MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/35

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

817–840 of 3,145 · ranked by trust score, then stars

hourei-mcp-server

groundcobra009/hourei-mcp-server

✓SAFE B

e-Gov法令APIを使用して日本の法令情報を検索・取得するModel Context Protocolサーバー

★ 493 readstdio

Human

upamune/human-mcp

✓SAFE B

👨🔧 人間をMCPサーバーとして利用する👩🔧

★ 497 read

Mail

shuakami/mcp-mail

!CAUTION B

📧 MCP Mail Tool - AI-powered email management tool | 基于 MCP 的智能邮件管理工具

★ 4917 readstdio

Maton Agent

maton-ai/agent-toolkit

✓SAFE B

Connect and automate 150+ apps (Google Workspace, Microsoft 365, GitHub, Notion, Slack, HubSpot, and more) through a unified API.

★ 492 writestdio

Nmap

phialsbasement/nmap-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that enables AI assistants to perform network scanning operations using NMAP

★ 491 writestdio

OpenAPI Schema

hannesj/mcp-openapi-schema

✓SAFE B

OpenAPI Schema Model Context Protocol Server

★ 4910 readstdio

seo-audit

houtini-ai/seo-audit

✓SAFE B

Free SEO Audit MCP server for Claude - captures and stores all the raw data you need for a complete technical SEO audit. Google Search Console + a first-party crawl + DataForSEO + Majestic SEO merged into one prioritised audit.

★ 495 writestdio

Wikidata

zzaebok/mcp-wikidata

✓SAFE B

A server implementation for Wikidata API using the Model Context Protocol (MCP).

★ 491 write

Generator

formulahendry/generator-mcp

✓SAFE B

Yeoman Generator to quickly create a new MCP Server

★ 481 readstdio

Home Assistant Server

hekmon8/homeassistant-server-mcp

✓SAFE B

A Model Context Protocol (MCP) server for interacting with Home Assistant. This server provides tools to control and monitor your Home Assistant devices through MCP-enabled applications.

★ 481 writestdio

Huaweicloud

huaweiclouddeveloper/mcp-server

✓SAFE B

Provide different cloud products MCP Server tools to help developers manage cloud resources with AI-agent

★ 481 writestdio

Odoo Improved

hachecito/odoo-mcp-improved

✓SAFE B

Odoo MCP Server with advanced tools for sales, stock, and more.

★ 485 writestdio

Safe Local Python Executor

maxim-saplin/mcp_safe_local_python_executor

✓SAFE B

Stdio MCP Server wrapping custom Python runtime (LocalPythonExecutor) from Hugging Faces' `smolagents` framework. The runtime combines the ease of setup (compared to docker, VM, cloud runtimes) while providing safeguards and limiting operations/imports that are allowed inside the runtime.

★ 481 writestdio

Serper Search

nighttrek/serper-search-mcp

✓SAFE B

Un-official Serper Google search server for Cline and other MCP clients

★ 481 readstdio

Steampipe

turbot/steampipe-mcp

!CAUTION B

Enable AI assistants to explore and query your Steampipe data!

★ 485 readstdio

Crawl4AI+SearXNG

tokidoo/crawl4ai-rag-mcp

✓SAFE B

A self-contained MCP server in docker that combines the Crawl4AI, SearXNG, and Supabase to provide AI agents and coding assistants with complete web search, crawling, and RAG capabilities.

★ 479 read

Crypto Sentiment

kukapay/crypto-sentiment-mcp

✓SAFE B

An MCP server that delivers cryptocurrency sentiment analysis to AI agents.

★ 475 read

Eliza Plugin MCP

fleek-platform/eliza-plugin-mcp

✓SAFE B

ElizaOS plugin allowing agents to connect to MCP servers

★ 472 read

Excel

jwadow/mcp-excel

✓SAFE B

MCP server for AI agents to analyze Excel spreadsheets through atomic operations. Like SQL for Excel. Fast, accurate, and efficient. No context overflow.

★ 472 readstdio

Flightradar24

sunsetcoder/flightradar24-mcp-server

✓SAFE B

Model Context Protocol server for Flight Tracking

★ 472 readstdio

Goodnews

vectorinstitute/mcp-goodnews

✓SAFE B

A simple MCP application that delivers curated positive and uplifting news stories.

★ 471 readstdio

Google Custom Search

limklister/mcp-google-custom-search-server

✓SAFE B

An mcp server for searching against google custom search api

★ 471 readstdio

Instagram Engagement

bob-lance/instagram-engagement-mcp

✓SAFE B

📢 Instagram MCP Server – A powerful Model Context Protocol (MCP) server for tracking Instagram engagement, generating leads, and analyzing audience feedback.

★ 472 writestdio

Jina Reader

wong2/mcp-jina-reader

✓SAFE B

Jina Reader MCP Server

★ 472 read

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.