MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/41
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
sicks3c/hackerone-mcp-server
Unofficial MCP server for accessing your HackerOne reports, programs, scope, and earnings from Claude Code
mario-andreschak/mcp-image-recognition
An MCP server that provides image recognition 👀 capabilities using Anthropic and OpenAI vision APIs
mhajder/librenms-mcp
MCP server for LibreNMS management
fredericbarthelet/linkedin-mcp-server
An MCP Server for Linkedin API
linkupplatform/python-mcp-server
Linkup is world's best search for AI applications
kdpa-llc/local-skills-mcp
Portable local skills for MCP clients, with on-demand loading, validation, and trigger evaluation.
elgentos/magento2-dev-mcp
An MCP server to help with Magento 2 development
tsuchijo/matlab-mcp
Model Context Protocol server to let LLMs write and execute matlab scripts
gerred/mcpmc
Model Context Protocol Minecraft Server
spathodea-network/opencti-mcp
MCP server for querying OpenCTI threat intelligence, indicators, reports, malware, and threat actors.
terryso/mcp-pinterest
johanli233/mcp-sandbox
Python sandboxes for llms
sionic-ai/serverless-rag-mcp-server
uarlouski/testrail-mcp-server
AI-native MCP server connecting Claude, Cursor, Windsurf, and other AI assistants to TestRail — manage test cases, runs, and results through natural-language conversation, with typed schemas built for LLMs.
amidabuddha/unichat-mcp-server
kukapay/uniswap-trader-mcp
An MCP server for AI agents to automate token swaps on Uniswap DEX across multiple blockchains.
pluginslab/wp-blockmarkup-mcp
shadowfax92/apple-reminders-mcp
marcelocaporale/codex-agent-mem
Local-first Model Context Protocol (MCP) memory layer for Codex CLI/Desktop, Claude Code, Gemini CLI, Qwen/DeepSeek/Ollama and agent workflows. SQLite + FTS5 compact context packs, token savings, read-only mode, no external memory server.
truss44/mcp-crypto-price
A Model Context Protocol (MCP) server that provides real-time cryptocurrency analysis via CoinCap's API. Enables Claude and other MCP clients to fetch crypto prices, analyze market trends, and track historical data.
buga-luga/cursor-mcp
kenazk/gong-mcp
Simple Gong MCP server
arrismo/kaggle-mcp
MCP server for Kaggle
everaldo/mcp-mistral-ocr
Model Context Protocol (MCP) Server for Mistral OCR API
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?