MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/39
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
913–936 of 3,145 · ranked by trust score, then stars
Capacities
jem-computer/capacities-mcp
Capacities×MCP
Code Research
nahmanmate/code-research-mcp-server
CodeDebrief
ferdinandobons/codedebrief
Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.
Copilot Security
robotti-io/copilot-security-instructions
✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
Dify
ai-fe/dify-mcp-server
A Model Context Protocol server for Dify
Dynamic Shell
codelion/dynamic-shell-server
Dynamic Shell Command MCP Server
Flowbite
themesberg/flowbite-mcp
Convert Figma design to code with the official Flowbite MCP server
Kagi Ken
czottmann/kagi-ken-mcp
Unofficial MCP server for working with Kagi *without* API access (you'll need to be a customer). Searches and summarizes. Uses Kagi session token for easy authentication. Works well with your agent.
Kuzu
kuzudb/kuzu-mcp-server
A Model Context Protocol server that provides access to Kuzu databases
Npx Fetch
tokenizin-agency/mcp-npx-fetch
A powerful MCP server for fetching and transforming web content into various formats (HTML, JSON, Markdown, Plain Text) with ease.
Qonto
qonto/qonto-mcp-server
Qonto MCP Server
TaskMaster Todoist
mingolladaniele/taskmaster-todoist-mcp
A lightweight Model Context Protocol (MCP) server that enables natural language interaction with your Todoist tasks directly from your IDE. Built with simplicity and maintainability in mind.
The Librarian
aka-kika/the-librarian
Skill librarian MCP server — every installed skill costs tokens; the librarian keeps your whole collection out of agent context. Agents ask, get the few right skills for the task, and their outcomes curate the collection. Fully local: Ollama + SQLite + optional Apple Intelligence.
Timeserver
secretiveshell/mcp-timeserver
A simple MCP server that exposes datetime information to agentic systems and chat REPLs
Ubuntu System Controller
pazuzu1w/ubuntu_mcp_server
an mcp server built to give claude config limited control over ubuntu os operations
VSCode LSP
beixiyo/vsc-lsp-mcp
Expose VS Code language intelligence to AI agents via MCP, with automatic routing across multiple windows
Alive Analysis
with-geun/alive-analysis
Data analysis workflow kit for AI coding agents. Structure your analysis with the ALIVE loop — Ask, Look, Investigate, Voice, Evolve.
Aws Athena
lishenxydlgzs/aws-athena-mcp
MCP server to run AWS Athena queries
Beekmarks
beekmarks/mcp-wasm
A proof-of-concept implementation of a Model Context Protocol (MCP) server that runs in WebAssembly (WASM) within a web browser. This project demonstrates the integration of MCP tools and resources in a browser environment.
Better Auth
nahmanmate/better-auth-mcp-server
BuiltWith
builtwith/mcp
BuiltWith MCP Server
Cisco CLI
xunmint/cisco-cli-mcp
A Telnet-based MCP tool for Cisco network device CLI, optimized for Cisco IOS devices.
Dune Analytics
kukapay/dune-analytics-mcp
A mcp server that bridges Dune Analytics data to AI agents.
Fetch
kazuph/mcp-fetch
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?