MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/16

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

361–384 of 3,145 · ranked by trust score, then stars

Apple Notes

sirmews/apple-notes-mcp

✓SAFE B

Read your Apple Notes with Claude Model Context Protocol

★ 1313 readstdio

BigQuery

lucashild/mcp-server-bigquery

✓SAFE B

A Model Context Protocol server that provides access to BigQuery

★ 1311 writestdio

Cli-Microsoft365

pnp/cli-microsoft365-mcp-server

✓SAFE B

Manage Microsoft 365 using MCP server

★ 1311 writestdio

SearxNG Connector

secretiveshell/mcp-searxng

✓SAFE B

MCP server for connecting agentic systems to search systems via searXNG

★ 1311 readstdio

x64dbg

bromoket/x64dbg_mcp

✓SAFE B

Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.

★ 1318 writestdio

Amap

sugarforever/amap-mcp-server

✓SAFE B

高德地图MCP Server,支持stdio, sse和streamable-http

★ 13016 readstreamable-http

PubMed

jackkuo666/pubmed-mcp-server

✓SAFE B

🔍 Enable AI assistants to search, access, and analyze PubMed articles through a simple MCP interface.

★ 1304 readstdio

Google News

chanmeng666/server-google-news

✓SAFE B

【Star-crossed coders unite!⭐️】Model Context Protocol (MCP) server implementation providing Google News search capabilities via SerpAPI, with automatic news categorization and multi-language support.

★ 1291 readstdio

Healthcare

cicatriiz/healthcare-mcp-public

✓SAFE B

A Model Context Protocol (MCP) server providing AI assistants with access to healthcare data and medical information tools, including FDA drug info, PubMed, medRxiv, NCBI Bookshelf, clinical trials, ICD-10, DICOM metadata, and a medical calculator.

★ 12911 readstdio

HubSpot

baryhuang/mcp-hubspot

✓SAFE B

A Model Context Protocol (MCP) server that enables AI assistants to interact with HubSpot CRM data, providing built-in vector storage and caching mechanisms help overcome HubSpot API limitations while improving response times.

★ 1296 writestdio

HubSpot

peakmojo/mcp-hubspot

✓SAFE B

A Model Context Protocol (MCP) server that enables AI assistants to interact with HubSpot CRM data, providing built-in vector storage and caching mechanisms help overcome HubSpot API limitations while improving response times.

★ 1296 writestdio

Z-Image Studio

iconben/z-image-studio

✓SAFE B

A Cli, a webUI, and a MCP server for the Z-Image-Turbo text-to-image generation model (Tongyi-MAI/Z-Image-Turbo base model as well as quantized models)

★ 1292 readsse

Augments

augmnt/augments-mcp-server

✓SAFE B

Comprehensive MCP server providing real-time framework documentation access for Claude Code with intelligent caching, multi-source integration, and context-aware assistance.

★ 1288 readstdio

Cinema 4D

ttiimmaacc/cinema4d-mcp

✓SAFE B

Cinema 4D plugin integrating Claude AI for prompt-driven 3D modeling, scene creation, and manipulation.

★ 12816 write

MultiCAD

ancode666/multicad-mcp

✓SAFE B

MCP server for use CAD software through AI assistants like Claude for Desktop or Cursor

★ 1271 readstdio

AWS Cost Explorer

aarora79/aws-cost-explorer-mcp-server

✓SAFE B

MCP server for understanding AWS spend

★ 1263 read

Skene

skenetechnologies/skene

✓SAFE B

Product-Led Growth (PLG) analysis toolkit that detects tech stacks, plans growth loops and builds the loop iteratively.

★ 1263 read

Think Tool

philliprt/think-mcp-server

✓SAFE B
★ 1261 read

Claude Code Enhanced

grahama1970/claude-code-mcp-enhanced

✓SAFE B

Enhanced Claude Code MCP server with orchestration capabilities, reliability improvements, and self-contained execution patterns

★ 1253 readstdio

OneNote

danosb/onenote-mcp

✓SAFE B

MCP server for Microsoft OneNote

★ 1253 writestdio

Reaper

dschuler36/reaper-mcp-server

✓SAFE B

An MCP Server for interacting with Reaper projects.

★ 1254 readstdio

Codemode

jx-codes/codemode-mcp

✓SAFE B

An implementation of the Codemode workflow detailed by Cloudflare.

★ 1242 readstdio

Codesys Toolkit

johannespettersson80/codesys-mcp-toolkit

✓SAFE B

Model Context Protocol server for CODESYS automation platform

★ 1246 writestdio

Fred

stefanoamorelli/fred-mcp-server

✓SAFE B

Open-source FRED MCP Server (Federal Reserve Economic Data)

★ 1243 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.