MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/20

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

457–480 of 3,145 · ranked by trust score, then stars

Memory Bank

tuncer-byte/memory-bank-mcp

✓SAFE B

Memory Bank is an MCP server that helps teams create, manage, and access structured project documentation. It generates and maintains a set of interconnected Markdown documents that capture different aspects of project knowledge, from high-level goals to technical details and day-to-day progress.

★ 1012 writestdio

Octopus Deploy

octopusdeploy/mcp-server

✓SAFE B

Octopus Deploy Official MCP Server

★ 1015 writestdio

Server Box

box-community/mcp-server-box

✓SAFE B

Securely connect AI agents to your enterprise content in Box

★ 1011 readstreamable-http

Minecraft Integration

arjunkmrm/mcp-minecraft

✓SAFE B
★ 1005 writestdio

Tmux Bridge

howardpen9/tmux-bridge-mcp

✓SAFE B

Standalone MCP server for cross-pane AI agent communication via tmux. Lets Claude Code, Gemini CLI, Codex, and Kimi CLI talk to each other through tmux panes.

★ 1002 writestdio

bibverify

Hylouis233/bibverify

✓SAFE B

Cross-platform BibTeX verification for researchers and AI assistants — CLI, Python API, MCP server, and explainable multi-source matching.

★ 992 writestdio

Databricks Agent Tools

databrickslabs/mcp

✓SAFE B
★ 994 writestdio

Agents

amtiYo/agents

✓SAFE B

One .agents source of truth to sync MCP servers, skills, and instructions across Codex, Claude Code, Gemini CLI, Cursor, Copilot, and Antigravity.

★ 982 readstreamable-http

Shortcut

useshortcut/mcp-server-shortcut

✓SAFE B

The MCP server for Shortcut

★ 984 readstdio

Sub-Agents

shinpr/sub-agents-mcp

✓SAFE B

Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.

★ 983 readstdio

sub-agents-mcp

shinpr/sub-agents-mcp

✓SAFE B

Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.

★ 983 readstdio

ComIDP

compdfkit/comidp-mcp-server

✓SAFE B

A lightweight MCP (Model Context Protocol) server for integrating ComPDF AI with Claude Desktop, enabling AI-powered intelligent document processing and data extraction from PDFs via natural language.

★ 974 writestreamable-http

ComPDF

compdfkit/compdf-mcp

✓SAFE B

A lightweight MCP (Model Context Protocol) server for integrating ComPDF AI with Claude Desktop, enabling AI-powered intelligent document processing and data extraction from PDFs via natural language.

★ 974 writestreamable-http

Japanese Tax Law

kentaroajisaka/tax-law-mcp

✓SAFE B

MCP server for Japanese tax law — e-Gov API & NTA 通達 (administrative circulars)

★ 977 readstdio

Molecule

chatmol/molecule-mcp

✓SAFE B

A model-context-protocol server for molecules.

★ 9714 write

Perplexity

wysh3/perplexity-mcp-zerver

✓SAFE B

MCP web search using perplexity without any API KEYS

★ 976 readstdio

Weather Server

microsoft/lets-learn-mcp-javascript

✓SAFE B
★ 971 readstdio

@shortcut/mcp

useshortcut/mcp-server-shortcut

✓SAFE B

The MCP server for Shortcut

★ 964 readstdio

Gemini Bridge

elyin/gemini-bridge

✓SAFE B

A lightweight MCP server bridging AI agents to Google's Gemini AI via official CLI

★ 962 write

Unreal API

codeturion/unreal-api-mcp

✓SAFE B

Instant, accurate Unreal Engine API lookups instead of expensive source file reads, saving your agent tokens, context, and hallucinations.

★ 965 readstdio

Ccxt

lazy-dinosaur/ccxt-mcp

✓SAFE B

CCXT MCP Server bridges the gap between AI models and cryptocurrency trading by providing a standardized interface through the Model Context Protocol. Created to empower automated trading strategies, this tool allows AI assistants like Claude and GPT to directly interact with over 100 cryptocurrency

★ 954 writesse

Open Library

8ensmith/mcp-open-library

✓SAFE B

A Model Context Protocol (MCP) server for the Internet Archive's Open Library API that enables AI assistants to search for book and author information.

★ 957 readstdio

Excel

yzfly/mcp-excel-server

✓SAFE B

The Excel MCP Server is a powerful tool that enables natural language interaction with Excel files through the Model Context Protocol (MCP). It provides a comprehensive set of capabilities for reading, analyzing, visualizing, and writing Excel data.

★ 942 write

GitLab MR

kopfrechner/gitlab-mr-mcp

✓SAFE B

Interact seamlessly with GitLab repositories to manage merge requests and issues. Fetch details, add comments, and streamline your code review process with ease.

★ 948 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.