MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/40

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 937–960 · ranked by trust score, then stars
Dune Analytics✓SAFE B

kukapay/dune-analytics-mcp

A mcp server that bridges Dune Analytics data to AI agents.

★ 41GitHub stars1 write
Fetch✓SAFE B

kazuph/mcp-fetch

★ 41GitHub stars1 readstdio
Github Actions✓SAFE B

ko1ynnky/github-actions-mcp-server

GitHub Actions Model Context Protocol Server

★ 41GitHub stars4 writestdio
Google Patents✓SAFE B

kunihiros/google-patents-mcp

★ 41GitHub stars1 readstdio
Iceberg✓SAFE B

ryft-io/iceberg-mcp

★ 41GitHub stars5 readstdio
National Parks✓SAFE B

kyrietangsheng/mcp-server-nationalparks

★ 41GitHub stars6 readstdio
OMOP✓SAFE B

ohnlp/omop_mcp

Model Context Protocol (MCP) server for mapping clinical terminology to Observational Medical Outcomes Partnership (OMOP) concepts using Large Language Models

★ 41GitHub stars2 read
Quicken Mac Data✓SAFE B

dweekly/quicken-mac-mcp

MCP server providing read-only access to Quicken For Mac financial data via Claude

★ 41GitHub stars1 writestdio
Shell✓SAFE B

hdresearch/mcp-shell

Execute a secure shell in Claude Desktop using the Model Context Protocol.

★ 41GitHub stars1 writestdio
Simple Files Vectorstore✓SAFE B

lishenxydlgzs/simple-files-vectorstore

A simple vector store that indexes content of files on local file system

★ 41GitHub stars2 readstdio
Sketchfab✓SAFE B

gregkop/sketchfab-mcp-server

This is an MCP (Model Context Protocol) Server for discovering and downloading 3D models

★ 41GitHub stars4 readstdio
Slicer✓SAFE B

zhaoyouj/mcp-slicer

A Model Context Protocol server for 3D Slicer integration

★ 41GitHub stars1 write
Tana✓SAFE B

tim-mcdonnell/tana-mcp

★ 41GitHub stars12 writestdio
WebSearch✓SAFE B

mnhlt/websearch-mcp

[Self-hosted] A Model Context Protocol (MCP) server implementation that provides a web search capability over stdio transport. This server integrates with a WebSearch Crawler API to retrieve search results.

★ 41GitHub stars1 readstdio
1C Platform Tools!CAUTION B

yellow-hammer/mcp-1c-platform-tools

MCP-сервер расширения 1C: Platform Tools для AI-агентов VS Code и Cursor: тесты, сборка, профили запуска и работа с базой в проектах конфигуратора, 1С:EDT и OneScript.

★ 40GitHub stars1 readstdio
Aider✓SAFE B

sengokudaikon/aider-mcp-server

★ 40GitHub stars2 writestdio
AntV✓SAFE B

antvis/mcp-server-antv

🧑🏻💻 MCP Server for @antvis visualization development, which provides documentation context and examples for visualization developers.

★ 40GitHub stars10 readstdio
Apktool✓SAFE B

secfathy/apktool-mcp

★ 40GitHub stars1 writestdio
Apollo.io✓SAFE B

lkm1developer/apollo-io-mcp-server

apollo.io mcp server typescript

★ 40GitHub stars7 readstdio
Arxiv✓SAFE B

prashalruchiranga/arxiv-mcp-server

An MCP server that enables interacting with the arXiv API using natural language

★ 40GitHub stars5 readstdio
Binder✓SAFE B

mpazik/binder

Headless knowledge base with bidirectional Markdown sync

★ 40GitHub stars52 read
Exif✓SAFE B

stass/exif-mcp

MCP server to extract image metadata (EXIF, XMP, etc)

★ 40GitHub stars7 readstdio
Flac AI!CAUTION B

yusong652/flac-mcp

MCP server connecting AI agents to ITASCA FLAC — run continuum simulations through natural conversation

★ 40GitHub stars2 write
Hacker News✓SAFE B

pskill9/hn-server

Hacker news MCP server

★ 40GitHub stars1 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.