MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/131
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
3,121–3,144 of 3,145 · ranked by trust score, then stars
schelling
SchellingAF/schelling
Schelling Add Forward: communication and persistent state for AI agents, over HTTP and MCP, on PostgreSQL.
Whodb
clidey/whodb
Where data access meets operational intelligence
Skylos
duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Free Crypto News
nirholas/free-crypto-news
Free crypto news API - real-time aggregator for Bitcoin, Ethereum, DeFi, Solana & altcoins. No API key required. RSS/Atom feeds, JSON REST API, historical archive with market context, embeddable widgets, ChatGPT plugin, Claude MCP server, SDKs (Python, TypeScript, Go, React, PHP). AI/LLM ready. Vibe
javis-os
blogminhquy/javis-os
EGC
fmarzochi/egc
EGC gives every AI coding agent the same brain. Shared memory, skills, and live context across Cursor, Claude Code, Copilot, Aider, and 20+ AI coding tools with zero configuration. Every tab, terminal, and AI stays automatically synchronized. One brain. Everywhere.
CloudBase AI ToolKit
tencentcloudbase/cloudbase-ai-toolkit
Backend for AI coding agents on CloudBase — database, auth, functions via Plugin, Skills & MCP.
Unraid
dinglebear-ai/unraid-mcp
Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.
Unraid
dinglebear-ai/unraid
Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.
Unraid
jmagar/unraid-mcp
Query, monitor, and manage Unraid servers via GraphQL API through MCP tools. Supports system info, Docker, VMs, array/parity, notifications, plugins, rclone, and live telemetry.
VibeShell
veithly/vibeshell
Local-first SSH/SFTP workspace for humans and coding agents: visible operations, shared sessions, integrated files and discoverable plugins.
hackmyagent
opena2a-org/hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
GraphFlow
Roarpeng/GraphFlow
Local-first code knowledge graph and context harness for coding agents. MCP + DeepSeek Harness (dsh) plugin.
AgenticOS-Workbench
zzoretich/AgenticOS-Workbench
UniDeX Agent Harness: a second brain and supervised Chief of Staff for Claude Code and Codex CLI, with persistent memory, recall and session capture, plus proposals you approve before anything changes. Lives in a plain-Markdown vault, with the UniDeX macOS app as its live dashboard.
exceptd Security
blamejs/exceptd-skills
AI security skills grounded in mid-2026 threat reality, not stale framework documentation
great-cto
avelikiy/great_cto
You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 70 specialist agents — an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether i
remembra
remembra-ai/remembra
Remembra Relay: one agent stops, the next one already knows. Session handoffs built from git facts, for the next coding agent in any MCP tool, on any machine. MCP server + CLI. MIT.
bv-mcp
MadaBurns/bv-mcp
Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.
BreachPilot
braydos-h/BreachPilot
Autonomous Offensive Security Agent for Red Team Operations
sequant
sequant-io/sequant
AI coding agent orchestrator — resolve GitHub issues end-to-end with isolated git worktrees, quality gates, and an MCP server. Works with Claude Code or Aider.
Pollinations
pollinations/pollinations
Your Friendly Open-Source Gen-AI Platform
MisakaNet
Ikalus1988/MisakaNet
📚 A zero-dependency, git-backed micro-lesson library for AI Agents to asynchronously share and search verified debugging experience. | https://misakanet.org
bce-engine
blueprint-conformance/bce
Blueprints with Teeth — the blueprint conformance engine: authored architectural intent, enforced in CI.
llm-trust-guard
nkratk/llm-trust-guard
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?