MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/5

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

97–120 of 3,145 · ranked by trust score, then stars

bm.md

miantiao-me/bm.md

✓SAFE B

更好用的 Markdown 排版助手|专为微信公众号与多平台排版设计,支持富文本复制、图片生成与矢量 PDF 导出。

★ 61824 read

dbt

dbt-labs/dbt-mcp

✓SAFE B

A MCP (Model Context Protocol) server for interacting with dbt.

★ 6081 writestreamable-http

YouTube Transcript

kimtaeyoon83/mcp-server-youtube-transcript

✓SAFE B

This is an MCP server that allows you to directly download transcripts of YouTube videos.

★ 5981 readstdio

Wire

0xkoda/wiremcp

✓SAFE B

An MCP for WireShark (tshark). Empower LLM's with realtime network traffic analysis capability

★ 5867 readstdio

X64dbg

wasdubya/x64dbgmcp

✓SAFE B

Model Context Protocol for x64dbg & x32dbg

★ 58556 read

Vue Mcp

webfansplz/vite-plugin-vue-mcp

✓SAFE B

Vite plugin that enables a MCP server helping models to understand your Vue app better.

★ 5801 writesse

vite-plugin-vue-mcp

webfansplz/vite-plugin-vue-mcp

✓SAFE B

Vite plugin that enables a MCP server helping models to understand your Vue app better.

★ 5791 writesse

YouTube

zubeidhendricks/youtube-mcp-server

!CAUTION B

MCP Server for YouTube API, enabling video management, Shorts creation, and advanced analytics

★ 57710 readstdio

Home Assistant

tevonsb/homeassistant-mcp

✓SAFE B

A MCP server for Home Assistant

★ 5762 write

WeRead

freestylefly/mcp-server-weread

✓SAFE B

微信读书MCP

★ 5764 readstdio

Cad

daobataotie/cad-mcp

✓SAFE B

CAD MCP Server

★ 5746 writestreamable-http

apple-health-mcp

neiltron/apple-health-mcp

✓SAFE B

Local-first Apple Health MCP server. Lets AI assistants answer questions about your sleep, workouts, activity and heart data from a local export.

★ 5682 writestdio

Iterm

ferrislucas/iterm-mcp

✓SAFE B

A Model Context Protocol server that executes commands in the current iTerm session - useful for REPL and CLI assistance

★ 5682 writestdio

Todoist MCP Server

Doist/todoist-mcp

✓SAFE B

A set of tools to connect to AI agents, to allow them to use Todoist on a user's behalf. Includes MCP support.

★ 5577 readstdio

Mantic

marcoaapfortes/mantic.sh

✓SAFE B

A structural code search engine for Al agents.

★ 5561 writestdio

Todoist

doist/todoist-mcp

✓SAFE B

A set of tools to connect to AI agents, to allow them to use Todoist on a user's behalf. Includes MCP support.

★ 5537 readstdio

Airbnb

openbnb-org/mcp-server-airbnb

✓SAFE B

Search Airbnb using your AI Agent

★ 5472 readstdio

YouTube

anaisbetts/mcp-youtube

✓SAFE B

A Model-Context Protocol Server for YouTube

★ 5461 readstdio

Pg-Mcp

stuzero/pg-mcp-server

✓SAFE B
★ 5415 read

Anytype

anyproto/anytype-mcp

✓SAFE B

An MCP server enabling AI assistants to interact with Anytype - your encrypted, local and collaborative wiki - to organize objects, lists, and more through natural language.

★ 5281 writestdio

Kagi

kagisearch/kagimcp

✓SAFE B

The Official Model Context Protocol (MCP) server for Kagi Search & other tools.

★ 5281 readstreamable-http

Unity

arodoid/unitymcp

✓SAFE B
★ 5261 writestdio

MotherDuck

motherduckdb/mcp-server-motherduck

✓SAFE B

Local MCP server for DuckDB and MotherDuck

★ 5253 readstdio

Web Agent Protocol

ota-tech-ai/web-agent-protocol

✓SAFE B

🌐Web Agent Protocol (WAP) - Record and replay user interactions in the browser with MCP support

★ 5082 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.