MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/24

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

553–576 of 3,145 · ranked by trust score, then stars

App Store Scraper

appreply-co/mcp-appstore

!CAUTION B

This is an MCP server that provides tools to LLMs for searching and analyzing apps from both Google Play Store and Apple App Store – perfect for ASO.

★ 7711 readstdio

Bitcoin Lightning Network

abdelstark/bitcoin-mcp

✓SAFE B

Bitcoin & Lightning Network MCP Server.

★ 771 writesse

ExternalAttacker

mordavid/externalattacker-mcp

✓SAFE B

A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

★ 778 readstdio

Figma To React

studentofjs/mcp-figma-to-react

✓SAFE B

MCP server for converting Figma designs to React components

★ 778 readsse

LLMS.txt Explorer

thedaviddias/mcp-llms-txt-explorer

✓SAFE B

MCP to explore websites with llms.txt files

★ 772 readstdio

Memory Bank

ipospelov/mcp-memory-bank

✓SAFE B

MCP server that helps build Memory Bank - structured documentation system for context preservation

★ 773 readstdio

Openai Integration

mzxrai/mcp-openai

✓SAFE B

Chat with OpenAI models from Claude Desktop

★ 771 readstdio

Tiktok

yap-audio/tiktok-mcp

✓SAFE B

A Model Context Protocol service for TikTok video discovery and metadata extraction.

★ 772 read

Clueo

clueofoundation/clueomcp

✓SAFE B

🎭 The Personality Layer for LLMs- Transform any MCP-compatible AI with rich, consistent personalities powered by Clueo's Big Five personality engine.

★ 761 writestdio

Hacker News

erithwik/mcp-hn

✓SAFE B

MCP Server for Hackernews

★ 764 readstdio

Pdf Tools

hanweg/mcp-pdf-tools

✓SAFE B

MCP server for working with PDF files

★ 762 writestdio

Template

mcpdotdirect/template-mcp-server

✓SAFE B

Template to quickly set up your own MCP server

★ 765 read

TMDB Server

laksh-star/mcp-server-tmdb

✓SAFE B

MCP Server with TMDB

★ 761 writestdio

WordPress DevDocs

pluginslab/wp-devdocs-mcp

✓SAFE B
★ 761 writestdio

Wwise

bilkentaudio/wwise-mcp

!CAUTION B

Wwise-MCP is a Model Context Protocol (MCP) server that enables large language models (LLMs) to interact with the Wwise Authoring application. It exposes a set of tools built on a custom Python WAAPI library, allowing MCP clients such as Claude or Cursor to automate and compose complex, multi-step W

★ 761 writestdio

BitDive

bitdive/mcp-server

✓SAFE B

BitDive Model Context Protocol (MCP) server. The Autonomous Quality Loop for AI agents. Provides real runtime context, before/after trace comparison, and integration testing workflows.

★ 751 readstdio

JMeter

qainsights/jmeter-mcp-server

✓SAFE B

✨ JMeter Meets AI Workflows: Introducing the JMeter MCP Server! 🤯

★ 756 writestdio

Korean Law

seonaru/korean-law-mcp

✓SAFE B

korean-law-mcp

★ 756 read

Node Boilerplate

lucianoayres/mcp-server-node

✓SAFE B

MCP Server implemented in JavaScript using Node.js that demonstrates how to build an MCP server with a custom prompt and custom tools, including one that loads an environment variable from a configuration file, to integrate seamlessly with AI-assisted environments like Cursor IDE.

★ 751 writestdio

Ntfy-Me

gitmotion/ntfy-me-mcp

!CAUTION B

An ntfy MCP server for sending/fetching ntfy notifications to self-hosted or ANY ntfy.sh server from AI Agents 📤 (supports secure token auth & more - use with npx or docker!)

★ 752 readstdio

Strapi

misterboe/strapi-mcp-server

✓SAFE B
★ 752 writestdio

Wolfram Alpha

secretiveshell/mcp-wolfram-alpha

✓SAFE B

Connect your chat repl to wolfram alpha computational intelligence

★ 751 readstdio

BPFtrace

eunomia-bpf/mcptrace

✓SAFE B

MCP server: using eBPF to tracing your kernel

★ 741 writestdio

CryptoPanic

kukapay/cryptopanic-mcp-server

✓SAFE B

Provide latest cryptocurrency news to AI agents.

★ 741 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.