MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/38

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

889–912 of 3,145 · ranked by trust score, then stars

Web Browser

blazickjp/web-browser-mcp-server

✓SAFE B

A Minimum Control Program (MCP) server implementation for web browsing capabilities using BeautifulSoup4

★ 441 readstdio

WebScraping.AI

webscraping-ai/webscraping-ai-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server implementation that integrates with WebScraping.AI for web data extraction capabilities.

★ 449 readstdio

Whistle

7gugu/whistle-mcp

!CAUTION B

A Whistle proxy management tool based on Model Context Protocol that allows AI assistants to directly control local Whistle proxy servers, simplifying network debugging, API testing, and proxy rule configuration through natural language interaction.

★ 4434 readstreamable-http

Binance Cryptocurrency

snjyor/binance-mcp

✓SAFE B

Binance Cryptocurrency MCP

★ 431 writestdio

Boxlite

boxlite-labs/boxlite-mcp

✓SAFE B

Powered by BoxLite - embeddable sandbox with hardware-level isolation and no daemon. The SQLite of sandbox, coming soon as open source.

★ 435 readstdio

CN Financial

ccq1/cn-financial-mcp

✓SAFE B

cn金融数据 MCP 服务器 — 工具包覆盖 A 股行情、财报、估值、板块、市场全景、新闻及宏观指标。

★ 4342 readsse

Databricks

rafaelcartenet/mcp-databricks-server

✓SAFE B

Model Context Protocol (MCP) server for Databricks that empowers AI agents to autonomously interact with Unity Catalog metadata. Enables data discovery, lineage analysis, and intelligent SQL execution. Agents explore catalogs/schemas/tables, understand relationships, discover notebooks/jobs, and exe

★ 431 writestdio

DuckDuckGo Search

oevortex/ddg_search

✓SAFE B

A powerful Model Context Protocol (MCP) server for web search and URL content extraction using DuckDuckGo.

★ 431 readstdio

Flight Search

arjunprabhulal/mcp-flight-search

✓SAFE B

MCP Server implementation for the Model Context Protocol (MCP) enabling AI tool usage - Realtime Flight Search

★ 432 read

Headless Ida

cnitlrt/headless-ida-mcp-server

✓SAFE B

headless-ida-mcp-server

★ 437 write

Honeycomb

honeycombio/honeycomb-mcp

✓SAFE B

Allows Honeycomb Enterprise customers to use AI to query and analyze their data, alerts, dashboards, and more; and cross-reference production behavior with the codebase.

★ 432 writestdio

LeetCode

doggybee/mcp-server-leetcode

✓SAFE B

A Model Context Protocol (MCP) server for LeetCode that provides access to problems, user data, and contest information through GraphQL

★ 437 readstdio

Lucide Icons

seeyangzhi/lucide-icons-mcp

✓SAFE B

A Model Context Protocol (MCP) server exposing Lucide icons as resources and tools for LLMs and agentic applications. Built with Bun and the MCP TypeScript SDK.

★ 437 readstdio

Mattermost

pvev/mattermost-mcp

✓SAFE B

Mattermost MCP server to enable Claude to interact with Mattermost Workspaces

★ 433 writestdio

Moodle

peancor/moodle-mcp-server

✓SAFE B
★ 438 readstdio

OpenRPC

shanejonas/openrpc-mpc-server

✓SAFE B

A Model Context Protocol (MCP) server that provides JSON-RPC functionality through OpenRPC.

★ 432 readstdio

PBIXRay

jonaolden/pbixray-mcp-server

✓SAFE B

MCP server to give llms such as Claude, GitHub Copilot etc full PowerBI model context (from input .pbix) through tools based on PBIXRay python package.

★ 4314 readstdio

Pushover

ashiknesin/pushover-mcp

✓SAFE B

A MCP implementation for sending notifications via Pushover

★ 431 writestdio

SearXNG

tisddm/searxng-mcp

✓SAFE B

A Model Context Protocol (MCP) server that enables AI assistants to perform web searches using SearXNG, a privacy-respecting metasearch engine.

★ 431 readstdio

Skool

louiewoof2026/skool-mcp

✓SAFE B
★ 433 writestdio

Telegram

kfastov/telegram-mcp-server

!CAUTION B

Telegram user console client and archiver

★ 431 writestreamable-http

Tgcli

kfastov/tgcli

!CAUTION B

Telegram user console client and archiver

★ 431 writestreamable-http

Trpc

jacse/trpc-mcp

✓SAFE B

Serve tRPC routes as an MCP server

★ 431 readstdio

MCP NPX Fetch

tokenizin-agency/mcp-npx-fetch

!CAUTION B

A powerful MCP server for fetching and transforming web content into various formats (HTML, JSON, Markdown, Plain Text) with ease.

★ 424 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.