MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/127
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
3,025–3,048 of 3,145 · ranked by trust score, then stars
slopcamera
hraness/slopcamera
Slopcamera lets Codex, Claude Code, and other coding agents make images, diagrams, animation, 3D scenes, Blender films, and edited video from source files they can keep revising.
blixtrade
blixvip/blixtrade
Solana memecoin terminal with a public read API and an MCP server: live pump.fun feed, holder ledgers, Jupiter quotes.
nlqdb
nlqdb/nlqdb
Simplest Natural Langauge Querying DB That scales. Fast.
swarmmemo
Hugo0/swarmmemo
The message board for agent swarms. Post from anywhere: HTTP, MCP, DNS, netcat, Gemini, email, Nostr. Public rooms, private messages, paid tasks, a Bitcoin-anchored record.
Anything
helpcode-ai/anythingmcp
Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 299 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce.
anythingmcp
HelpCode-ai/anythingmcp
Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 263 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce.
obsidian-mcp-server
cyanheads/obsidian-mcp-server
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.
Obsidian
cyanheads/obsidian-mcp-server
Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.
publisher
malloydata/publisher
Publisher is the open-source analytics engine for Malloy. It lets you define data models once — and use them everywhere.
huaweicloud-devkit
huaweicloud/huaweicloud-devkit
Official Huawei Cloud plugin for AI agents — skills, MCP tools, safety guardrails, and cloud sandbox to help AI agents build, deploy, and operate on Huawei Cloud securely.
Simulator
joshuarileydev/simulator-mcp-server
Containerization Assist
azure/containerization-assist
TypeScript MCP server for AI-powered containerization workflows with Docker and Kubernetes support
@adcp/sdk
adcontextprotocol/adcp-client
A Typescript SDK for the AdCP protocol (client and server)
gina
gina-io/gina
MVC framework for Node.js and Bun with built-in HTTP/2, multi-bundle architecture, and scope-based data isolation — no Express dependency
surreal-memory
acidkill/surreal-memory
mcp-writ
strumbyte/mcp-writ
Policy enforcement, OS sandboxing, and JSON-RPC auditing for MCP servers
Network Sketcher
cisco-open/network-sketcher
Network Sketcher is an AI-ready network design tool with Local MCP, Online, and Offline editions for creating network designs and exporting PowerPoint diagrams and Excel-based configuration data.
MCPOmni Connect
abiorh001/mcp_omni_connect
An agent runtime for Python. Give your agent real work. Keep control: every action checked before it runs, every run survives a crash without silently redoing anything, every step on the record.
IJFW
ferroxlabs/ijfw
IJFW — It Just F*cking Works. Ferrox Labs' local-first infrastructure for AI coding agents: shared memory, smart routing, multi-AI cross-audits, disciplined workflow.
Dunetrace
dunetrace/dunetrace
The runtime reliability layer for AI agents.
PAI Knowledge OS
mnott/PAI
Personal AI Infrastructure
Obsidian LLM Wiki
2233admin/obsidian-llm-wiki
Your markdown vault, compiled into a 6-persona MCP team for Claude Code, Codex, OpenCode, and Gemini CLI. Headless-first. Cites, doesn't guess.
ghost
wcatz/ghost
GhostMem — a local-first MCP memory server for Claude Code, opencode, Cursor, and other MCP clients.
ecc-agentshield
affaan-m/agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?