MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/3
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
49–72 of 3,145 · ranked by trust score, then stars
Deepwiki
regenrek/deepwiki-mcp
📖 MCP server for fetch deepwiki.com and get latest knowledge in Cursor and other Code Editors
mcp-deepwiki
regenrek/deepwiki-mcp
📖 MCP server for fetch deepwiki.com and get latest knowledge in Cursor and other Code Editors
sourcey
sourcey/sourcey
Precision documentation from OpenAPI, MCP, Doxygen, and Markdown guides. Static HTML you own.
Claude Code
steipete/claude-code-mcp
Claude Code as one-shot MCP server to have an agent in your agent.
Quickstart Resources
modelcontextprotocol/quickstart-resources
A repository of servers and clients from the Model Context Protocol tutorials
Ref Tools
ref-tools/ref-tools-mcp
Helping coding agents never make mistakes working with public or private libraries without wasting the context window.
RedNote
ifuryst/rednote-mcp
🚀MCP server for accessing RedNote(XiaoHongShu, xhs).
Fetcher
jae-jae/fetcher-mcp
MCP server for fetch web page content using Playwright headless browser.
Lightswind UI
codewithmuhilan/lightswind-ui-library
The AI-native CLI-first React component library. 160+ animated, accessible, production-ready components with MCP Server support for Cursor, Claude & GitHub Copilot. Copy-paste architecture — you own the code.
Agentic Radar
splx-ai/agentic-radar
A security scanner for your LLM agentic workflows
Minima
dmayboroda/minima
On-premises conversational RAG with configurable containers
Mcpdoc
langchain-ai/mcpdoc
Expose llms-txt to IDEs for development
Chatsum
chatmcp/mcp-server-chatsum
Query and Summarize your chat messages.
Alpaca
alpacahq/alpaca-mcp-server
Alpaca’s official MCP Server lets you trade stocks, ETFs, crypto, and options, run data analysis, and build strategies in plain English directly from your favorite LLM tools and IDEs
Memory Bank
alioshr/memory-bank-mcp
A Model Context Protocol (MCP) server implementation for remote memory bank management, inspired by Cline Memory Bank.
Nuxt
antfu/nuxt-mcp
MCP server helping models to understand your Vite/Nuxt app better.
Nuxt Dev
antfu/nuxt-mcp-dev
MCP server helping models to understand your Vite/Nuxt app better.
Openapi
janwilmake/openapi-mcp-server
Allow AI to wade through complex OpenAPIs using Simple Language
CodeRunner
instavm/coderunner
A local sandbox for your AI agents
WebMCP
jasonjmcghee/webmcp
Early WebMCP proposal / implementation - since evolved and worked on by much more capable folks that develop the web: https://github.com/webmachinelearning/webmcp
Browser Use
co-browser/browser-use-mcp-server
Browse the web, directly from Cursor etc.
Mcp-Nixos
utensils/mcp-nixos
MCP-NixOS - Model Context Protocol Server for NixOS resources
Reddit Buddy
karanb192/reddit-mcp-buddy
Clean, LLM-optimized Reddit MCP server. Browse posts, search content, analyze users. No fluff, just Reddit data.
Vibetest Use
browser-use/vibetest-use
Vibetest MCP - automated QA testing using Browser-Use agents
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?