MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/125
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,977–3,000 of 3,145 · ranked by trust score, then stars
Conarium
dogrucanemek-alt/conarium
Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway by
wrg-sigma-rules
WRG-11/wrg-sigma-rules
Sigma rules for ransomware, threat actors and vulnerabilities disclosed in AI/LLM apps and MCP servers, with multi-backend conversion and an MCP server for Claude Code, Codex and Cursor. CI-pinned claims.
mistgate
Mistgate/mistgate
Self-hosted panel for running a VPN for others: family, friends, a community or a small team. Hysteria2 and AmneziaWG, one link per person, VLESS REALITY coming. Add servers from the browser over SSH; client-eye health checks and Telegram alerts; MCP for AI agents. Two static Go binaries, SQLite, no
drift
lungenemptynester200/drift
Detect architecture drift in AI-assisted codebases with deterministic checks and clear signals
MCP Toolbox for Databases
googleapis/genai-toolbox
MCP Toolbox for Databases is an open source MCP server for databases.
Kubernetes
manusa/kubernetes-mcp-server
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Kubernetes
containers/kubernetes-mcp-server
Model Context Protocol (MCP) server for Kubernetes and OpenShift
Superglue
superglue-ai/superglue
superglue (YC W25) builds integrations and tools from natural language. Get production-grade tools for long tail and enterprise systems.
Qu1cksc0pe
cyb3rmx/qu1cksc0pe
All-in-One malware analysis tool.
Keeper
ridafkih/keeper.sh
Calendar sync tool & universal calendar MCP server. Aggregate, sync and control calendars on Google, Outlook, Office 365, iCloud, CalDAV or ICS.
Hypa
Hypabolic/Hypa
Pubmed Mcp Server
cyanheads/pubmed-mcp-server
Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.
Pubmed
cyanheads/pubmed-mcp-server
Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.
CodeNib
sysevol-ai/CodeNib
Find source context and trace calls across languages in Claude Code, Codex and other MCP agents.
MarkuprPlus
hashfunction/MarkuprPlus
Record your screen, narrate the bug, and hand your AI coding agent structured Markdown - one annotated screenshot per mark. Desktop app, CLI, and MCP server for Claude Code, Cursor, Codex, and Windsurf. On-device Whisper transcription, local-first, MIT.
RepoYeti
LunarWerxs/RepoYeti
Run git from your phone, safely. A self-hosted daemon + mobile PWA for any git host (GitHub, GitLab, Gitea, Cloudflare Artifacts): live repo grid, git-graph history, Monaco diffs and AI Smart Commit, with guardrails (no force-push, fast-forward-only pulls).
APIbase
whiteknightonhorse/APIbase
One MCP + REST endpoint to APIbase's live tool catalog (counts: https://apibase.pro/llms.txt). No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).
cronwatch
phillips-jon/cronwatch
CronWatch records every run of your scheduled jobs in your own database, and speaks up when one is missed, fails, gets stuck, runs slow or costs too much.
crawlforge-mcp
mysleekdesigns/crawlforge-mcp
31 MCP tools that give Claude, Cursor and any MCP client the live web — scrape, crawl, search, real Google rank, change tracking, document parsing, plus an autonomous agent that researches from a plain-English prompt with no URLs. Clean Markdown and schema-validated JSON, not raw HTML. Local-Ollama
geoprims
clay-good/geoprims
Free, exact, cited calculators for pilots, drone operators, surveyors, and GIS developers: a static website (geoprims.com) and a local MCP server. Runs on your device.
roboparts
lm203688/roboparts
RoboParts — Vendor-neutral composition checker for embodied systems | 具身系统的组合校验层(开源、厂商中立)| 868 实体 / 20 品类 / ISO 9409-1 法兰判定 / 三态 fail-closed 裁决(能/不能/不知道)| MCP Server + 开放 API + GitHub Action
Mymir
frkak/mymir
The agentic workspace where people and agents work together in the loop.
Piyaz
frkak/piyaz
The agentic workspace where people and agents work together in the loop.
HexStrike AI Community Edition
commonhuman-lab/hexstrike-ai-community-edition
AI Powered penetration testing Platform for offensive security research
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?