MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/44

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,033–1,056 · ranked by trust score, then stars
Tung Shing✓SAFE B

baranwang/mcp-tung-shing

中国传统黄历 MCP 服务 | Chinese Traditional Almanac MCP Service

★ 37GitHub stars2 readstdio
YFinance Trader✓SAFE B

saintdoresh/yfinance-trader-mcp-claudedesktop

An MCP (Model Context Protocol) tool that provides stock market data and trading capabilities using the yfinance library, specifically adapted for Claude Desktop.

★ 37GitHub stars6 read
1Panel✓SAFE B

ruibaby/1panel-mcp

A MCP server for automated website deployment to 1Panel (Experimental)

★ 36GitHub stars1 writestdio
Any Script✓SAFE B

izumin5210/any-script-mcp

An MCP server that exposes arbitrary CLI tools and shell scripts as MCP Tools

★ 36GitHub stars28 readstdio
Claude Text Editor✓SAFE B

bhouston/mcp-server-text-editor

An open source implementation of the Claude built-in text editor tool

★ 36GitHub stars1 writestdio
Coin API✓SAFE B

longmans/coin_api_mcp

A Model Context Protocol server that provides access to CoinMarketCap's cryptocurrency data. This server enables AI-powered applications to retrieve cryptocurrency listings, quotes, and detailed information about various coins.

★ 36GitHub stars3 readstdio
Discord✓SAFE B

glittercowboy/discord-mcp

MCP server for full Discord server administration via Claude - 128 operations for messages, moderation, channels, roles, events, and more

★ 36GitHub stars1 write
Game Boy Emulator✓SAFE B

mario-andreschak/mcp-gameboy

A gameboy emulator for LLM's

★ 36GitHub stars5 readsse
HIG✓SAFE B

aka-kika/hig-mcp

MCP server serving Apple Human Interface Guidelines as structured design tokens for AI coding agents — post-WWDC25 system colors, Liquid Glass constraints, SwiftUI mappings.

★ 36GitHub stars1 write
Hyperliquid✓SAFE B

caiovicentino/hyperliquid-mcp-server

🚀 MCP Server para Hyperliquid DEX - Trade com Claude usando linguagem natural. Desenvolvido por Caio Vicentino para as comunidades Yield Hacker, Renda Cripto e Cultura Builder

★ 36GitHub stars7 writestdio
Lenny's Podcast✓SAFE B

akshayvkt/lenny-mcp

MCP server for searching Lenny's Podcast transcripts - 284 episodes of product wisdom

★ 36GitHub stars3 readstdio
LinkedIn✓SAFE B

hritik003/linkedin-mcp

A MCP server for LinkedIn to seamlessly apply for jobs🚀

★ 36GitHub stars2 readstdio
Local FAISS✓SAFE B

nonatofabio/local_faiss_mcp

Local FAISS vector store as an MCP server – Agent Memory, drop-in local semantic search for Claude / Copilot / Agents.

★ 36GitHub stars2 readstdio
Metabase✓SAFE B

hyeongjun-dev/metabase-mcp-server

A Model Context Protocol server that integrates AI assistants with Metabase analytics platform

★ 36GitHub stars2 writestdio
Obsidian Semantic!CAUTION B

aaronsb/obsidian-semantic-mcp

A semantic MCP server for Obsidian that simplifies 20+ tools into 5 AI-optimized operations with intelligent workflow hints and state-aware suggestions.

★ 36GitHub stars3 writestdio
Osrs✓SAFE B

jayarrowz/mcp-osrs

mcp server for AI to understand osrs

★ 36GitHub stars23 readstdio
Pdf Reader✓SAFE B

deepseekmine/mcp-pdf-reader

★ 36GitHub stars3 read
Prompts.chat✓SAFE B

f/prompts.chat-mcp

Search and retrieve AI prompts from prompts.chat, the social platform for AI prompts.

★ 36GitHub stars2 readstdio
ROS!CAUTION B

yutarop/ros-mcp

MCP server for ROS to control robots via topics, services, and actions.

★ 36GitHub stars4 writestdio
Screenshot✓SAFE B

sethbang/mcp-screenshot-server

An MCP server that provides AI assistants with screenshot capabilities — both web page capture via Puppeteer and cross-platform system screenshots using native OS tools.

★ 36GitHub stars2 readstdio
Scryfall✓SAFE B

cryppadotta/scryfall-mcp

A mcp server for interacting with the Scryfall Magic The Gathering API

★ 36GitHub stars7 readsse
Splunk✓SAFE B

splunk/splunk-mcp-server2

Unofficial. Splunk MCP server. Implemented in Python and TypeScript/JS. Runs searches, queries Splunk, and outputs data as JSON, CSV, or Markdown for agentic LLM workflows. Includes guardrails for input SPL validation and output sanitization. SSE/stdio transport support. Deployment options: Stdio, l

★ 36GitHub stars1 writesse
Things✓SAFE B

excelsier/things-fastmcp

Enhanced FastMCP implementation of the Things MCP server for Claude and Windsurf

★ 36GitHub stars4 writestdio
TwinCAT Validator!CAUTION B

agenticcontrolio/twincat-validator-mcp

An MCP server that validates, auto-fixes, and scaffolds TwinCAT 3 XML files. Connect it to any LLM client to give your AI assistant reliable, deterministic TwinCAT code quality tooling — structural checks, 21 IEC 61131-3 OOP checks, auto-fix pipelines, and canonical skeleton generation.

★ 36GitHub stars5 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.