MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/32
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
745–768 of 3,145 · ranked by trust score, then stars
Whale Tracker
kukapay/whale-tracker-mcp
A mcp server for tracking cryptocurrency whale transactions.
Adb
srmorete/adb-mcp
An MCP (Model Context Protocol) server for interacting with Android devices through ADB in TypeScript.
Aws Bedrock Integration
davidshtian/mcp-on-aws-bedrock
A simple and clear example for implementation and understanding Anthropic MCP (on AWS Bedrock).
Azure AI Agents
farzad528/mcp-server-azure-ai-agents
Model Context Protocol Servers for Azure AI Search
Headless Gmail
baryhuang/mcp-headless-gmail
A MCP (Model Context Protocol) server that provides get, send Gmails without local credential or token setup.
Mcp-Flowise
matthewhand/mcp-flowise
Note Post
go-555/note-post-mcp
OpenAlex Research
oksure/openalex-research-mcp
MCP server for the OpenAlex API — search 240M+ scholarly works, analyze citations, track research trends, and map collaboration networks
Powerpoint
ichigo3766/powerpoint-mcp
A MCP server project that creates PowerPoint presentations, forked from supercurses/powerpoint with additional features
RunAPI
runapi-ai/mcp
RunAPI MCP server for model discovery, pricing lookup, media task creation, and balance checks.
SearXNG Scraper
pwilkin/mcp-searxng-public
An MCP server that queries public SearXNG instances, parsing HTML contents into a JSON result
Thoughtful Claude
martinbowling/thoughtful-claude
MCP server that enhances Claude's reasoning capabilities by integrating DeepSeek R1's advanced reasoning engine 🤔
WolframAlpha LLM
garoth/wolframalpha-llm-mcp
An MCP Server for WolframAlpha's LLM API, able to return structured knowledge & solve math
Axon Pro
talhamsajid/axon-pro
Enterprise-grade graph-powered code intelligence engine. Deep structural awareness for Laravel, PHP, Python, and JS. Powers AI agents with high-fidelity architectural context via MCP & Neo4j.
Notify
cactusinhand/mcp_server_notify
Send system notification when Agent task is done.
PlantUML
infobip/plantuml-mcp-server
RDF Explorer
emekaokoye/mcp-rdf-explorer
A Model Context Protocol (MCP) server that provides conversational interface for the exploration and analysis of RDF (Turtle) based Knowledge Graph in Local File mode or SPARQL Endpoint mode.
Real Browser
ofershap/real-browser-mcp
MCP server + Chrome extension that gives AI agents control of your real browser with existing sessions and logins
Beanquery
vanto/beanquery-mcp
Beancount MCP Server is an experimental implementation that utilizes the Model Context Protocol (MCP) to enable AI assistants to query and analyze Beancount ledger files using Beancount Query Language (BQL) and the beanquery tool.
Claude Code Delegator
fjgbue/claude-delegator-deepseek-mcp
MCP server: delegate heavy-token tasks from Claude Code to DeepSeek, Kimi, GLM, Qwen, Grok, or any OpenAI-compatible model. Mix providers per task, cost receipt on every call. Zero dependencies.
Claude Delegator
12122j/claude-delegator-deepseek-mcp
MCP server: delegate heavy-token tasks from Claude Code to DeepSeek, Kimi, GLM, Qwen, Grok, or any OpenAI-compatible model. Mix providers per task, cost receipt on every call. Zero dependencies.
dishant27/linkedin-mcp-server
Model Context Protocol (MCP) server for LinkedIn API integration
ROADrecon
atomicchonk/roadrecon_mcp_server
Claude MCP server to perform analysis on ROADrecon data
Apple Notes
henilcalagiya/mcp-apple-notes
An local mcp server for interacting with Apple Notes via LLM.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?