MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/14
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
313–336 of 3,145 · ranked by trust score, then stars
PostgreSQL Operations
call518/mcp-postgresql-ops
🐘 Give AI assistants full PostgreSQL DBA superpowers — 30+ tools for performance analysis, bloat detection, lock/deadlock monitoring, autovacuum & schema inspection. No extensions required. PG 12-18.
Calculator
githejie/mcp-server-calculator
A Model Context Protocol server for calculating.
MySearch
skernelx/mysearch-proxy
Unified search MCP, proxy console, and skill for Tavily, Firecrawl, and Social / X.
Quickchart
gongrzhe/quickchart-mcp-server
A Model Context Protocol server for generating charts using QuickChart.io . It allows you to create various types of charts through MCP tools.
Unreal Analyzer
ayeletstudioindia/unreal-analyzer-mcp
MCP server for Unreal Engine 5
Claudit
marchev/claudit
MCP server for searching Solodit smart contract security findings
Esp
horw/esp-mcp
Centralize ESP32 related commands and simplify getting started with seamless, LLM-driven interaction and help.
Fetch
egoist/fetch-mcp
An MCP server for fetching URLs / Youtube video transcript.
Glance
debugbase/glance
AI-powered browser automation MCP server for Claude Code. Navigate, click, screenshot, test — all from your terminal.
Website Downloader
pskill9/website-downloader
MCP server to download entire websites
Crawl4AI
weidwonder/crawl4ai-mcp-server
用于提供给本地开发者的 LLM的高效互联网搜索&内容获取的MCP Server, 节省你的token
Open Data
opendatamcp/opendatamcp
Connect any Open Data to any LLM with Model Context Protocol.
Jenkins
lanbaoshen/mcp-jenkins
The Model Context Protocol (MCP) is an open-source implementation that bridges Jenkins with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with Jenkins tools while maintaining data privacy and security.
Agentdocs
gobinfan/python-mcp-server-client
支持查询主流agent框架技术文档的MCP server(支持stdio和sse两种传输协议), 支持 langchain、llama-index、autogen、agno、openai-agents-sdk、mcp-doc、camel-ai 和 crew-ai
Ask Human
masony817/ask-human-mcp
Hayhooks
deepset-ai/hayhooks
Easily deploy Haystack pipelines as REST APIs and MCP Tools.
FFmpeg
video-creator/ffmpeg-mcp
Using ffmpeg command line to achieve an mcp server, can be very convenient, through the dialogue to achieve the local video search, tailoring, stitching, playback,clip, overlay, concat and other functions
Readwise
readwiseio/readwise-mcp
Readwise MCP
Financial Modeling Prep
imbenrabi/financial-modeling-prep-mcp-server
A Model Context Protocol (MCP) implementation for Financial Modeling Prep, enabling AI assistants to access and analyze financial data, stock information, company fundamentals, and market insights.
VirusTotal
burtthecoder/mcp-virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
Ynab
calebl/ynab-mcp-server
Model Context Protocol for YNAB (you need a budget)
CodeQL
jordyzomer/codeql-mcp
This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structured commands.
BigQuery
ergut/mcp-bigquery-server
A Model Context Protocol (MCP) server that provides secure, read-only access to BigQuery datasets. Enables Large Language Models (LLMs) to safely query and analyze data through a standardized interface.
A2A Bridge
gongrzhe/a2a-mcp-server
A mcp server that bridges the Model Context Protocol (MCP) with the Agent-to-Agent (A2A) protocol, enabling MCP-compatible AI assistants (like Claude) to seamlessly interact with A2A agents.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?