MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/36

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

841–864 of 3,145 · ranked by trust score, then stars

Logoloom

mcpware/logoloom

✓SAFE B

AI-powered logo design → SVG → full brand kit. Free, local, MCP-native.

★ 474 readstdio

Mcp Starter

stevenstavrakis/mcp-starter-template

✓SAFE B

An opinionated starter template for making Model Context Protocol (MCP) servers

★ 471 readstdio

Moondream

colemurray/moondream-mcp

✓SAFE B

Moondream MCP Server in Python

★ 476 readstdio

Pdf Reader

trafflux/pdf-reader-mcp

✓SAFE B
★ 472 read

PubChem

augmented-nature/pubchem-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server for accessing the PubChem chemical database. This server provides access to over 110 million chemical compounds with extensive molecular properties, bioassay data, and chemical informatics tools.

★ 4730 readstdio

Rust Docs

0xkoda/mcp-rust-docs

✓SAFE B

An MCP to retrieve rust crate documentation for LLM's

★ 471 readstdio

Telegram Communicator

qpd-v/mcp-communicator-telegram

✓SAFE B

An MCP server that enables communication with users through Telegram. This server provides a tool to ask questions to users and receive their responses via a Telegram bot.

★ 473 write

Whimsical

brockreece/whimsical-mcp-server

✓SAFE B

MCP server for creating whimsical boards from an LLM context

★ 471 writestdio

basecoat-ui-mcp

zygiu-zygis/basecoat-ui-mcp

!CAUTION B

Offline MCP server for Basecoat UI (shadcn/ui look, no React): templates, macro layouts, theming/dark-mode contract, static validation.

★ 461 writestdio

China Stock

xinkuang/china-stock-mcp

!CAUTION B

MCP server that provides access to Chinese stock market data using akshare-one

★ 464 readstreamable-http

Claude Outlook

syedazharmbnr1/claude-outlook-mcp

✓SAFE B
★ 462 writestdio

Comfy

lalanikarim/comfy-mcp-server

✓SAFE B

A server using FastMCP framework to generate images based on prompts via a remote Comfy server.

★ 461 write

Company Docs

southleft/company-docs-mcp

✓SAFE B

AI-powered company knowledge MCP. Unified place for internal policies, values, documentation, and governance. Agents can search, cite, and answer questions using real company docs.

★ 464 read

Data Product

entropy-data/dataproduct-mcp

!CAUTION B

A Model Context Protocol (MCP) server for discovering data products and requesting access in Data Mesh Manager, and executing queries on the data platform to access business data.

★ 464 readstdio

Dida Hotel

dida-ai/dida-hotel-mcp-global

✓SAFE B

Official DIDA Hotel Booking MCP Server. 14-year travel tech data stack, 2M+ hotels at wholesale rates, 40+ LLM compatible. Free unlimited calls for businesses & individual devs. Filter by location, date, star grade, guests & tags; pull real-time room types, pricing & cancellation rules.

★ 461 read

Dida RollingGo Hotel

dida-ai/dida-rollinggo-hotel-mcp-global

✓SAFE B

Official DIDA Hotel Booking MCP Server. 14-year travel tech data stack, 2M+ hotels at wholesale rates, 40+ LLM compatible. Free unlimited calls for businesses & individual devs. Filter by location, date, star grade, guests & tags; pull real-time room types, pricing & cancellation rules.

★ 461 read

Grafana

sailingcoder/grafana-mcp-analyzer

✓SAFE B

让AI助手直接分析你的Grafana监控数据 - A Model Context Protocol server for Grafana data analysis

★ 466 readstdio

GraphQL Schema

hannesj/mcp-graphql-schema

✓SAFE B

GraphQL Schema Model Context Protocol Server

★ 4610 readstdio

InfluxDB

idoru/influxdb-mcp-server

✓SAFE B

An MCP Server for querying InfluxDB

★ 464 writestdio

MCP Playground

elkhn/mcp-playground

✓SAFE B

A Streamlit-based chat app for LLMs with plug-and-play tool support via Model Context Protocol (MCP), powered by LangChain, LangGraph, and Docker.

★ 464 readsse

mcp-geo

AKzar1el/mcp-geo

✓SAFE B

Track brand citations across seven AI search surfaces. Free OSS/self-host; optional EUR 99 client-ready audit.

★ 462 writestdio

Pubmed Search

wavelovey/pubmed_search

!CAUTION B

MCP PubMed Search Server

★ 461 readstdio

Pyautogui

hetaobackend/mcp-pyautogui-server

✓SAFE B

A MCP (Model Context Protocol) server that provides automated GUI testing and control capabilities through PyAutoGUI.

★ 4610 read

PyResToolbox

gabrielserrao/pyrestoolbox-mcp

✓SAFE B

Model Context Protocol (MCP) server for AI-powered reservoir engineering calculations. Integrates pyResToolbox with Claude AI for PVT analysis, well performance, simulation support, and more. 47 production-ready tools using industry-standard correlations.

★ 462 write

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.