MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/14

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

313–336 of 3,145 · ranked by trust score, then stars

PostgreSQL Operations

call518/mcp-postgresql-ops

✓SAFE B

🐘 Give AI assistants full PostgreSQL DBA superpowers — 30+ tools for performance analysis, bloat detection, lock/deadlock monitoring, autovacuum & schema inspection. No extensions required. PG 12-18.

★ 16038 readstdio

Calculator

githejie/mcp-server-calculator

✓SAFE B

A Model Context Protocol server for calculating.

★ 1591 read

MySearch

skernelx/mysearch-proxy

✓SAFE B

Unified search MCP, proxy console, and skill for Tavily, Firecrawl, and Social / X.

★ 1594 readstreamable-http

Quickchart

gongrzhe/quickchart-mcp-server

✓SAFE B

A Model Context Protocol server for generating charts using QuickChart.io . It allows you to create various types of charts through MCP tools.

★ 1592 readstdio

Unreal Analyzer

ayeletstudioindia/unreal-analyzer-mcp

✓SAFE B

MCP server for Unreal Engine 5

★ 1592 writestdio

Claudit

marchev/claudit

✓SAFE B

MCP server for searching Solodit smart contract security findings

★ 1584 readstdio

Esp

horw/esp-mcp

✓SAFE B

Centralize ESP32 related commands and simplify getting started with seamless, LLM-driven interaction and help.

★ 1583 writestdio

Fetch

egoist/fetch-mcp

✓SAFE B

An MCP server for fetching URLs / Youtube video transcript.

★ 1562 readsse

Glance

debugbase/glance

!CAUTION B

AI-powered browser automation MCP server for Claude Code. Navigate, click, screenshot, test — all from your terminal.

★ 1563 writestdio

Website Downloader

pskill9/website-downloader

✓SAFE B

MCP server to download entire websites

★ 1561 readstdio

Crawl4AI

weidwonder/crawl4ai-mcp-server

✓SAFE B

用于提供给本地开发者的 LLM的高效互联网搜索&内容获取的MCP Server, 节省你的token

★ 1552 read

Open Data

opendatamcp/opendatamcp

!CAUTION B

Connect any Open Data to any LLM with Model Context Protocol.

★ 1555 readstdio

Jenkins

lanbaoshen/mcp-jenkins

✓SAFE B

The Model Context Protocol (MCP) is an open-source implementation that bridges Jenkins with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with Jenkins tools while maintaining data privacy and security.

★ 1545 writesse

Agentdocs

gobinfan/python-mcp-server-client

✓SAFE B

支持查询主流agent框架技术文档的MCP server(支持stdio和sse两种传输协议), 支持 langchain、llama-index、autogen、agno、openai-agents-sdk、mcp-doc、camel-ai 和 crew-ai

★ 1531 readstdio

Ask Human

masony817/ask-human-mcp

✓SAFE B
★ 1523 read

Hayhooks

deepset-ai/hayhooks

✓SAFE B

Easily deploy Haystack pipelines as REST APIs and MCP Tools.

★ 1527 readstreamable-http

FFmpeg

video-creator/ffmpeg-mcp

✓SAFE B

Using ffmpeg command line to achieve an mcp server, can be very convenient, through the dialogue to achieve the local video search, tailoring, stitching, playback,clip, overlay, concat and other functions

★ 1518 readstdio

Readwise

readwiseio/readwise-mcp

✓SAFE B

Readwise MCP

★ 1511 readstdio

Financial Modeling Prep

imbenrabi/financial-modeling-prep-mcp-server

!CAUTION B

A Model Context Protocol (MCP) implementation for Financial Modeling Prep, enabling AI assistants to access and analyze financial data, stock information, company fundamentals, and market insights.

★ 1509 writestreamable-http

VirusTotal

burtthecoder/mcp-virustotal

✓SAFE B

MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.

★ 1505 readstdio

Ynab

calebl/ynab-mcp-server

✓SAFE B

Model Context Protocol for YNAB (you need a budget)

★ 1506 readstdio

CodeQL

jordyzomer/codeql-mcp

✓SAFE B

This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structured commands.

★ 1496 read

BigQuery

ergut/mcp-bigquery-server

✓SAFE B

A Model Context Protocol (MCP) server that provides secure, read-only access to BigQuery datasets. Enables Large Language Models (LLMs) to safely query and analyze data through a standardized interface.

★ 1481 writestdio

A2A Bridge

gongrzhe/a2a-mcp-server

✓SAFE B

A mcp server that bridges the Model Context Protocol (MCP) with the Agent-to-Agent (A2A) protocol, enabling MCP-compatible AI assistants (like Claude) to seamlessly interact with A2A agents.

★ 1472 writesse

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.