MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/43
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
tradesdontlie/task-manager-mcp
A task management MCP server that provides comprehensive project and task tracking capabilities
neosun100/translategemma
🌍 TranslateGemma - Local AI Translation Service with Web UI, REST API & MCP. 55 languages, all-in-one Docker image with embedded models. Powered by Google's TranslateGemma.
kocakli/trello-desktop-mcp
Trello integration for Claude Desktop via Model Context Protocol (MCP) - 19 tools for comprehensive board, card, and list management
jamesanz/us-legal-mcp
An MCP server that provides comprehensive US legislation.
gongrzhe/yolo-mcp-server
yamanoku/baseline-mcp-server
特定のWeb APIに関するBaselineの状況を提供するModel Context Protocolサーバー
chirag127/clear-thought-mcp-server
MCP server providing systematic thinking, mental models, and debugging approaches for enhanced LLM problem-solving
codelogicincengineering/codelogic-mcp-server
An MCP Server to utilize Lineai's rich software dependency data in your AI programming assistant.
decodo/mcp-server
The Decodo MCP server which enables MCP clients to interface with services.
decodo/mcp-web-scraper
The Decodo MCP server which enables MCP clients to interface with services.
ssdeanx/deep-research
The Deep Research Assistant is meticulously crafted on Mastra's modular, scalable architecture, designed for intelligent orchestration and seamless human-AI interaction. It's built to tackle complex research challenges autonomously.
vivekhaldar/emacs-mcp-server
sheshiyer/framer-plugin-mcp
A Model Context Protocol (MCP) server for creating and managing Framer plugins with web3 capabilities
spartanz51/imagegen-mcp
MCP server for OpenAI Image Generation & Editing — text-to-image, image-to-image (with mask), no extra plugins.
mottibec/israeli-bank-mcp
li-vien/lark-tools-mcp
MCP server provides Feishu related operations to AI encoding agents such as cursor 飞书MCP插件,读取文档、发送消息、合同审批、数据处理.....
2b3pro/markdown2pdf-mcp
MCP Server for converting markdown to PDF
instructa/mcp-starter
A super simple Starter to build your own MCP Server
olanetsoft/midnight-mcp
Midnight MCP server giving AI assistants access to Midnight blockchain — search contracts, analyze code, explore docs
johancodinha/nrepl-mcp-server
nRepl mcp server for clojure. Enables interaction with a running Clojure nREPL instance, allowing evaluation of Clojure code, namespace inspection, and other utilities via MCP.
jamesanz/prediction-market-mcp
A simple MCP server that grabs prediction market data from polymarket, PredictIt, & Kalshi.
iamr0s/ruto-phone-mcp
It can run on the phone itself, or on any other machine that can reach the phone through `adb`. With a vision-capable model, it can observe screenshots, operate the device, and complete multi-step tasks. It can also expose the same capabilities as an MCP server, so tools such as OpenClaw and PicoCla
braffolk/mcp-summarization-functions
Provides summarised output from various actions that could otherwise eat up tokens and cause crashes for AI agents
tidewave-ai/tidewave_js
Tidewave for JavaScript (Vite/TanStack Start)
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?