MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/34

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

793–816 of 3,145 · ranked by trust score, then stars

Zig

opensvm/zig-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that provides Zig language tooling, code analysis, and documentation access. This server enhances AI capabilities with Zig-specific functionality including code optimization, compute unit estimation, code generation, and best practices recommendations.

★ 517 readstdio

Meshy MCP Server

meshy-dev/meshy-mcp-server

✓SAFE B

MCP server for Meshy AI 3D generation platform

★ 501 writestdio

Databricks Connector

jordineil/mcp-databricks-server

✓SAFE B

MCP Server for Databricks

★ 501 write

DeepSeek-Claude

harshj23/deepseek-claude-mcp-server

✓SAFE B

a MCP server which integrates reasoning capabilities of DeepSeek R1 model into claude desktop app.

★ 501 readstdio

DexPaprika

coinpaprika/dexpaprika-mcp

✓SAFE B

DexPaprika MCP server for real-time crypto token data, DEX trading activity, and DeFi analytics across multiple blockchains.

★ 501 readsse

LLM Wiki

oshayr/llm-wiki

✓SAFE B

Autonomous knowledge base plugin for Claude Code - captures reserch, ideas, and decisions into an interlinked wiki with reserch-on-miss, semantic search, and a Wikipedia-style web UI. Knowledge compounds as you work.

★ 503 write

Minimal Dev

datawhalechina/mcp-lite-dev

✓SAFE B

共学《MCP极简开发》项目代码

★ 501 readsse

Minimax Tools

psycharch/minimax-mcp-tools

✓SAFE B

Async MCP server with Minimax API integration for image generation and text-to-speech

★ 502 writestdio

Protonmail

amotivv/protonmail-mcp

✓SAFE B

This MCP server provides email sending functionality using Protonmail's SMTP service. It allows both Claude Desktop and Cline VSCode extension to send emails on your behalf using your Protonmail credentials.

★ 501 writestdio

ShadowGit

blade47/shadowgit-mcp

✓SAFE B

A Model Context Protocol (MCP) server that provides AI assistants with secure, read-only access to your ShadowGit repositories. This enables powerful debugging and code analysis capabilities by giving AI access to your project's fine-grained git history.

★ 503 writestdio

SSH

mixelpixx/ssh-mcp

✓SAFE B

DEPRECATED — succeeded by SSH-Connect (Rust rewrite): https://github.com/mixelpixx/SSH-Connect

★ 502 writestdio

Tavily Search

tomatio13/mcp-server-tavily

✓SAFE B

Taivily APIを利用するMCP Serverです。Officialが提供される前に開発しました

★ 501 readstdio

Ukrainian Statistics

vladyslavmykhailyshyn/ukrainian-stats-mcp-server

✓SAFE B

stat.gov.ua MCP server

★ 508 readstdio

World Bank Data

anshumax/world_bank_mcp_server

✓SAFE B

An implementation of the Model Context Protocol for the World Bank open data API

★ 501 readstdio

Youtube Transcript

adhikasp/mcp-youtube

✓SAFE B

Model Context Protocol to fetch youtube transcript

★ 501 read

ClickUp MCP for AI Assistants

hauptsacheNet/clickup-mcp

✓SAFE B
★ 4914 readstdio

Bluesky

brianellin/bsky-mcp-server

✓SAFE B

Bluesky MCP (Model Context Protocol) Server

★ 494 writestdio

Claude Search

doriandarko/claude-search-mcp

✓SAFE B

A MCP server that provides web search capabilities using the Claude API.

★ 491 readstdio

Claude Team

7836246/claude-team-mcp

✓SAFE B

🤖 Multi-Agent MCP Server - Let Claude Code / Windsurf / Cursor orchestrate GPT, Claude, Gemini to work as an AI dev team

★ 492 writestdio

ClickUp

hauptsachenet/clickup-mcp

✓SAFE B
★ 4914 readstdio

Code Memory

kapillamba4/code-memory

✓SAFE B

MCP server with local vector search for your codebase. Smart indexing, semantic search, Git history — all offline.

★ 497 readsse

Coinmarket

anjor/coinmarket-mcp-server

✓SAFE B
★ 492 readstdio

Elysia

kerlos/elysia-mcp

✓SAFE B

ElysiaJS plugin for Model Context Protocol with HTTP transport

★ 491 writestreamable-http

Hourei

groundcobra009/hourei-mcp-server

✓SAFE B

e-Gov法令APIを使用して日本の法令情報を検索・取得するModel Context Protocolサーバー

★ 493 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.