MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/125

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,977–3,000 of 3,145 · ranked by trust score, then stars

Conarium

dogrucanemek-alt/conarium

✕BLOCK F

Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway by

★ 324 readstdio

wrg-sigma-rules

WRG-11/wrg-sigma-rules

✕BLOCK F

Sigma rules for ransomware, threat actors and vulnerabilities disclosed in AI/LLM apps and MCP servers, with multi-backend conversion and an MCP server for Claude Code, Codex and Cursor. CI-pinned claims.

★ 23 read

mistgate

Mistgate/mistgate

✕BLOCK F

Self-hosted panel for running a VPN for others: family, friends, a community or a small team. Hysteria2 and AmneziaWG, one link per person, VLESS REALITY coming. Add servers from the browser over SSH; client-eye health checks and Telegram alerts; MCP for AI agents. Two static Go binaries, SQLite, no

★ 16 readstreamable-http

drift

lungenemptynester200/drift

✕BLOCK F

Detect architecture drift in AI-assisted codebases with deterministic checks and clear signals

★ 01 readstdio

MCP Toolbox for Databases

googleapis/genai-toolbox

✕BLOCK F

MCP Toolbox for Databases is an open source MCP server for databases.

★ 16,4602 readstreamable-http

Kubernetes

manusa/kubernetes-mcp-server

✕BLOCK F

Model Context Protocol (MCP) server for Kubernetes and OpenShift

★ 2,1397 readstdio

Kubernetes

containers/kubernetes-mcp-server

✕BLOCK F

Model Context Protocol (MCP) server for Kubernetes and OpenShift

★ 2,1167 readstdio

Superglue

superglue-ai/superglue

✕BLOCK F

superglue (YC W25) builds integrations and tools from natural language. Get production-grade tools for long tail and enterprise systems.

★ 2,0625 writestreamable-http

Qu1cksc0pe

cyb3rmx/qu1cksc0pe

✕BLOCK F

All-in-One malware analysis tool.

★ 2,0603 writestreamable-http

Keeper

ridafkih/keeper.sh

✕BLOCK F

Calendar sync tool & universal calendar MCP server. Aggregate, sync and control calendars on Google, Outlook, Office 365, iCloud, CalDAV or ICS.

★ 1,3552 readstreamable-http

Hypa

Hypabolic/Hypa

✕BLOCK F
★ 2121 read

Pubmed Mcp Server

cyanheads/pubmed-mcp-server

✕BLOCK F

Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.

★ 1591 writestdio

Pubmed

cyanheads/pubmed-mcp-server

✕BLOCK F

Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.

★ 1541 writestdio

CodeNib

sysevol-ai/CodeNib

✕BLOCK F

Find source context and trace calls across languages in Claude Code, Codex and other MCP agents.

★ 863 readstdio

MarkuprPlus

hashfunction/MarkuprPlus

✕BLOCK F

Record your screen, narrate the bug, and hand your AI coding agent structured Markdown - one annotated screenshot per mark. Desktop app, CLI, and MCP server for Claude Code, Cursor, Codex, and Windsurf. On-device Whisper transcription, local-first, MIT.

★ 794 writestdio

RepoYeti

LunarWerxs/RepoYeti

✕BLOCK F

Run git from your phone, safely. A self-hosted daemon + mobile PWA for any git host (GitHub, GitLab, Gitea, Cloudflare Artifacts): live repo grid, git-graph history, Monaco diffs and AI Smart Commit, with guardrails (no force-push, fast-forward-only pulls).

★ 206 write

APIbase

whiteknightonhorse/APIbase

✕BLOCK F

One MCP + REST endpoint to APIbase's live tool catalog (counts: https://apibase.pro/llms.txt). No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).

★ 101 writesse

cronwatch

phillips-jon/cronwatch

✕BLOCK F

CronWatch records every run of your scheduled jobs in your own database, and speaks up when one is missed, fails, gets stuck, runs slow or costs too much.

★ 41 writestdio

crawlforge-mcp

mysleekdesigns/crawlforge-mcp

✕BLOCK F

31 MCP tools that give Claude, Cursor and any MCP client the live web — scrape, crawl, search, real Google rank, change tracking, document parsing, plus an autonomous agent that researches from a plain-English prompt with no URLs. Clean Markdown and schema-validated JSON, not raw HTML. Local-Ollama

★ 21 writestdio

geoprims

clay-good/geoprims

✕BLOCK F

Free, exact, cited calculators for pilots, drone operators, surveyors, and GIS developers: a static website (geoprims.com) and a local MCP server. Runs on your device.

★ 03 write

roboparts

lm203688/roboparts

✕BLOCK F

RoboParts — Vendor-neutral composition checker for embodied systems | 具身系统的组合校验层(开源、厂商中立)| 868 实体 / 20 品类 / ISO 9409-1 法兰判定 / 三态 fail-closed 裁决(能/不能/不知道)| MCP Server + 开放 API + GitHub Action

★ 038 readstdio

Mymir

frkak/mymir

✕BLOCK F

The agentic workspace where people and agents work together in the loop.

★ 1943 writestreamable-http

Piyaz

frkak/piyaz

✕BLOCK F

The agentic workspace where people and agents work together in the loop.

★ 1933 writestreamable-http

HexStrike AI Community Edition

commonhuman-lab/hexstrike-ai-community-edition

✕BLOCK F

AI Powered penetration testing Platform for offensive security research

★ 1571 write

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.