MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/42
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
tomekkorbak/oura-mcp-server
MCP server for Oura API integration
danwritecode/mcp-client-server-host-demo
A quick pokemon demo to showcase MCP server, client, and host
pinkpixel-dev/mcpollinations
An MCP server that enables AI assistants to generate images, text, and audio through the Pollinations APIs. Please see the newer MCP server, Nectar-MCP. Link below
pyptt/ptt_mcp_server
The best PTT MCP server
qiniu/qiniu-mcp-server
encreor/rlm-claude
Recursive Language Models for Claude Code - Infinite memory solution inspired by MIT CSAIL paper
verygoodplugins/robinhood-mcp
Read-only MCP server for Robinhood portfolio research
kevinwatt/mcp-server-searxng
An MCP server implementation that integrates with SearXNG, providing privacy-focused meta search capabilities.
kallistox/mcp-unifi-applications
UniFi MCP server that makes the official UniFi API documentation (Network, Protect, Site Manager, InnerSpace) queryable by AI agents — endpoint search, schema drill-down, code examples in 5 languages. Read-only, no controller credentials.
manooll/webfetch-mcp
Live Web Access for Your Local AI — Tunable Search & Clean Content Extraction
sinco-lab/mcp-youtube-transcript
TypeScript MCP server for retrieving YouTube transcripts in Claude Desktop, Cursor, Cline, Codex, and other MCP clients
tencent/cos-mcp
基于 MCP 协议的腾讯云 COS MCP Server,无需编码即可让大模型快速接入腾讯云存储 (COS) 和数据万象 (CI) 能力。
descope-sample-apps/descope-mcp-server-stdio
nuskey8/docs-rs-mcp
An MCP server that enables searching for Rust crates and their documentation from crates.io and docs.rs.
kirill-markin/example-mcp-server
A ready-to-use MCP (Model Context Protocol) server template for extending Cursor IDE with custom tools. Deploy your own server to Heroku with one click, create custom commands, and enhance your Cursor IDE experience. Perfect for developers who want to add their own tools and commands to Cursor IDE w
panzer-jack/feuse-mcp
Frontend Useful MCP Tools - Essential utilities for web developers to automate API integration and code generation
cayirtepeomer/gerrit-code-review-mcp
This MCP server provides integration with Gerrit code review system, allowing AI assistants to review code changes and their details through a simple interface.
adird/hilanet-mcp
זה ממש אבל ממש לא אמסיפי לחילנט
devizor/macos-notification-mcp
macOS Notification MCP enables AI assistants to trigger native macOS sounds, visual notifications, and text-to-speech. Built for Claude and other AI models using the Model Context Protocol.
paulhkang94/markview
Native macOS markdown preview + MCP server for Claude Code. Swift/SwiftUI, GFM, Mermaid, syntax highlighting. No Electron.
abdelstark/nostr-mcp
A Nostr MCP server that allows to interact with Nostr, enabling posting notes, and more.
helenkwok/openbim-mcp
Model Context Protocol (MCP) server for openBIM
ibrahimsaleem/pentestthinkingmcp
A systematic, AI-powered penetration testing reasoning engine (MCP server) for attack path planning, CTF/HTB solving, and automated pentest workflows. Features Beam Search, MCTS, attack step scoring, and tool recommendations.
screenshotone/mcp
A CLI version of an MCP server for the ScreenshotOne API
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?