MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/17

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

385–408 of 3,145 · ranked by trust score, then stars

SuperProductivity

organicmoron/sp-mcp

✓SAFE B

An MCP server and Plugin for the SuperProductivity app!

★ 1244 writestdio

Zendesk

reminia/zendesk-mcp-server

✓SAFE B

A Model Context Protocol server for Zendesk

★ 1243 writestdio

Ai Image Gen

mikeyny/ai-image-gen-mcp

✓SAFE B
★ 1231 readstdio

Svelte Docs

spences10/mcp-svelte-docs

✓SAFE B

🔍 MCP server that lets you search and access Svelte documentation with built-in caching

★ 1231 read

Frida

zhizhuodemao/frida-mcp

✓SAFE B

一个用于frida动态调试的mcp工具,支持自定义frida路径和名称端口,自动管理frida

★ 1222 write

GIMP AI Integration

libreearth/gimp-mcp

✓SAFE B

Gimp MCP Server

★ 1221 write

PubMed

grll/pubmedmcp

✓SAFE B

A MCP server for PubMed data

★ 1221 read

Stitch

kargatharaakash/stitch-mcp

✓SAFE B

Universal MCP Server for Google Stitch. Connect AI agents to your UI designs.

★ 1212 readstdio

FFmpeg

egoist/ffmpeg-mcp

✓SAFE B

An MCP server for FFmpeg

★ 1202 readstdio

Houtini LM

houtini-ai/houtini-lm

✓SAFE B

MCP server that saves Claude Code tokens by delegating bounded tasks to local or cloud LLMs. Works with LM Studio, Ollama, vLLM, DeepSeek, Groq, Cerebras.

★ 1202 writestdio

Scrapling Fetch

cyberchitta/scrapling-fetch-mcp

✓SAFE B

Helps AI assistants access text content from bot-protected websites. MCP server that fetches HTML/markdown from sites with anti-automation measures using Scrapling.

★ 1202 readstdio

Terraform Registry

thrashr888/terraform-mcp-server

✓SAFE B

Terraform Registry MCP Server

★ 12031 readstdio

Yapi

lzsheng/yapi-mcp

✓SAFE B

yapi mcp server

★ 1201 writesse

Codex Bridge

elyin/codex-bridge

✓SAFE B

A lightweight MCP server bridging AI agents to OpenAI models via official CLI

★ 1183 read

JavaSinkTracer

zacarx/javasinktracer_mcp

✓SAFE B

基于函数级污点分析的 Java 源代码漏洞审计工具JavaSinkTracer,通过 Model Context Protocol (MCP) 为 AI 助手提供安全分析能力。

★ 1186 readstdio

Mureka

skyworkai/mureka-mcp

✓SAFE B

generate lyrics, song and background music(instrumental). Model Context Protocol (MCP) server.

★ 1181 read

deepl-mcp-server

DeepL/deepl-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that provides translation capabilities using the DeepL API.

★ 11713 readstdio

Posecode

posecode-dev/posecode

!CAUTION B

An open-source text language, parser, validator and Three.js renderer for inspectable 3D human movement.

★ 1173 readstdio

WordPress

emzimmer/server-wp-mcp

✓SAFE B
★ 1171 readstdio

Academic Search

afrise/academic-search-mcp-server

✓SAFE B

Academic Paper Search MCP Server for Claude Desktop integration. Allows Claude to access data from Semantic Scholar and Crossref.

★ 1163 readstdio

DeepL

deeplcom/deepl-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that provides translation capabilities using the DeepL API.

★ 11613 readstdio

Oura

yuzehao2023/mcp-oura

✓SAFE B

MCP server for Oura API integration

★ 1166 readstdio

Xueqiu

liqiongyu/xueqiu_mcp

✓SAFE B
★ 11645 read

Cli

mcpgod/cli

✓SAFE B

Fine-grained control over model context protocol (MCP) clients, servers, and tools. Context is God.

★ 1151 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.