MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/28

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

649–672 of 3,145 · ranked by trust score, then stars

Searchoor

0xdaef0f/job-searchoor

✓SAFE B

A simple MCP server that delivers you jobs based on your needs

★ 651 read

Svelte5

studentofjs/svelte5-mcp

✓SAFE B

A specialized Model Context Protocol (MCP) server for Svelte 5 frontend development

★ 651 writestdio

Youtube Data

icraft2170/youtube-data-mcp-server

✓SAFE B
★ 659 readstdio

Azure Cosmos DB

azurecosmosdb/azure-cosmos-mcp-server

✓SAFE B

This repository contains a collection of sample implementations of the MCP across multiple programming languages, all backed by Azure Cosmos DB. These examples demonstrate how to create, query, update, and delete documents using the Azure Cosmos DB SDKs

★ 642 writestdio

GraphRAG

rileylemm/graphrag_mcp

✓SAFE B

This is a MCP server I built to interact with my hybrid graph rag db.

★ 642 read

Memory

sdimitrov/mcp-memory

✓SAFE B

MCP Memory Server with PostgreSQL and pgvector for long-term memory capabilities

★ 641 write

OpenRouterai

heltonteixeira/openrouterai

✓SAFE B

MCP server for OpenRouter.ai integration

★ 644 readstdio

Supadata

supadata-ai/mcp

!CAUTION B

Official Supadata MCP Server - Adds powerful video & web scraping to Cursor, Claude and any other LLM clients.

★ 641 writestdio

WayStation

waystation-ai/mcp

✓SAFE B

The only MCP Server you need. Connect any MCP host with the tools you use daily through our no-code, secure integration hub.

★ 642 readsse

WeChat Official Account

xwang152-jack/wechat-official-account-mcp

✓SAFE B

微信公众号MCP服务器 - WeChat Official Account MCP Server

★ 644 writesse

Deprecated

VantaInc/vanta-mcp-server

✓SAFE B

DEPRECATED: This project is no longer maintained. Please use the Vanta hosted MCP server instead.

★ 632 writestdio

Amazon Fresh

alec2435/amazon-fresh-server

✓SAFE B

An amazon fresh mcp server

★ 631 writestdio

CSFD API

bartholomej/node-csfd-api

✓SAFE B

ČSFD API in JavaScript. Amazing NPM library for scrapping csfd.cz. Now with MCP server

★ 636 readstdio

Deep Research

mcherukara/claude-deep-research

✓SAFE B

An MCP (Model Context Protocol) server that enables comprehensive research capabilities for Claude

★ 631 read

Domain

rinadelph/domain-mcp

✓SAFE B

MCP server for domain research - WHOIS, DNS, SSL certs, expired domains. No API keys needed.

★ 638 readstdio

Finance Trading AI Agents

aitrados/finance-trading-ai-agents-mcp

✓SAFE B

A comprehensive, free MCP server designed specifically for financial analysis and quantitative trading. This specialized platform offers one-click local deployment with a sophisticated department-based architecture that mirrors real financial company operations.

★ 633 readstreamable-http

JSON Resume

jsonresume/mcp

✓SAFE B

The registry mcp server updates your resume while you code

★ 631 writesse

Labor Law

kentaroajisaka/labor-law-mcp

✓SAFE B

MCP server for Japanese labor & social insurance law — e-Gov API, MHLW 通達, JAISH 安衛通達

★ 636 readstdio

labor-law-mcp

kentaroajisaka/labor-law-mcp

✓SAFE B

MCP server for Japanese labor & social insurance law — e-Gov API, MHLW 通達, JAISH 安衛通達

★ 636 readstdio

Open CLAW Knowledge Distiller

destinyfrancis/openclaw-knowledge-distiller

✓SAFE B

Open CLAW Knowledge Distiller · 龍蝦知識蒸餾器 — Turn YouTube/Bilibili videos into structured knowledge articles. Local Qwen3-ASR MLX + AI summarization. MCP server for Claude Code / Open CLAW agents.

★ 633 readstdio

Quick MCP Example

alucek/quick-mcp-example

✓SAFE B

Short and sweet example MCP server / client implementation for Tools, Resources and Prompts.

★ 632 readstdio

Tripadvisor

pab1it0/tripadvisor-mcp

✓SAFE B

A Model Context Protocol (MCP) server for Tripadvisor Content API. This provides access to Tripadvisor location data, reviews, and photos through standardized MCP interfaces, allowing AI assistants to search for travel destinations and experiences.

★ 634 readstdio

UE5 Bridge

natfii/ue5-mcp-bridge

✓SAFE B

MCP server bridging AI assistants to Unreal Engine 5 editor

★ 633 writestdio

VSCode Internal Command

bestk/vscode-internal-command-mcp-server

✓SAFE B
★ 631 writestreamable-http

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.