MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/49
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
doobidoo/mcp-context-provider
A static MCP server that provides AI models with persistent tool context, preventing context loss between chats.
privetin/dataset-viewer
MCP server for Hugging Face dataset viewer
zeparhyfar/mcp-datetime
A MCP server for datetime formatting and file name generation.
debridge-finance/debridge-mcp
MCP server that gives AI agents the ability to execute cross-chain cryptocurrency swaps and transfers via the deBridge protocol
cyreslab-ai/exploitdb-mcp-server
MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.
intellectronica/ez-mcp
The easiest path to getting an MCP server going
nicekate/flux-dev-mcp
qtty/jadx-mcp-server
A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool
klever-io/mcp-klever-vm
MCP server for Klever blockchain smart contract development
korovin-aa97/talkthrough-mcp
Recordings in. Agent-ready evidence out. Local-first MCP for transcripts, keyframes, OCR, speakers, and wall-clock evidence.
ai-zerolab/mcp-toolbox
Maintenance of a set of tools to enhance LLM through MCP protocols.
zth0828/mmx-mcp-server
A unified Model Context Protocol server for MiniMax CLI (mmx)
sylweriusz/mcp-neo4j-memory-server
badhansen/notion-mcp
A simple Model Context Protocol (MCP) server that integrates with Notion's API to manage my personal todo list.
jeffery9/qwen-mcp-tool
MCP server that enables AI assistants to interact with Qwen code
lstudlo/scholarmcp
ScholarMCP - An academic research MCP server with comprehensive literature search, PDF ingestion, and citation management tools. Integrates with Google Scholar, OpenAlex, Crossref, and Semantic Scholar for automated research workflows.
fkesheh/skill-mcp
LLM-managed skills platform using MCP - create, edit, and execute skills programmatically in Claude, Cursor, and any MCP-compatible client without manual file uploads.
thinq-connect/thinqconnect-mcp
ThinQ Connect MCP Server
github-samples/turn-based-game-mcp
A turn-based games app built with Next.js and TypeScript that features Tic-Tac-Toe and Rock Paper Scissors games with AI opponents powered by the Model Context Protocol (MCP), offering three difficulty levels.
agentset-ai/mcp-server
Agentset MCP Server - Build RAG with Agentic superpowers
mustafacagri/ai-quality-gate
🚀 Kill the Junior AI Era. 🤖 Level up your AI code to Principal standards. No more sloppy lines or junior mistakes. Automated ESLint ✨ TypeScript 🔧 Prettier 🎨 SonarQube 🛡️ Security 🔒 Complexity 📊 in seconds. High-stakes quality, forced to ship only the best. ⚡🏆 Goodbye, bad code. Hello, Principal Eng
bsahane/mcp-ansible
MCP Ansible Server
samuraikun/aws-s3-mcp
MCP server to integrate AWS S3 and LLM
arturogarrido/claudinho
⚽ Live football(soccer) scores, fixtures and standings for the competition you follow (World Cup, Premier League, LALIGA, Champions League and 11 more) in your terminal, your Claude Code and Cursor CLI statusline, and MCP clients. No API key. Independent fan project. Not affiliated with FIFA, any co
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?