MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/4
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
73–96 of 3,145 · ranked by trust score, then stars
Kali Connector
wh0am123/mcp-kali-server
MCP configuration to connect AI agent to a Linux machine.
Fetch
zcaceres/fetch-mcp
A flexible HTTP fetching Model Context Protocol server.
mcp-fetch-server
zcaceres/fetch-mcp
A flexible HTTP fetching Model Context Protocol server.
Idea Reality
mnemox-ai/idea-reality-mcp
Pre-build reality check for AI coding agents. Scans GitHub, HN, npm, PyPI, Product Hunt. MCP server. 290+ stars.
Axon
harshkedia177/axon
Graph-powered code intelligence engine — indexes codebases into a knowledge graph, exposed via MCP tools for AI agents and a CLI for developers.
Android Control
minhalvp/android-mcp-server
An MCP server that provides control over Android devices via adb
Acemcp
qy527145/acemcp
一个将ACE(Augment Context Engine) 做成MCP的项目
Yahoo Finance 2
gadicc/yahoo-finance2
Unofficial API for Yahoo Finance with CLI, MCP and Agent Skill
OpenBrand
ethanjyx/openbrand
Extract brand assets (logos, colors, backdrops) from any website; open source alternative to Brand.dev
Security Hub
fuzzinglabs/mcp-security-hub
A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.
Claude ChatGPT
syedazharmbnr1/claude-chatgpt-mcp
A Claude MCP tool to interact with the ChatGPT desktop app on macOS
How To Cook
worryzyy/howtocook-mcp
基于Anduin2017 / HowToCook (程序员在家做饭指南)的mcp server
obsidian-mcp
StevenStavrakis/obsidian-mcp
A simple MCP server for Obsidian
Obsidian
stevenstavrakis/obsidian-mcp
A simple MCP server for Obsidian
Blueprint
arcadeai/blueprint-mcp
Diagram generation for understanding codebases and system architecture using Nano Banana Pro.
Mem0
coleam00/mcp-mem0
MCP server for long term agent memory with Mem0. Also useful as a template to get you started building your own MCP server with Python!
Cclsp
ktnyt/cclsp
Claude Code LSP: enhance your Claude Code experience with non-IDE dependent LSP integration.
Apktool
zinja-coder/apktool-mcp-server
A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
A-Share
24mlight/a-share-mcp-is-just-i-need
Workers
cloudflare/workers-mcp
Talk to a Cloudflare Worker from Claude Desktop!
Overture
sixhq/overture
Overture is an open-source, locally running web interface delivered as an MCP (Model Context Protocol) server that visually maps out the execution plan of any AI coding agent as an interactive flowchart/graph before the agent begins writing code.
Apple Doc
mightydillah/apple-doc-mcp
MCP server providing seamless access to Apple Developer Documentation with smart search and wildcard support
Corbell
corbell-ai/corbell
AI-powered spec generation and review using multi-repo code graph intelligence for backend teams that ship to production.
Google Search
web-agent-master/google-search
A Playwright-based Node.js tool that bypasses search engine anti-scraping mechanisms to execute Google searches. Local alternative to SERP APIs with MCP server integration.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?