MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/31

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

721–744 of 3,145 · ranked by trust score, then stars

Smart Connections

msdanyg/smart-connections-mcp

✓SAFE B

Give Claude semantic memory of your Obsidian vault — local semantic search over Smart Connections embeddings via MCP. Multi-vault, block-level, 100% private.

★ 586 readstdio

Tool Chainer

thirdstrandstudio/mcp-tool-chainer

✓SAFE B
★ 583 readstdio

TypeScript Template

nickytonline/mcp-typescript-template

!CAUTION B

TypeScript template for building MCP servers

★ 582 readstreamable-http

Xiaozhi

avxxoo/xiaozhi-mcp

✓SAFE B

小智MCP合集

★ 582 writestdio

Datawrapper

palewire/datawrapper-mcp

✓SAFE B

A Model Context Protocol (MCP) server and app for creating Datawrapper charts using AI assistants.

★ 571 writestdio

Flomo

chatmcp/mcp-server-flomo

✓SAFE B

Write notes to Flomo

★ 571 writestdio

Illustrator

spencerhhubert/illustrator-mcp-server

✓SAFE B

mcp server to run scripts on adobe illustrator

★ 571 writestdio

Korean Patent

chrisryugj/korean-patent-mcp

✓SAFE B

KIPRIS 특허·실용신안·상표·디자인 검색 MCP — 자유검색/항목검색/출원인/권리자/서지상세 7개 도구 | KIPRIS Korean patent·utility·trademark·design search → 7 MCP tools

★ 577 readstdio

Linux Do

pleasurecruise/linux-do-mcp

✓SAFE B

A MCP Server For LINUX DO community

★ 571 writestdio

Mermaid Validator

rtuin/mcp-mermaid-validator

✓SAFE B

A Model Context Protocol server that validates and renders Mermaid diagrams.

★ 571 readstdio

NotebookLM

alfredang/notebooklm-mcp

✓SAFE B

Bridge Google NotebookLM with Claude via MCP. Full programmatic access to create notebooks, manage sources, and generate AI-powered content — podcasts, videos, slides, mind maps, quizzes, flashcards, and reports — all through natural language.

★ 573 write

Security Audit

qianniuspace/mcp-security-audit

✓SAFE B

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

★ 571 readstdio

Srclight

srclight/srclight

✓SAFE B

Deep code indexing MCP server for AI agents. 25 tools: hybrid FTS5 + embedding search, call graphs, git blame/hotspots, build system analysis. Multi-repo workspaces, GPU-accelerated semantic search, 10 languages via tree-sitter. Fully local, zero cloud dependencies.

★ 573 writestdio

Vapi

vapiai/mcp-server

✓SAFE B

Vapi MCP Server

★ 575 writestdio

VNC Controller

hrrrsn/mcp-vnc

✓SAFE B

Remote desktop control for AI

★ 571 writestdio

Agent Reachout

vibe-with-me-tools/agent-reachout

✓SAFE B

Let Claude Code reach you on Telegram when it finishes work or needs decisions

★ 564 writestdio

AGY Bridge

sshahzaiib/agy-bridge

✓SAFE B

MCP bridge that lets Claude Code delegate heavy tasks to the Antigravity CLI (agy) — purpose-built tools, model routing with fallback, session continuity, and output truncation to save Claude's context and tokens.

★ 566 readstdio

AI Cursor Scraping Assistant

thewebscrapingclub/ai-cursor-scraping-assistant

✓SAFE B

A powerful tool that leverages Cursor AI and MCP (Model Context Protocol) to easily generate web scrapers for various types of websites.

★ 562 writestdio

Azure Pricing

msftnadavbh/azurepricingmcp

✓SAFE B

An MCP server for Microsoft Azure pricing that goes beyond the Azure Pricing Calculator, with programmatic cost estimates plus FinOps features like Spot price and savings analysis, and detection of orphaned or underutilized resources.

★ 5611 readstdio

Inkdrop

inkdropapp/mcp-server

✓SAFE B

Inkdrop Model Context Protocol Server

★ 568 writestdio

Markdown Downloader

dazeb/markdown-downloader

✓SAFE B

A MCP Server that will download any webpage as markdown in an instant. Download docs straight to your IDE for AI context. Powered by Jina.ai

★ 562 writestdio

Memory-Plus

yuchen20/memory-plus

✓SAFE B

🧠 Memory-Plus is a lightweight, local RAG memory store for MCP agents. Easily record, retrieve, update, delete, and visualize persistent "memories" across sessions—perfect for developers working with multiple AI coders (like Windsurf, Cursor, or Copilot) or anyone who wants their AI to actually reme

★ 561 write

Pyzotero

gyger/mcp-pyzotero

✓SAFE B

A Model Control Protocol (MCP) connector for integrating your local Zotero with Claude

★ 562 readstreamable-http

Roo Code Memory Bank

incomestreamsurfer/roo-code-memory-bank-mcp-server

✓SAFE B
★ 564 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.