MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/21

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

481–504 of 3,145 · ranked by trust score, then stars

Legion Database

theralabs/legion-mcp

✓SAFE B

A server that helps people access and query data in databases using the Legion Query Runner with Model Context Protocol (MCP) in Python.

★ 942 write

Web3

strangelove-ventures/web3-mcp

✓SAFE B

1 MCP to rule all them chains

★ 949 writestdio

Flux UI

iannuttall/flux-ui-mcp

✓SAFE B
★ 934 readstdio

NASA Data Interface

programcomputer/nasa-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server for NASA APIs, providing a standardized interface for AI models to interact with NASA's vast array of data sources.

★ 933 writestdio

Octagon Deep Research

octagonai/octagon-deep-research-mcp

✓SAFE B

The Octagon Deep Research MCP server provides specialized AI-powered comprehensive research and analysis capabilities by integrating with advanced deep research agents. No rate limits, faster than ChatGPT Deep Research, more thorough than Grok DeepSearch or Perplexity Deep Research.

★ 931 readstdio

A11y

ronantakizawa/a11ymcp

✓SAFE B

MCP Server for Web Accessibility Testing (10k+ Downloads, #20 on ProductHunt)

★ 926 readstdio

Apple Music Control

kennethreitz/mcp-applemusic

✓SAFE B

An experimental MCP server for controlling Apple Music.

★ 912 write

Atom of Thoughts

dioptx/mcp-atom-of-thoughts

!CAUTION B

MCP server for structured AI reasoning — decompose problems into atomic thoughts with dependency graphs, confidence tracking, and interactive D3.js visualization

★ 912 readstdio

Gateway

boilingdata/mcp-server-and-gw

✓SAFE B

An MCP stdio to HTTP SSE transport gateway with example server and MCP client

★ 911 writesse

Library

lethain/library-mcp

✓SAFE B

MCP server for operating on Markdown knowledge bases

★ 912 writestdio

Ragie

ragieai/ragie-mcp-server

✓SAFE B

Ragie Model Context Protocol Server

★ 911 readstdio

Terminal

theailanguage/terminal_server

✓SAFE B

MCP server that can execute terminal commands

★ 912 writestdio

Chess.com

pab1it0/chess-mcp

✓SAFE B

A Model Context Protocol server for Chess.com's Published Data API. This provides access to Chess.com player data, game records, and other public information through standardized MCP interfaces, allowing AI assistants to search and analyze chess information.

★ 9010 readsse

Claude Soul

domdemetz/claude-soul

✓SAFE B

Self-correcting learning engine for Claude Code — persistent identity, behavioral pattern tracking, and cross-session memory

★ 903 writestdio

GitHub Chat

asyncfuncai/github-chat-mcp

!CAUTION B

A Model Context Protocol (MCP) for analyzing and querying GitHub repositories using the GitHub Chat API.

★ 901 read

Julia

aplavin/julia-mcp

✓SAFE B

MCP server for persistent Julia sessions — fast iteration without startup/compilation overhead

★ 902 writestdio

JVM

xzq-xu/jvm-mcp-server

!CAUTION B

This is an implementation project of a JVM-based MCP (Model Context Protocol) server. The project aims to provide a standardized MCP server implementation for the JVM platform, enabling AI models to better interact with the Java ecosystem.

★ 901 write

LinkedIn

felipfr/linkedin-mcpserver

✓SAFE B

A powerful Model Context Protocol server for LinkedIn API integration

★ 901 writestdio

Lucidity

hyperb1iss/lucidity-mcp

✓SAFE B

AI-powered code quality analysis using MCP to help AI assistants review code more effectively. Analyze git changes for complexity, security issues, and more through structured prompts.

★ 901 readstdio

ReAPI OpenAPI

reapi-com/mcp-openapi

✓SAFE B

OpenAPI specification MCP server.

★ 908 readstdio

RimSage

realloon/rimsage

✓SAFE B

An MCP server that enables searching and browsing of RimWorld source code.

★ 906 read

Augmented Nature ChEMBL

augmented-nature/augmented-nature-chembl-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server providing advanced access to the ChEMBL chemical database.

★ 8927 readstdio

ChEMBL

augmented-nature/chembl-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server providing advanced access to the ChEMBL chemical database.

★ 8927 readstdio

OPNsense

pixelworlds/opnsense-mcp-server

!CAUTION B

Modular MCP server for OPNsense firewall management - 88 tools providing access to 2000+ methods through AI assistants

★ 894 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.