MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/123

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,929–2,952 of 3,145 · ranked by trust score, then stars

Drift

dadbodgeoff/drift

✕BLOCK F

Codebase intelligence for AI. Detects patterns & conventions + remembers decisions across sessions. MCP server for any IDE. Offline CLI.

★ 7892 write

EDT-MCP

DitriXNew/EDT-MCP

✕BLOCK F

MCP for 1C:EDT

★ 3001 readstreamable-http

EDT

ditrixnew/edt-mcp

✕BLOCK F

MCP for 1C:EDT

★ 2931 readstreamable-http

JSON Server

gongrzhe/json-mcp-server

✕BLOCK F

JSON handling and processing mcp server

★ 902 readsse

Workflows

dx-zero/mcpn

✕BLOCK F

orchestrate & combine prompts + MCP servers into compound MCP tools

★ 542 writestdio

Fast Telegram

leshchenko1979/fast-mcp-telegram

✕BLOCK F

Telegram MCP gateway for AI agents: 8 tools, multi-tenant HTTP/stdio, MTProto

★ 482 writestdio

Twitter

crazyrabbitltc/mcp-twitter-server

✕BLOCK F

Model Context Protocol Server for Accessing twitter

★ 2516 readsse

artifactflow

Gadsotek/artifactflow

✕BLOCK F

Open-source, self-hosted, versioned vault for AI-generated HTML, Markdown, Mermaid, and image artifacts, with scoped MCP access and isolated two-origin previews.

★ 51 readstreamable-http

runtime

withruntime/runtime

✕BLOCK F

Sandboxes for AI agents: TypeScript, Python, Go, Java and Ruby SDKs, the runtime CLI, an MCP server, and agent integrations. Firecracker microVMs.

★ 12 writestdio

Kybernesis Platform

KybernesisAI/platform

✕BLOCK F
★ 01 read

lense

adeelahmad/lense

✕BLOCK F

Lens: intelligence for your agent. Safe, secure and cost-effective. A self-hosted, cited knowledge graph and MCP server for your agents, from a Raspberry Pi to the cloud.

★ 05 readstreamable-http

Chrome Browser

hangwin/mcp-chrome

✕BLOCK F

Chrome MCP Server is a Chrome extension-based Model Context Protocol (MCP) server that exposes your Chrome browser functionality to AI assistants like Claude, enabling complex browser automation, content analysis, and semantic search.

★ 12,4387 readsse

kubernetes-mcp-server

containers/kubernetes-mcp-server

✕BLOCK F

Model Context Protocol (MCP) server for Kubernetes and OpenShift

★ 2,1547 readstdio

HOL Standards SDK

hashgraph-online/standards-sdk

✕BLOCK F

The official HOL Standards SDK, implementing the standards found in https://hol.org/docs/standards

★ 1,2616 write

Octocode

bgauryy/octocode-mcp

✕BLOCK F

Code research platform for AI agents; find, understand, and prove context across your code and all of GitHub, in a fraction of the tokens. One toolset, MCP or CLI

★ 9449 writestdio

codflow

bighadj22/codflow

✕BLOCK F

The open-source, COD-first e-commerce + delivery platform for Algeria built agentic-ready.

★ 3425 read

Sage

l33tdawg/sage

✕BLOCK F

(S)AGE - (Sovereign) Agent Governed Experience

★ 25411 readstdio

Axon

ali-kamali/axon.mcp.server

✕BLOCK F

Transform your codebase into an intelligent knowledge base for AI-powered development with Cursor IDE, Google AntiGravity, and MCP-enabled assistants

★ 16622 readstdio

llm-router

ypollak2/llm-router

✕BLOCK F

Universal LLM router for AI coding tools. Works with Claude Code, Cursor, Codex, Gemini CLI, Copilot and more. Free-first fallback chain cuts costs 35-80%.

★ 941 write

gitlab-mcp-server

jmrplens/gitlab-mcp-server

✕BLOCK F

Open source GitLab MCP server for AI assistants: 2-tool dynamic find/execute over 850+ GitLab actions (1,000+ Enterprise), stdio/HTTP/OAuth, safe/read-only modes.

★ 434 writestdio

engram

the-long-ride/engram

✕BLOCK F

Engram - file-system-based memory management system for AI agents that grows with you & your teams, across agents, projects, and devices.

★ 64 write

deepPairing

mitchjablonski/deepPairing

✕BLOCK F

Review what Claude Code is about to change on a rich visual surface — inline comments, evidence, and a gate that remembers the approaches you rejected.

★ 15 readstdio

living-bread-mcp

thegoodfruit/living-bread-mcp

✕BLOCK F

Remote MCP server for The Living Bread: Scripture from a stored text, verses for a need, real churches and gatherings, and the prayers real people prayed over you. mcp.living-bread.org

★ 08 readsse

PhpMyFAQ

thorsten/phpmyfaq

✕BLOCK F

phpMyFAQ - Open Source FAQ web application for PHP 8.4+ and MySQL, PostgreSQL and other databases

★ 6211 write

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.