MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/25

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

577–600 of 3,145 · ranked by trust score, then stars

Flutter

adamsmaka/flutter-mcp

✓SAFE B
★ 748 readsse

GDB

smadi0x86/gdb-mcp

✓SAFE B

Multi Debugger MCP server that enables LLMs to interact with GDB and LLDB for binary debugging and analysis.

★ 741 read

Omni

openadaptai/omnimcp

✓SAFE B

Labs: a perceive-plan-act computer-use experiment. Not the OpenAdapt product. The product is openadapt-flow: a compiled program that halts unless an independent check passes.

★ 747 read

Raindrop.io

hiromitsusasaki/raindrop-io-mcp-server

✓SAFE B

An integration that allows LLMs to interact with Raindrop.io bookmarks using the Model Context Protocol (MCP).

★ 741 writestdio

SearchAPI

rmmargt/searchapi-mcp

✓SAFE B

SearchAPI MCP for Google searches

★ 7415 read

Whatsapp

jlucaso1/whatsapp-mcp-ts

✓SAFE B

WhatsApp MCP Server (TypeScript/Baileys)

★ 741 writestdio

Boilerplate

aashari/boilerplate-mcp-server

✓SAFE B

TypeScript Model Context Protocol (MCP) server boilerplate providing IP lookup tools/resources. Includes CLI support and extensible structure for connecting AI systems (LLMs) to external data sources like ip-api.com. Ideal template for creating new MCP integrations via Node.js.

★ 732 readstdio

JazzCash

tehreemarbab/jazzcashmcp

✓SAFE B

Open-source Model Context Protocol (MCP) server for JazzCash — Pakistan's largest mobile-money platform. Hosted Checkout, Mobile Wallet charges, inquiries, and refunds for AI agents.

★ 731 writestdio

kospi-kosdaq-stock-server

dragon1086/kospi-kosdaq-stock-server

✓SAFE B

An MCP server that provides KOSPI/KOSDAQ stock data using FastMCP

★ 737 read

Lighthouse MCP Server

danielsogl/lighthouse-mcp-server

✓SAFE B

MCP server that enables AI agents to perform comprehensive web audits using Google Lighthouse with 13+ tools for performance, accessibility, SEO, and security analysis.

★ 721 writestdio

Appwrite

appwrite/mcp-for-api

✓SAFE B

Appwrite’s MCP server. Operating your backend has never been easier.

★ 721 writestdio

Appwrite

appwrite/mcp

✓SAFE B

Appwrite’s MCP server. Operating your backend has never been easier.

★ 721 writestdio

Gdrive

felores/gdrive-mcp-server

✓SAFE B

Efficient implementation of the Google Drive MCP server

★ 722 readstdio

Gmail

jasonsum/gmail-mcp-server

!CAUTION B

Model Context Protocol (MCP) server for Gmail

★ 721 writestdio

Hugging Face

shreyaskarnik/huggingface-mcp-server

✓SAFE B
★ 7210 readstdio

Kb

geeksfino/kb-mcp-server

✓SAFE B

Build a knowledge base into a tar.gz and give it to this MCP server, and it is ready to serve.

★ 722 writestdio

MySQL

dpflucas/mysql-mcp-server

!CAUTION B

An MCP server provides read-only access to MySQL databases.

★ 721 writestdio

Quran API

djalal/quran-mcp-server

✓SAFE B

Quran.com API integration for verse search, translation and tafsir

★ 723 readstdio

Rijksmuseum

r-huijts/rijksmuseum-mcp

✓SAFE B

Rijksmuseum MCP integration for artwork exploration and analysis

★ 721 writestdio

Simple Voicevox

t09tanaka/mcp-simple-voicevox

✓SAFE B
★ 721 readstdio

Sketch Context

jshmllr/sketch-context-mcp

✓SAFE B

MCP server to provide Sketch layout information to AI coding agents like Cursor

★ 722 write

Tavily

ramxx/mcp-tavily

✓SAFE B

An MCP server for Tavily's search API

★ 723 readstdio

Tavily Load Balancer

yatotm/tavily-mcp-loadbalancer

!CAUTION B

Load-balanced Tavily MCP server with API key pool management

★ 723 readstdio

Time

yokingma/time-mcp

✓SAFE B

⏰ Time MCP Server: Giving LLMs Time Awareness Capabilities

★ 726 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.