MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/126

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

3,001–3,024 of 3,145 · ranked by trust score, then stars

Mcp Ts Core

cyanheads/mcp-ts-core

✕BLOCK F

Agent-native TypeScript framework for building MCP servers.

★ 1524 readstdio

Mcp Ts Template

cyanheads/mcp-ts-template

✕BLOCK F

Agent-native TypeScript framework for building MCP servers.

★ 1524 readstdio

IBM i Server

ibm/ibmi-mcp-server

✕BLOCK F

MCP server for IBM i systems

★ 857 readstdio

wenlan

wenlan-app/wenlan

✕BLOCK F

A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.

★ 7919 readstreamable-http

AgentStack

ssdeanx/agentstack

✕BLOCK F

AgentStack is a production-grade multi-agent framework built on Mastra, delivering 50+ enterprise tools, 25+ specialized agents, and A2A/MCP orchestration for scalable AI systems. Focuses on financial intelligence, RAG pipelines, observability, and secure governance. ACP Openclaw, Gemini CLI, Openco

★ 446 write

Markdown Vault

pvliesdonk/markdown-vault-mcp

✕BLOCK F

Generic markdown vault MCP with hybrid search

★ 342 readstdio

openPASO

Hereon-InstituteMS/openPASO

✕BLOCK F

openPASO (formerly OASiS): an MCP server that lets an AI model run nine finite-element and multiphysics codes, with curated knowledge, verified execution and cross-code coupling. Under active development; contributions welcome.

★ 2713 writestdio

MAMA

jungjaehoon-lifegamez/MAMA

✕BLOCK F

Local-first operating memory for AI coding agents - Claude Code, Codex, and any MCP client. Tracks decisions and their evolution. SQLite + on-device embeddings, no cloud.

★ 155 writestdio

Affiliate Networks MCP

bobberrisford/affiliatemcp

✕BLOCK F

affiliate network MCPs and skills

★ 66 writestdio

benchweave

madeinoz67/benchweave

✕BLOCK F

BenchWeave is a Python test-bench gateway for embedded systems, combining reusable instrument and DUT plugins, shared device profiles, and safety-aware automated testing using AI.

★ 01 readstreamable-http

Rheo

MasterZ1311/Rheo

✕BLOCK F

Sovereign local-first AI voice studio. Neural speech synthesis, zero-shot voice cloning, zero-latency dictation, and MCP agent voice I/O. Built with Tauri & FastAPI.

★ 05 readstreamable-http

Agency Orchestrator

jnmetacode/agency-orchestrator

✕BLOCK F

🚀 One sentence → your one-person company of AI experts → complete deliverable in minutes. 276 CN + 184 EN + 5 more languages (ko/ru/pt-BR/id/ar) · zero-code YAML · auto-verified acceptance · Web Studio / Desktop / Docker · 15 LLM providers (11 key-free). 一句话组建你的「一人公司」AI 专家团队,几分钟交付完整方案;验收自动核验,网页 / 桌面

★ 2,2881 writestdio

Deja Vu

vshulcz/deja-vu

✕BLOCK F

The most accurate, cheapest and fastest memory for coding agents: searchable session history from Claude Code, Codex, Cursor and 32 more agents, already on your disk. No LLM, one Go binary.

★ 1,0811 writestdio

Jean Memory

jonathan-politzki/your-memory

✕BLOCK F

next-generation AI memory infrastructure (powered by mem0 and graphiti)

★ 1725 writestdio

Code Executor

aberemia24/code-executor-mcp

✕BLOCK F
★ 1282 writestdio

LLM Router

ypollak2/llm-router

✕BLOCK F

Universal LLM router for AI coding tools. Works with Claude Code, Cursor, Codex, Gemini CLI, Copilot and more. Free-first fallback chain cuts costs 35-80%.

★ 951 write

Calibre

sandraschi/calibremcp

✕BLOCK F

Calibre library automation via FastMCP — metadata, shelves, RAG-friendly export. Companion to Calibre, not a replacement. For Cursor / Claude Desktop.

★ 463 writesse

gridctl

gridctl/gridctl

✕BLOCK F

🔒 MCP gateway with a built-in skill library.

★ 449 writestreamable-http

Waggle

abhigyan-shekhar/waggle-mcp

✕BLOCK F

MCP server for external memory layer for AI agents + more . Download from pypi , and get started

★ 441 writestdio

Waggle-mcp

Abhigyan-Shekhar/Waggle-mcp

✕BLOCK F

MCP server for external memory layer for AI agents + more . Download from pypi , and get started

★ 441 writestdio

Laravel Companion

brianirish/laravel-mcp-companion

✕BLOCK F

A Laravel developer's MCP companion. Get the absolute best advice, recommendations, and up-to-date documentation for the entire Laravel ecosystem.

★ 382 writestdio

create-nextblock

nextblock-cms/nextblock

✕BLOCK F

The open-source, full-stack CMS for Next.js 16. An AI-native, developer-first alternative to headless platforms built with React Server Components, Supabase, and Tailwind CSS.

★ 181 readstreamable-http

🎖️ Flair

tpsdev-ai/flair

✕BLOCK F

Identity, memory, and soul for AI agents. Runs standalone or as part of a TPS office.

★ 81 writestdio

unified-ai-system

happy520ai/unified-ai-system

✕BLOCK F

Self-hosted model routing gateway and agent control plane for OpenAI, Anthropic, Gemini and A2A agents behind one OpenAI-compatible API, protocol-first. MCP server security, governed tools, prompt enhancement, virtual-key budgets, cache, observability, audit chain and agent governance. Zero-key loca

★ 818 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.