Live survey286 models · 13 providers · 17,592 auditsAudited Using Git Worktrees · SAFE →What changedHow we verifyllms.txt

MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/132

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

  • stdio, runs locally2,191
  • Streamable HTTP, remote1,060
  • SSE, legacy remote253
  • Not declared563

A server can list more than one transport.

3,145 servers

3,145–3,145 of 3,145 · ranked by trust score, then stars

Gateway Registry

agentic-community/mcp-gateway-registry

✕BLOCK F

Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/E

★ 9442 writestdio

Other risk hubs

Read-only servers1,620Remote servers2,120

By job

Memory & knowledge330Cloud & infra239Code intelligence179Agent orchestration171Databases155Finance & crypto123Web search121Security119Browser automation116Marketing & analytics95Image, video & audio92Files & storage83Payments65Design tools63Chat & email62Mobile development51Git & code hosting41Project management38Calendar & office35Logs & monitoring33

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.