MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/130
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
3,097–3,120 of 3,145 · ranked by trust score, then stars
claude-autopm
rafeekpro/ClaudeAutoPM
Autonomous Project Management Framework for Claude Code - Advanced AI-powered development automation
unitares
cirwel/unitares
Accountability infrastructure for long-running AI agents. Self-hosted MCP server: identity, claims and evidence, review, outcomes, and reconstruction across agent runtimes.
viboplr
outcast1000/viboplr
Plugin-first desktop music player for macOS and Windows — local library, streaming services, lyrics, and radio. Built with Tauri 2, React, and Rust.
token-enhancer
Footshaped-friction742/token-enhancer
Reduce web pages to clean text before they reach your AI agent’s context window, saving tokens and cutting noise
AgentRecall
goldentrii/agentrecall-mcp
Correction-first persistent memory for AI agents. MCP server + SDK + CLI. Compounds across sessions.
AgentRecall
goldentrii/agentrecall-x
Correction-first persistent memory for AI agents. MCP server + SDK + CLI. Compounds across sessions.
AgentRecall
goldentrii/agentrecall
Correction-first persistent memory for AI agents. MCP server + SDK + CLI. Compounds across sessions.
jev-judge-mcp
PyModel/jev-judge-mcp
Typed judgment tools for MCP agents. TypeSafe's Jev model as verify, screen, find, classify, rerank, decide, compare, extract, review, gate, and score: the model judges, policy decides auto, review, or escalate.
agent-bounties
NSPG13/agent-bounties
Open-source bounty network where AI agents post, fund, claim, solve, verify, and get paid for digital work.
Theokit Sdk
usetheokit/theokit-sdk
Open-source TypeScript SDK and agent runtime you own end to end. Agent.create / prompt / stream / resume, 43 LLM providers on your own keys, MCP with OAuth PKCE, subagents, workflows, evals, memory, and a bubblewrap+seccomp kernel sandbox for tool execution. Local-first, opt-in cloud, Apache-2.0.
KXM
kontextmind/kxm
Pi extensions for multi-agent communication and orchestration
n.360
resper1965/n.360
n.iso — plataforma de adequação ISO 27001/27701 da ness.
FlAPI
datazoode/flapi
API Framework heavily relying on the power of DuckDB and DuckDB extensions. Ready to build performant and cost-efficient APIs on top of BigQuery or Snowflake for AI Agents and Data Apps
Circuit
snowfort-ai/circuit-mcp
Computer use-like MCP for webapps and electron apps, to enable AI agents to test their changes
Token Enhancer
xelektron/token-enhancer
A local proxy that strips web pages down to clean text before they enter your AI agent's context window. 704K tokens → 2.6K tokens. No LLM required.
CodeSampleX
r2cuerdame/CodeSampleX
An open compatibility testing network: does this library API actually run on your version, OS and runtime? Real build evidence, verified samples, and the environment each result came from.
security-gate-x402
nohosa001-pixel/security-gate-x402
The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic guardrails, key leak defense, and cryptographic Proof-of-Safety attestations via x402 on Base ($0.002).
Home Assistant AI
homeassistant-ai/ha-mcp
The Unofficial and Awesome Home Assistant MCP Server
Agoragentic Integrations
rhein1/agoragentic-integrations
Public adapters and discovery catalog for Triptych OS (Agent OS): agent frameworks, MCP/A2A/x402 protocols, workflows, wallets, SDKs, and examples for execute-first routing, governed handoffs, and receipt-aware agent commerce.
video-research-mcp
Galbaz1/video-research-mcp
MCP tools and Claude Code workflows for video analysis, cited research, document extraction, knowledge storage, and optional explainer video production.
mscodebase-intelligence
ManSio/mscodebase-intelligence
Intelligent codebase search & indexing for Zed. Async MCP server featuring LanceDB/BM25 hybrid search, multi-bucket RAG, and autonomous self-healing workflows. High-performance, memory-safe, and ready for your production code.
run402-mcp
kychee-com/run402
Full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. TypeScript SDK, CLI and MCP server. Paid with x402/MPP. Open source.
UniDeX-Agent-Harness
zzoretich/UniDeX-Agent-Harness
UniDeX Agent Harness: a second brain and supervised Chief of Staff for Claude Code and Codex CLI, with persistent memory, recall and session capture, plus proposals you approve before anything changes. Lives in a plain-Markdown vault, with the UniDeX macOS app as its live dashboard.
SceneScout
brunoboto96/SceneScout
🔭 Your coding agent, turned into a QA tester for any web app. Finds what is broken and shows you the proof: pictures, replays, journey videos and test reports. Over MCP, with Claude Code, Cursor, VS Code, Codex, Gemini CLI and more.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?