MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/26

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

601–624 of 3,145 · ranked by trust score, then stars

Brainstorm

spranab/brainstorm-mcp

✓SAFE B

A single model's confident answer can still be wrong, so brainstorm-mcp runs multi-round debates between GPT, Gemini, DeepSeek, Claude, and local Ollama models and returns a structured synthesis, as an MCP server that needs no API keys in hosted mode.

★ 714 writestdio

Lighthouse

danielsogl/lighthouse-mcp-server

✓SAFE B

MCP server that enables AI agents to perform comprehensive web audits using Google Lighthouse with 13+ tools for performance, accessibility, SEO, and security analysis.

★ 711 writestdio

Newsnow

sligter/mcp_newsnow

✓SAFE B

一个基于 Model Context Protocol (MCP) 的新闻聚合服务器,通过 Newsnow API 提供多平台热点新闻和趋势话题。

★ 714 readstdio

Nutrient DWS

pspdfkit/nutrient-dws-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server implementation that integrates with the Nutrient Document Web Service (DWS) Processor API, providing powerful PDF processing capabilities for AI assistants.

★ 711 writestdio

OpenMemory

baryhuang/mcp-openmemory

✓SAFE B

Simple standalone MCP server giving Claude the ability to remember your conversations and learn from them over time.

★ 713 readstdio

Pinecone Developer

pinecone-io/pinecone-mcp

✓SAFE B

Connect your Pinecone projects to Cursor, Claude, and other AI assistants

★ 711 readstdio

Xiaozhi AutoGLM

xinnan-tech/xiaozhi-autoglm-mcp

✓SAFE B

小智基于智谱Phone Agent复刻豆包手机

★ 711 writestdio

Yokatlas

saidsurucu/yokatlas-mcp

✓SAFE B

MCP Server for YOK Atlas

★ 713 read

YouTube Connector

shellydeng08/youtube-connector-mcp

✓SAFE B

MCP server for YouTube — search videos, channels, playlists, and transcripts. Works with Claude, Cursor, Windsurf, and any MCP client.

★ 717 readstdio

Deep Research

ssdeanx/deep-research-mcp-server

✓SAFE B

MCP Deep Research Server using Gemini creating a Research AI Agent

★ 701 writestdio

Hana

hatrigt/hana-mcp-server

✓SAFE B

SAP HANA MCP server — Enterprise Model Context Protocol server for SAP HANA. Use with Claude Code, VS Code. npm: hana-mcp-server

★ 703 write

HexDocs

bradleygolden/hexdocs-mcp

✓SAFE B

Semantic search for Hex documentation, right in your editor ✨

★ 705 readstdio

Logseq Tools

joelhooks/logseq-mcp-tools

!CAUTION B

mcp server for logseq graph

★ 7016 readstdio

Shannon Thinking

olaservo/shannon-thinking

✓SAFE B

MCP server for applying a Claude Shannon-inspired problem-solving pattern

★ 701 readstdio

Web Search

uk0/web-search-fast

!CAUTION B

一个简单的本地 web search mcp ,可以集群规模化进行对外提供服务。

★ 701 readstdio

AI Diagram & Prototype Generator

simonutd/ai-diagram-prototype-generator-mcp-server-

!CAUTION B

AI Diagram & Prototype File Generator (MCP Server)

★ 693 readstdio

Claude Memory

whenmoon-afk/claude-memory-mcp

✓SAFE B

Local citation-backed recall for Pi, OMP, Claude Code, Codex, and ChatGPT history.

★ 693 readstdio

Codex Specialized Subagents

leonardsellem/codex-specialized-subagents

✓SAFE B

MCP server that lets Codex delegate to isolated codex exec sub-agents, selecting repo+global skills automatically

★ 691 writestdio

Datadog

geli2001/datadog-mcp-server

✓SAFE B

MCP server interacts with the official Datadog API

★ 6910 readstdio

datadog-mcp-server

GeLi2001/datadog-mcp-server

✓SAFE B

MCP server interacts with the official Datadog API

★ 6910 readstdio

Deepseek Thinker

ruixingshi/deepseek-thinker-mcp

✓SAFE B

A MCP provider Deepseek reasoning content to MCP-enabled AI Clients, like Claude Desktop. Supports access to Deepseek's CoT from the Deepseek API service or a local Ollama server.

★ 691 readstdio

Design System

freema/mcp-design-system-extractor

!CAUTION B

MCP (Model Context Protocol) server that enables AI assistants to interact with Storybook design systems. Extract component HTML, analyze styles, and help with design system adoption and refactoring.

★ 698 readstdio

Google Search

adenot/mcp-google-search

✓SAFE B
★ 692 readstdio

Linked API

linked-api/linkedapi-mcp

✓SAFE B

MCP server that lets AI assistants control LinkedIn accounts and retrieve real-time data.

★ 695 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.