MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/128
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
3,049–3,072 of 3,145 · ranked by trust score, then stars
Flexible GraphRAG
stevereiner/flexible-graphrag
Python, LlamaIndex, LangChain, 15 Property Graph, 4 RDF , 10 Vector, OpenSearch, Elasticsearch DBs. 14 data sources, 10 auto sync: Alfresco, Nuxeo, etc. KG auto-building, Ontologies, LLMs, Docling, LlamaParse, LiteParse, GraphRAG, RAG, Hybrid Search, AI Chat. TypeScript React, Vue, Angular frontends
AI for the Win
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Origin
7xuanlu/origin
A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.
Wenlan
7xuanlu/wenlan
A living personal wiki. Wenlan turns your documents, notes, and AI chats into pages with links to their sources, and updates them as sources change without overwriting your edits. Claude Code, Codex and other AI tools can build on it.
Mythos Agent
mythos-agent/mythos-agent
The AI security agent guards your code.
Whetstone
iliaal/whetstone
AI-powered development tools. 18 agents, 19 commands, 29 skills, 1 hook, 1 MCP server for code review, research, design, and workflow automation.
BuildersGate
Thepizzapie/BuildersGate
Agentic game development for building games with AI Agents. Run one session per seat: art, gameplay, narrative, QA, audio, tech all in 1 spot
corpusiq-docs
CorpusIQ/corpusiq-docs
Hermes Agent Production Knowledge Repository — 406+ repos, AI Agent Marketplace, MCP servers, autonomous AI agent patterns. Production-tested from 1,200+ hours of ops. Updated daily.
kodelyth-ecc
sifxprime/kodelyth-ecc
70 agents · 196 skills · 103 commands · 44 hook entries · semantic intent routing · self-learning memory · GOD vs EVIL arena · MCP server. macOS, Linux and Windows. Claude Code, Windsurf, Cursor, Codex, Antigravity, Cline, Roo Code, Aider, Kimi, Gemini CLI. MIT.
aziel-runtime
AzielEliab/aziel-runtime
Aziel Runtime by Aziel Eliab — FragGate MCP Softwares door. https://aziel-runtime.vibelock.workers.dev/ · OpenAPI+MCP · Glama · hubs azieleliab.com · corpus · godlock.uk · HDJ.
feedback-kit-skills
tianhaoz95/feedback-kit
Turn in-app user feedback into agent-ready coding prompts.
Selene
tercumantanumut/selene
Selene is a desktop app that runs AI agents on your machine. Connect them to your WhatsApp, Telegram, Slack, or Discord. Write code, generate images, build personal assistants. All from one place. Your data stays on your device.
Seline
tercumantanumut/seline
Selene is a desktop app that runs AI agents on your machine. Connect them to your WhatsApp, Telegram, Slack, or Discord. Write code, generate images, build personal assistants. All from one place. Your data stays on your device.
Open Computer Use
wide-moat/open-computer-use
ARCHIVED — superseded by Wide Moat
elixir-mcp
jthingelstad/elixir-mcp
Clash Royale history recorder + remote MCP server. Unofficial; not endorsed by Supercell.
Receiz-commerce
kojibai/Receiz-commerce
Open-source, no-code ecommerce launcher and developer kernel for proof-native artifacts. Clone, configure, and launch your own storefront powered by the Receiz SDK, MCP server, offline verification, ownership receipts, and programmable commerce objects.
anysearch-cli
Xxx91n/anysearch-cli
Vertical-domain information-specialist agent CLI — search + research + memory + knowledge with domain allowlists, abstain-first answers, and a fail-open MCP server
mcp-agentgate
wookat/agentgate
AgentGate — scan, lock, and gate your MCP servers. npm-audit + lockfile + CI drift gate for the MCP era.
Ouroboros
q00/ouroboros
Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, staged evaluation, budgeted evolution loop. MCP server, 14 runtimes: Claude Code, Codex CLI, Gemini CLI, OpenCode, Copilot, Kiro and more.
Notte
nottelabs/notte
Cloud browser infrastructure and web automation platform for your AI and coding agents
unifi-mcp
sirkirby/unifi-mcp
MCP servers & Graph API for the UniFi suite of applications, Network, Protect, and Access
UniFi Network
sirkirby/unifi-network-mcp
MCP servers & Graph API for the UniFi suite of applications, Network, Protect, and Access
UniFi Network
sirkirby/unifi-mcp
MCP servers & Graph API for the UniFi suite of applications, Network, Protect, and Access
IJFW
therealseandonahoe/ijfw
IJFW — It Just F*cking Works. Ferrox Labs' local-first infrastructure for AI coding agents: shared memory, smart routing, multi-AI cross-audits, disciplined workflow.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?