MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/126
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
3,001–3,024 of 3,145 · ranked by trust score, then stars
Mcp Ts Core
cyanheads/mcp-ts-core
Agent-native TypeScript framework for building MCP servers.
Mcp Ts Template
cyanheads/mcp-ts-template
Agent-native TypeScript framework for building MCP servers.
IBM i Server
ibm/ibmi-mcp-server
MCP server for IBM i systems
wenlan
wenlan-app/wenlan
A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.
AgentStack
ssdeanx/agentstack
AgentStack is a production-grade multi-agent framework built on Mastra, delivering 50+ enterprise tools, 25+ specialized agents, and A2A/MCP orchestration for scalable AI systems. Focuses on financial intelligence, RAG pipelines, observability, and secure governance. ACP Openclaw, Gemini CLI, Openco
Markdown Vault
pvliesdonk/markdown-vault-mcp
Generic markdown vault MCP with hybrid search
openPASO
Hereon-InstituteMS/openPASO
openPASO (formerly OASiS): an MCP server that lets an AI model run nine finite-element and multiphysics codes, with curated knowledge, verified execution and cross-code coupling. Under active development; contributions welcome.
MAMA
jungjaehoon-lifegamez/MAMA
Local-first operating memory for AI coding agents - Claude Code, Codex, and any MCP client. Tracks decisions and their evolution. SQLite + on-device embeddings, no cloud.
Affiliate Networks MCP
bobberrisford/affiliatemcp
affiliate network MCPs and skills
benchweave
madeinoz67/benchweave
BenchWeave is a Python test-bench gateway for embedded systems, combining reusable instrument and DUT plugins, shared device profiles, and safety-aware automated testing using AI.
Rheo
MasterZ1311/Rheo
Sovereign local-first AI voice studio. Neural speech synthesis, zero-shot voice cloning, zero-latency dictation, and MCP agent voice I/O. Built with Tauri & FastAPI.
Agency Orchestrator
jnmetacode/agency-orchestrator
🚀 One sentence → your one-person company of AI experts → complete deliverable in minutes. 276 CN + 184 EN + 5 more languages (ko/ru/pt-BR/id/ar) · zero-code YAML · auto-verified acceptance · Web Studio / Desktop / Docker · 15 LLM providers (11 key-free). 一句话组建你的「一人公司」AI 专家团队,几分钟交付完整方案;验收自动核验,网页 / 桌面
Deja Vu
vshulcz/deja-vu
The most accurate, cheapest and fastest memory for coding agents: searchable session history from Claude Code, Codex, Cursor and 32 more agents, already on your disk. No LLM, one Go binary.
Jean Memory
jonathan-politzki/your-memory
next-generation AI memory infrastructure (powered by mem0 and graphiti)
Code Executor
aberemia24/code-executor-mcp
LLM Router
ypollak2/llm-router
Universal LLM router for AI coding tools. Works with Claude Code, Cursor, Codex, Gemini CLI, Copilot and more. Free-first fallback chain cuts costs 35-80%.
Calibre
sandraschi/calibremcp
Calibre library automation via FastMCP — metadata, shelves, RAG-friendly export. Companion to Calibre, not a replacement. For Cursor / Claude Desktop.
gridctl
gridctl/gridctl
🔒 MCP gateway with a built-in skill library.
Waggle
abhigyan-shekhar/waggle-mcp
MCP server for external memory layer for AI agents + more . Download from pypi , and get started
Waggle-mcp
Abhigyan-Shekhar/Waggle-mcp
MCP server for external memory layer for AI agents + more . Download from pypi , and get started
Laravel Companion
brianirish/laravel-mcp-companion
A Laravel developer's MCP companion. Get the absolute best advice, recommendations, and up-to-date documentation for the entire Laravel ecosystem.
create-nextblock
nextblock-cms/nextblock
The open-source, full-stack CMS for Next.js 16. An AI-native, developer-first alternative to headless platforms built with React Server Components, Supabase, and Tailwind CSS.
🎖️ Flair
tpsdev-ai/flair
Identity, memory, and soul for AI agents. Runs standalone or as part of a TPS office.
unified-ai-system
happy520ai/unified-ai-system
Self-hosted model routing gateway and agent control plane for OpenAI, Anthropic, Gemini and A2A agents behind one OpenAI-compatible API, protocol-first. MCP server security, governed tools, prompt enhancement, virtual-key budgets, cache, observability, audit chain and agent governance. Zero-key loca
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?