MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/13
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
289–312 of 3,145 · ranked by trust score, then stars
Search1API
fatwang2/search1api-mcp
Official Search1API MCP server for web search, news, crawling, sitemaps, and trends—hosted with OAuth 2.1 or local via npm.
mcp-image
shinpr/mcp-image
MCP server for AI image generation and editing with automatic prompt optimization and quality presets. Supports Nano Banana (Gemini), OpenAI GPT Image, and BytePlus Seedream.
Simple PubMed
andybrandt/mcp-simple-pubmed
MCP server for searching and querying PubMed medical papers/research database
Image Generator
shinpr/mcp-image
MCP server for AI image generation and editing with automatic prompt optimization and quality presets. Supports Nano Banana (Gemini), OpenAI GPT Image, and BytePlus Seedream.
LMStudio Bridge
infinitimeless/lmstudio-mcp
A Model Control Protocol (MCP) server that allows Claude to communicate with locally running LLM models via LM Studio.
Mcp-Use
mcp-use/mcp-use-ts
mcp-use is the framework for MCP with the best DX - Build AI agents, create MCP servers with UI widgets, and debug with built-in inspector. Includes client SDK, server SDK, React hooks, and powerful dev tools.
MLIT Data Platform
mlit-data-platform/mlit-dpf-mcp
Computer Control
ab498/computer-control-mcp
MCP server that provides computer control capabilities, like mouse, keyboard, OCR, etc. using PyAutoGUI, RapidOCR, ONNXRuntime. Similar to 'computer-use' by Anthropic. With Zero External Dependencies.
Scrapeless
scrapeless-ai/scrapeless-mcp-server
Scrapeless Mcp Server
Serper Search and Scrape
marcopesani/mcp-server-serper
Serper MCP Server supporting search and webpage scraping
serper-search-scrape-mcp-server
marcopesani/mcp-server-serper
Serper MCP Server supporting search and webpage scraping
web3-research-mcp
aaronjmars/web3-research-mcp
Local MCP server for deep crypto token research across CoinGecko, DeFiLlama and web search. Free, no API key.
Content Summarizer
0xshellming/mcp-summarizer
MCP Server for AI Summarization
RenderDoc
linkingooo/renderdoc-mcp
MCP server for RenderDoc — AI-assisted GPU frame capture analysis
Salesforce MCP Server
tsmztech/mcp-server-salesforce
Salesforce MCP Server
Salesforce
tsmztech/mcp-server-salesforce
Salesforce MCP Server
Semantic Scholar
yuzongmin/semantic-scholar-fastmcp-mcp-server
A FastMCP server implementation for the Semantic Scholar API, providing comprehensive access to academic paper data, author information, and citation networks.
Zotero Connector
kaliaboi/mcp-zotero
A connector for Claude Desktop to work with collection and sources on your Zotero Cloud.
Web3 Research
aaronjmars/web3-research-mcp
Local MCP server for deep crypto token research across CoinGecko, DeFiLlama and web search. Free, no API key.
Example
alejandro-ao/mcp-server-example
A simple MCP server to search for documentation (tutorial)
Game Asset Generator
mubarakhalketbi/game-asset-mcp
An MCP server for creating 2D/3D game assets from text using Hugging Face AI models.
Read Website Fast
just-every/mcp-read-website-fast
Quickly reads webpages and converts to markdown for fast, token efficient web scraping
Zotero
kujenga/zotero-mcp
Lightweight Model Context Protocol (MCP) server for the Zotero API, in Python
BloodHound
stevenyu113228/bloodhound-mcp
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?