MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/37

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

865–888 of 3,145 · ranked by trust score, then stars

Unreal-MCP

IvanMurzak/Unreal-MCP

!CAUTION B

AI Game Developer for Unreal Engine — MCP plugin (C++ editor plugin + .NET bridge), unreal-cli, connects Unreal Editor to AI agents via ai-game.dev or a local MCP server

★ 468 writestreamable-http

Web Reader

zacfire/mcp-web-reader

✓SAFE B

让Claude等大语言模型轻松获取和解析任何网页内容,并转化为干净的Markdown。支持双引擎、批量处理,增强AI互联网信息处理能力。

★ 465 readstdio

WWeb

pnizer/wweb-mcp

✓SAFE B

WhatsApp Web MCP Server

★ 465 writesse

Zerodha

aptro/zerodha-mcp

!CAUTION B

Mcp server to connect with zerodha's kite trade apis

★ 464 write

Agentic Developer

teabranch/agentic-developer-mcp

!CAUTION B

An MCP server that scales development into controllable agentic, recursive flows, and build a feature from bottom-up

★ 452 readsse

Bear

akseyh/bear-mcp-server

✓SAFE B

MCP Server integration for Bear note app

★ 453 readstdio

Chrome Debug

robertheadley/chrome-debug-mcp

✓SAFE B

An MCP server to allow you to debug webpages using LLMs

★ 453 readstdio

Code Screenshot Generator

moussaabbadla/code-screenshot-mcp

✓SAFE B

MCP server for generating beautiful code screenshots directly from Claude

★ 454 readstdio

GitLab Code Review

mehmetakinn/gitlab-mcp-code-review

✓SAFE B
★ 457 writestdio

Ntfy

teddyzxcv/ntfy-mcp

✓SAFE B
★ 451 readstdio

Salesforce

kablewy/salesforce-mcp-server

✓SAFE B

Model Context Protocol server for Salesforce REST API integration

★ 452 writestdio

Scopus

qwe4559999/scopus-mcp

✓SAFE B

A Model Context Protocol (MCP) server for Elsevier Scopus. Allows AI assistants like Claude to search academic papers, retrieve abstracts, and analyze author profiles directly.

★ 455 readstdio

Shiori

kaorii-ako/shiori-v1

✓SAFE B

Open-source AI study companion — Google Classroom sync, Gemini AI plans, SRS flashcards, GPA predictor, AI quiz, MCP server for Claude Code. Try demo at shiori-v1.vercel.app

★ 451 writestdio

Snowflake Integration

datawiz168/mcp-snowflake-service

✓SAFE B

MCP server implementation for Snowflake integration

★ 451 writestdio

Wavescope

yogthos/wavescope-mcp

✓SAFE B

Wavelet-based multi-resolution context management for LLMs via MCP

★ 452 writestdio

Apple Music

cifero74/mcp-apple-music

✓SAFE B

Full Apple Music integration for Claude via MCP — search catalog, manage library & playlists

★ 442 writestdio

Clanki

jasperket/clanki

✓SAFE B

An MCP server for connecting LLMs with Anki Flashcards.

★ 447 writestdio

Hyperliquid

mektigboy/server-hyperliquid

✓SAFE B

MCP Hyperliquid (https://app.hyperliquid.xyz) server

★ 443 readstdio

Image Gen

ichigo3766/image-gen-mcp

✓SAFE B

A MCP server that provides text-to-image generation capabilities using Stable Diffusion WebUI API (ForgeUI/AUTOMATIC-1111)

★ 441 writestdio

Java Class Analyzer

handsomestwei/java-class-analyzer-mcp-server

✓SAFE B

java class反编译mcp server

★ 443 readstdio

Kagi Server

ac3xx/mcp-servers-kagi

✓SAFE B

A Model Context Protocol server implementation for Kagi's API

★ 441 readstdio

RedBook Search Comment

chenningling/redbook-search-comment-mcp

✓SAFE B

这是一款基于 Playwright 开发的小红书自动搜索和评论工具,作为 MCP Server,可通过特定配置接入 MCP Client,帮助用户自动完成登录小红书、搜索关键词、获取笔记内容及发布智能评论等操作。

★ 441 writestdio

Stripe Server

atharvagupta2003/mcp-stripe

✓SAFE B
★ 444 writestdio

Things

rossshannon/things3-mcp

✓SAFE B

MCP server for Things 3 with read/write support for tasks, projects, areas and tags.

★ 445 write

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.