MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/18

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

409–432 of 3,145 · ranked by trust score, then stars

Deepseek Thinking Claude

newideas99/deepseek-thinking-claude-3.5-sonnet-cline-mcp

✓SAFE B

🧠 MCP server implementing RAT (Retrieval Augmented Thinking) - combines DeepSeek's reasoning with GPT-4/Claude/Mistral responses, maintaining conversation context between interactions.

★ 1152 readstdio

Luma

jochenyang/luma-mcp

!CAUTION B

多模型视觉理解 MCP 服务器,为不支持图片理解的 AI 编码模型提供视觉能力:分析截图、报错、UI 与文档,可接入多家主流视觉大模型。Multi-model vision MCP server that adds image understanding to AI coding models without native vision — analyze screenshots, errors, UI and documents via major vision LLM providers.

★ 1151 readstdio

OpenAI GPT Image

surescaleai/openai-gpt-image-mcp

✓SAFE B

A Model Context Protocol (MCP) tool server for OpenAI's GPT-4o/gpt-image-1 image generation and editing APIs.

★ 1152 writestdio

Py-MCP-Naver

pfldy2850/py-mcp-naver

✓SAFE B

python MCP NAVER

★ 11514 read

Vectorize

vectorize-io/vectorize-mcp-server

✓SAFE B

Official Vectorize MCP Server

★ 1153 readstdio

Mcp

vuetifyjs/mcp

✓SAFE B

🤖 A Model Context Protocol (MCP) library for use with Agentic chat bots

★ 11413 writestdio

Medical

jamesanz/medical-mcp

✓SAFE B

An MCP server that provides comprehensive medical information by querying multiple authoritative medical APIs including FDA, WHO, PubMed, Google Scholar, and RxNorm

★ 11417 readstdio

medical-mcp

JamesANZ/medical-mcp

✓SAFE B

An MCP server that provides comprehensive medical information by querying multiple authoritative medical APIs including FDA, WHO, PubMed, Google Scholar, and RxNorm

★ 11417 readstdio

LangGraph AI

piyushagni5/langgraph-ai

!CAUTION B

A comprehensive collection of LangGraph implementations, tutorials, and advanced AI workflows covering Agentic RAG systems, MCP (Model Context Protocol) development, and practical AI application patterns.

★ 1134 writestdio

Meting Agent

eldment/meting-agent

✓SAFE B

🪐 面向 AI 的多音乐平台的 API 代理 • 网易云 • QQ音乐 • 酷狗 • 酷我 🎻 Multi-platform music API agent for AI • NetEase • QQ Music • KuGou • Kuwo

★ 1121 readstdio

Miro Whiteboard Connector

evalstate/mcp-miro

✓SAFE B
★ 1123 writestdio

Data Gov Il

davidosherproceed/data-gov-il-mcp

✓SAFE B

Advanced MCP server for seamless access to Israeli Government Open Data

★ 1101 writestdio

Data Gov IL

davidosherdiagnostica/data-gov-il-mcp

✓SAFE B

Advanced MCP server for seamless access to Israeli Government Open Data

★ 1101 writestdio

data-gov-il-mcp

davidosherdevdev/data-gov-il-mcp

✓SAFE B

Advanced MCP server for seamless access to Israeli Government Open Data

★ 1101 writestdio

EPLAN AI Automation Toolkit

covagashi/eplan-rag-mcp

✓SAFE B

EPLAN Electric P8 2026 2027 + AI: MCP servers, docs RAG, and a Claude Code skill for EPLAN scripting/API development. EEC PRO RAG

★ 1101 writestreamable-http

EPLAN Automation Tools

covagashi/eplan_2026_ia_mcp_scripts

✓SAFE B

EPLAN Electric P8 2026 2027 + AI: MCP servers, docs RAG, and a Claude Code skill for EPLAN scripting/API development. EEC PRO RAG

★ 1101 writestreamable-http

Korean DART

chrisryugj/korean-dart-mcp

✓SAFE B

OpenDART 전자공시MCP | 83개 API → 15 MCP 도구. 공시·재무·지분·XBRL + 버핏급 애널리스트 프레임(내부자 시그널·회계 리스크·퀄리티 체크리스트) + HWP/PDF 첨부 마크다운화 | 83 Korean DART disclosure APIs → 15 MCP tools with Buffett-grade analyst frames

★ 11018 readstdio

Screenshot

just-every/mcp-screenshot-website-fast

✓SAFE B

Quickly screenshots webpages and converts to an LLM friendly size

★ 1104 readstdio

Deep Code Reasoning

evalops/deep-code-reasoning-mcp

✓SAFE B

A Model Context Protocol (MCP) server that provides advanced code analysis and reasoning capabilities powered by Google's Gemini AI

★ 1092 writestdio

Deep Code Reasoning

haasonsaas/deep-code-reasoning-mcp

✓SAFE B

A Model Context Protocol (MCP) server that provides advanced code analysis and reasoning capabilities powered by Google's Gemini AI

★ 1092 writestdio

HTTP OAuth

napthaai/http-oauth-mcp-server

✓SAFE B

Remote MCP server (SEE + Streamable HTTP) implementing the MCP spec's authorization extension. Use directly from your agents, or from Cursor / Claude with mcp-remote

★ 1081 writesse

Square

square/square-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server for square

★ 1083 readstdio

Cve Search

roadwy/cve-search_mcp

✓SAFE B

A Model Context Protocol (MCP) server for querying the CVE-Search API

★ 1071 writesse

Think

rai220/think-mcp

✓SAFE B

MCP Server for reasoning

★ 1074 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.