in a fraction of the tokens. One toolset, MCP or CLI
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?