MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/47
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
andybrandt/mcp-simple-timeserver
Simple MCP to give Claude ability to check current time as well as know when holidays are, what is the time distance between dates etc.
nicktcode/swissgroceries-mcp
MCP server for Swiss grocery stores: Migros, Coop, Aldi, Denner, Lidl
m2rads/v0-mcp
MCP Server to connect your MCP host to V0.dev directly
timlukahorstmann/mcp-weather
A Model Context Protocol (MCP) server that provides hourly and daily weather forecasts using the AccuWeather API.
jordanlyall/wc26-mcp
AI companion for FIFA World Cup 2026 — 18 tools covering matches, teams, venues, city guides, fan zones, visa info, head-to-head records, and more. Works with Claude, ChatGPT, Cursor, and Telegram.
2slides/mcp-2slides
The MCP Server for 2slides. AI agent for PPT/Presentation/Slides generation.
webzler/agentmemory
Eliminate AI hallucinations. Zero config. Works instantly with Cline, RooCode, KiloCode, and more.
0xakuti/ai-council-mcp
Multi-AI consensus MCP server that queries multiple AI models (OpenAI, Claude, Gemini, custom APIs) in parallel and synthesizes responses to reduce bias and improve accuracy. A Python implementation of the wisdom-of-crowds approach for AI decision making.
abhishekbhakat/airflow-mcp-server
MCP Server for Apache Airflow
getasterisk/asterisk-mcp-server
Asterisk Model Context Protocol (MCP) server.
stefanskiasan/azure-devops-mcp-server
MCP Server for Cline to Access Azure devops
zellerhaus/batchdata-mcp-real-estate
Model Context Protocol (MCP) server for BatchData.io property and address APIs - Real estate data integration for Claude and other AI assistants
mi4uu/brain.md
Local-first markdown notes with a first-class MCP server. 16 tools + 2 resources for Claude Code, Claude Desktop, Cursor and any MCP agent. Per-folder permissions, semantic RAG via LanceDB, single Bun binary. AGPL.
vltansky/cursor-chat-history-mcp
ap425q/cuttermcp
MCP Server for Cutter
kuon-dev/advanced-reason-mcp
Enhanced version of "Sequential Thinking" MCP
ryan0204/github-repo-mcp
Model Context Protocol server for Github Repo // Reading Github Repo
markelaugust74/mcp-google-calendar
A Model Context Protocol (MCP) server implementation for Google Calendar integration. Create and manage calendar events directly through Claude or other AI assistants.
ihrpr/mcp-server-jupyter
MCP server for Jupyter Notebooks and JupyterLab
cherryhq/mcpmarket
MCP Market
octagonai/octagon-vc-agents
An MCP server that runs AI-driven venture capitalist agents (Fred Wilson, Peter Thiel, etc.), whose thinking is continuously enriched by Octagon Private Markets' real-time deals, valuations, and deep research intelligence. Use it to spin up programmable "VC brains" for pitch feedback, diligence simu
xraywu/mcp-pdf-extraction-server
MCP server to extract contents from a PDF file
caesaryangs/prometheus_mcp_server
A Model Context Protocol (MCP) server enabling LLMs to query, analyze, and interact with Prometheus databases through predefined routes.
laptou/rust-docs-mcp-server
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?