MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/124
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,953–2,976 of 3,145 · ranked by trust score, then stars
cli
modelstudioai/cli
Official Model Studio CLI(阿里云百炼 CLI)built for AI Agent frameworks, exposing models, search, multimodal, and workflow capabilities as structured tool calls.
AI-Canvas-tauri
Tenney95/AI-Canvas-tauri
Local-first AI canvas for visual workflows, AI short drama, image/video generation, storyboarding and asset management. ComfyUI, AI agents, MCP & Blender. 本地优先 AI 画布:AI短剧、AI资产管理、图像/视频生成、分镜制作与视频剪辑。
NyxStrike
commonhuman-lab/nyxstrike
AI Powered penetration testing Platform for offensive security research
DeepSecure
deeptrail/deepsecure
Effortlessly secure your AI agents and AI-powered workflows — from prototype to production. Get easy-to-use identity, credential, and access management built for fast-moving AI developers.
Rash
paiml/bashrs
Bashrs: Rust-to-Shell Transpiler for Deterministic Bootstrap Scripts
impri
sekera-radim/impri
Human-in-the-loop approval inbox for AI agents. An agent proposes an action, a human approves or rejects it, then it runs. Watchers + approval inbox, MCP + REST, self-hostable (MIT).
AiFinPay — payment infrastructure for AI agents
AiFinPay/sdk
Payment infrastructure for AI agents: wallet, passport, owner-enabled Polygon and Base payments.
puenteo
mano7onam/puenteo
Let your coding agents talk to each other: search every Claude Code / Codex / Gemini / Cursor session and message live sessions. CLI · MCP · hooks · HTTP/SSE · A2A.
caveman-shrink
JuliusBrussee/caveman
🪨 why use many token when few token do trick. Viral skill + proxy for coding agents that cuts 65% of tokens by talking like a caveman.
Reactive Resume
amruthpillai/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Reactive Resume
reactive-resume/app
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Reactive Resume
reactive-resume/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
Mex
mex-memory/mex
Team memory for engineers and their AI agents. Lives in your repo. Shared through Git.
Snowluma
SnowLuma/SnowLuma
Next Remote Protocol Framework.
Sentry
getsentry/sentry-mcp
An MCP server for interacting with Sentry via LLMs.
Novamira
use-novamira/novamira
MCP server that gives AI agents full access to WordPress through PHP execution and filesystem operations
Flyto Core
flytohub/flyto-core
AI said it finished. Flyto2 shows the proof.
Claude Delegator
antonbabenko/claude-delegator
Ask Codex, Gemini, Grok, and 400+ OpenRouter models (Qwen, Kimi, DeepSeek) for second opinions or arbiter-mediated consensus. One MCP server for Claude Code, Codex, Cursor, Kiro, OpenCode. Measures the models' usefulness, too.
Deliberation
antonbabenko/deliberation
Ask Codex, Gemini, Grok, and 400+ OpenRouter models (Qwen, Kimi, DeepSeek) for second opinions or arbiter-mediated consensus. One MCP server for Claude Code, Codex, Cursor, Kiro, OpenCode. Measures the models' usefulness, too.
Unipi
Neuron-Mr-White/unipi
All-in-one, unified harness. Increasing productivity, and accuracy both at the same time. https://pi.dev/packages/@pi-unipi/unipi?name=unipi
LLM Council
amiable-dev/llm-council
The LLM Council works together to answer your hardest questions
Perp
hypurrquant/perp-cli
Multi-DEX perpetual futures CLI + MCP server — Pacifica (Solana), Hyperliquid, Lighter (Ethereum). 18 MCP tools for AI-powered trading
MCPAudit
saagpatel/MCPAudit
Audit all locally configured MCP servers for permission risks, prompt injection threats, and schema drift
mnema
felipesauer/mnema
Signed, append-only decision records for AI coding agents: an MCP server and CLI that open Claude Code, Codex, Copilot CLI, Gemini CLI, OpenCode, VS Code and Cursor sessions with your team's decisions, hold the edits a rule governs, and let anyone verify the record offline. Tamper-evident, in git.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?