MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/19

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

433–456 of 3,145 · ranked by trust score, then stars

Abaqus GUI Scripting

jianzhichun/abaqus-mcp-server

✓SAFE B

An MCP (Model Context Protocol) server designed to interact with an already running Abaqus/CAE Graphical User Interface (GUI). It allows for the execution of Python scripts within the Abaqus environment and retrieval of messages from the Abaqus message log/area, all through MCP tools.

★ 1061 write

Awsome Kali

ccq1/awsome_kali_mcpservers

✓SAFE B

awsome kali MCPServers is a set of MCP servers tailored for Kali Linux

★ 10627 readstdio

Replicate Flux

awkoy/replicate-flux-mcp

✓SAFE B

MCP for Replicate Flux Model - A powerful tool for generating customized images and SVG assets that match specific coding vibes and aesthetic styles. Streamline your visual asset creation process with AI-powered design generation tailored for developers.

★ 1063 writestdio

Splunk Integration

livehybrid/splunk-mcp

✓SAFE B

[ARCHIVED] Community Splunk MCP server — use the official Splunk MCP Server on Splunkbase (app 7931)

★ 10612 read

Workspace Automation Suite

tanaikech/toolsformcpserver

✓SAFE B

The Gemini CLI confirmed that the MCP server built with Google Apps Script (GAS), a low-code platform, offers immense possibilities. If you've created snippets for GAS, these could be revitalized and/or leveraged in new ways by using them as the MCP server. The Gemini CLI and other MCP clients will

★ 1066 read

Redash MCP Server

suthio/redash-mcp

✓SAFE B
★ 1055 readstreamable-http

FL Studio

veenastudio/flstudio-mcp

✓SAFE B
★ 1054 writestdio

Redash

suthio/redash-mcp

✓SAFE B
★ 1055 readstreamable-http

Alpha Vantage

berlinbra/alpha-vantage-mcp

✓SAFE B

MCP Server for Alpha Advantage API

★ 10412 readstdio

Stock SDK

chengzuopeng/stock-sdk-mcp

✓SAFE B

股票行情 MCP + Skills 完整解决方案,支持 OpenClaw、Cursor、Claude Desktop、Antigravity、Gemini/Codex CLI 等主流 AI 工具。

★ 1041 writestdio

Systemprompt

systempromptio/systemprompt-mcp-server

!CAUTION B

[DEPRECATED] Superseded by systempromptio/systemprompt-template and systempromptio/systemprompt-core. Reference MCP server implementation (OAuth 2.1, tools, prompts, resources, sampling, notifications).

★ 1041 writestreamable-http

Train in Silence

hlpun/train-in-silence

✓SAFE B

The first Task-Aware MCP server and automated VRAM calculator for LLM fine-tuning. Instantly snipe the cheapest, fastest GPUs across 10+ cloud providers.

★ 1046 readstreamable-http

Agentic AI Demos

aws-samples/sample-agentic-ai-demos

✓SAFE B

Collection of examples of how to use Model Context Protocol with AWS.

★ 1031 writesse

Canvas

dmontgomery40/mcp-canvas-lms

✓SAFE B

Version 2.2 - 54 tools available - an MCP server for interacting with the Canvas LMS API. This server allows you to manage courses, assignments, enrollments, and grades within Canvas.

★ 10313 writestdio

Jadx

mobilehackinglab/jadx-mcp-plugin

✓SAFE B
★ 10313 readstdio

Needle

needle-ai/needle-mcp

✓SAFE B

Needle MCP Server for easy RAG.Long-term memory for LLMs.

★ 1032 writestdio

Rest API Tester

dkmaker/mcp-rest-api

!CAUTION B

A TypeScript-based MCP server that enables testing of REST APIs through Cline. This tool allows you to test and interact with any REST API endpoints directly from your development environment.

★ 1031 readstdio

Sample Model Context Protocol Demos

aws-samples/sample-model-context-protocol-demos

✓SAFE B

Collection of examples of how to use Model Context Protocol with AWS.

★ 1031 writesse

WeCom Bot

loonghao/wecom-bot-mcp-server

✓SAFE B

A Python server implementation for WeCom (WeChat Work) bot that follows the Model Context Protocol (MCP). This server provides a standardized interface for handling automated messaging and context-aware interactions within enterprise WeChat environments.

★ 1031 read

SSH Agent

aiondadotcom/mcp-ssh

✓SAFE B

A Model Context Protocol (MCP) server for managing and controlling SSH connections.

★ 1027 readstdio

Octopus Deploy Official MCP Server

OctopusDeploy/mcp-server

✓SAFE B

Octopus Deploy Official MCP Server

★ 1015 writestdio

Android Source Explorer

mrmike/android-source-explorer-mcp

✓SAFE B

MCP server for exploring AOSP internals and Jetpack libraries

★ 10111 read

Dicom

christianhinge/dicom-mcp

✓SAFE B

Model Context Protocol (MCP) for interacting with dicom servers (PACS etc.)

★ 1012 write

Gemini API Docs

philschmid/gemini-api-docs-mcp

✓SAFE B
★ 1011 readstreamable-http

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.