MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/23
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
529–552 of 3,145 · ranked by trust score, then stars
IMessage Query
hannesrudolph/imessage-query-fastmcp-mcp-server
An MCP server that provides safe access to your iMessage database through Model Context Protocol (MCP). This server is built with the FastMCP framework and the imessagedb library, enabling LLMs to query and analyze iMessage conversations with proper phone number validation and attachment handling.
Server Template
interactionco/mcp-server-template
Shanghai Disney
syyuan14/sh-disney-mcp
sh-disney-mcp 是一个基于 Model Context Protocol (MCP) 的mcp server,旨在通过标准化的接口,帮助大模型快速获取上海迪士尼乐园的门票价格和售卖状态信息
Bing Search
leehanchung/bing-search-mcp
MCP Server for Bing Search API
Browser Use
vinayak-mehta/mcp-browser-use
MCP server for browser-use
ChatGPT
xncbf/chatgpt-mcp
MCP server enabling interaction between macOS ChatGPT desktop app and MCP-compatible AI assistants.
Context
dodopayments/context-mcp
Self-hosted MCP server for your documentation
shy2593666979/mcp-server-email
一个基于 MCP (Model Context Protocol) 的邮件服务,支持 LLM 发送带附件的电子邮件及在指定目录中搜索文件。提供安全的 SMTP 传输、多收件人支持和附件模式匹配搜索功能,适用于 Gmail、Outlook、Yahoo、QQ 邮箱和网易 126 邮箱等主流邮箱服务。
Fantasy Premier League
rishijatia/fantasy-pl-mcp
Fantasy Premier League MCP Server
Google Cloud
krzko/google-cloud-mcp
🤖 A Model Context Protocol (MCP) server for Google Cloud (GCP)
GPT-5
allaboutai-yt/gpt5mcp
GPT-5 Local MCP
Wan 3.0
anil-matcha/wan-3.0-api
Wan 3.0 API Python SDK and MCP server for AI video generation: text-to-video, image-to-video, multimodal references, uploads, and async job polling.
codemirror-mcp
marimo-team/codemirror-mcp
CodeMirror extension to hook up a Model Context Provider (MCP)
Azure DevOps Assistant
vortiago/mcp-azure-devops
A Model Context Protocol (MCP) server enabling AI assistants to interact with Azure DevOps services via Python SDK.
Bankless Onchain
bankless/onchain-mcp
Bringing the bankless onchain API to MCP
Chotu Robo
vishalmysore/choturobo
Integrate Arduino-based robotics (using the NodeMCU ESP32 or Arduino Nano 368 board) with AI using the MCP (Model Context Protocol) framework from Claude Anthropic
LLM Access
sammcj/mcp-llm
An MCP server that provides LLMs access to other LLMs
i-can-hack/pdf-mcp
PDF MCP server with image rendering capabilities. Useful for automatically searching datasheets, manuals, etc...
Tinybird
tinybirdco/mcp-tinybird
AgentAnycast
agentanycast/agentanycast
Connect AI agents across any network — zero config, encrypted, skill-based routing
AI Software Architect
codenamev/ai-software-architect
AI-powered architecture documentation framework with ADRs, reviews, and pragmatic mode. Now available as Claude Code Plugin for easiest installation.
Figma Context Cached
pactortester/figma-context-mcp-cached
Cache‐enabled Figma Context MCP with persistent disk caching to reduce API rate limits and improve performance.
Search
fengin/search-server
一个基于MCP协议的搜索服务实现,提供网络搜索和本地搜索功能,Cursor和Claude Desktop能与之无缝集成。
MCP Toolbox SDKs for JS
googleapis/mcp-toolbox-sdk-js
Javascript SDK for interacting with the MCP Toolbox for Databases.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?