MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/38
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
889–912 of 3,145 · ranked by trust score, then stars
Web Browser
blazickjp/web-browser-mcp-server
A Minimum Control Program (MCP) server implementation for web browsing capabilities using BeautifulSoup4
WebScraping.AI
webscraping-ai/webscraping-ai-mcp-server
A Model Context Protocol (MCP) server implementation that integrates with WebScraping.AI for web data extraction capabilities.
Whistle
7gugu/whistle-mcp
A Whistle proxy management tool based on Model Context Protocol that allows AI assistants to directly control local Whistle proxy servers, simplifying network debugging, API testing, and proxy rule configuration through natural language interaction.
Binance Cryptocurrency
snjyor/binance-mcp
Binance Cryptocurrency MCP
Boxlite
boxlite-labs/boxlite-mcp
Powered by BoxLite - embeddable sandbox with hardware-level isolation and no daemon. The SQLite of sandbox, coming soon as open source.
CN Financial
ccq1/cn-financial-mcp
cn金融数据 MCP 服务器 — 工具包覆盖 A 股行情、财报、估值、板块、市场全景、新闻及宏观指标。
Databricks
rafaelcartenet/mcp-databricks-server
Model Context Protocol (MCP) server for Databricks that empowers AI agents to autonomously interact with Unity Catalog metadata. Enables data discovery, lineage analysis, and intelligent SQL execution. Agents explore catalogs/schemas/tables, understand relationships, discover notebooks/jobs, and exe
DuckDuckGo Search
oevortex/ddg_search
A powerful Model Context Protocol (MCP) server for web search and URL content extraction using DuckDuckGo.
Flight Search
arjunprabhulal/mcp-flight-search
MCP Server implementation for the Model Context Protocol (MCP) enabling AI tool usage - Realtime Flight Search
Headless Ida
cnitlrt/headless-ida-mcp-server
headless-ida-mcp-server
Honeycomb
honeycombio/honeycomb-mcp
Allows Honeycomb Enterprise customers to use AI to query and analyze their data, alerts, dashboards, and more; and cross-reference production behavior with the codebase.
LeetCode
doggybee/mcp-server-leetcode
A Model Context Protocol (MCP) server for LeetCode that provides access to problems, user data, and contest information through GraphQL
Lucide Icons
seeyangzhi/lucide-icons-mcp
A Model Context Protocol (MCP) server exposing Lucide icons as resources and tools for LLMs and agentic applications. Built with Bun and the MCP TypeScript SDK.
Mattermost
pvev/mattermost-mcp
Mattermost MCP server to enable Claude to interact with Mattermost Workspaces
Moodle
peancor/moodle-mcp-server
OpenRPC
shanejonas/openrpc-mpc-server
A Model Context Protocol (MCP) server that provides JSON-RPC functionality through OpenRPC.
PBIXRay
jonaolden/pbixray-mcp-server
MCP server to give llms such as Claude, GitHub Copilot etc full PowerBI model context (from input .pbix) through tools based on PBIXRay python package.
Pushover
ashiknesin/pushover-mcp
A MCP implementation for sending notifications via Pushover
SearXNG
tisddm/searxng-mcp
A Model Context Protocol (MCP) server that enables AI assistants to perform web searches using SearXNG, a privacy-respecting metasearch engine.
Skool
louiewoof2026/skool-mcp
Telegram
kfastov/telegram-mcp-server
Telegram user console client and archiver
Tgcli
kfastov/tgcli
Telegram user console client and archiver
Trpc
jacse/trpc-mcp
Serve tRPC routes as an MCP server
MCP NPX Fetch
tokenizin-agency/mcp-npx-fetch
A powerful MCP server for fetching and transforming web content into various formats (HTML, JSON, Markdown, Plain Text) with ease.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?