MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/51
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
sam-92/mcp_autogen_sse_stdio
This repository demonstrates how to use AutoGen to integrate local and remote MCP (Model Context Protocol) servers. It showcases a local math tool (math_server.py) using Stdio and a remote Apify tool (RAG Web Browser Actor) via SSE for tasks like arithmetic and web browsing.
carlosedp/mcp-bun
Bun Javascript Runtime MCP Server for AI Agents
pynesys/claude_autoapprove_mcp
An MCP server to inject auto-approve MCP functionality into Claude Desktop
zhubit/cowork-semantic-search
mschwarzmueller/demo-mcp-server-client-implementation
A demo implementation of a MCP server (consuming a dummy API) and basic client.
archimedescrypto/excel-reader-mcp
A Model Context Protocol (MCP) server for reading Excel files with automatic chunking and pagination support. Built with SheetJS and TypeScript.
axdithyaxo/mcp-forensic-toolkit
Secure AI-enabled digital forensics toolkit built with Model Context Protocol
verygoodplugins/mcp-freescout
An MCP (Model Context Protocol) server for FreeScout helpdesk ticket management and workflow automation. This server provides tools to interact with FreeScout tickets, analyze issues, manage responses, and integrate with Git workflows.
fl0w1nd/grok2-image-mcp-server
grok image mcp server
marissamarym/imessage-mcp-server
An MCP server that uses AppleScript to send iMessages and manage contacts.
wyattjoh/imessage-mcp
A Model Context Protocol server for reading iMessage data from macOS.
spences10/mcp-jinaai-reader
🔍 Model Context Protocol (MCP) tool for parsing websites using the Jina.ai Reader
cosmix/jira-mcp
A Model Context Protocol server for Jira.
kukapay/jupiter-mcp
An MCP server for executing token swaps on the Solana blockchain using Jupiter's new Ultra API.
linkupplatform/linkup-mcp-server
Linkup MCP server for web search and fetching web content
mage-os-lab/magento2-lsp
Language Server (LSP) and MCP server for Magento 2 - provides go-to-definition, references, and rename across PHP, XML, and layout files.
maoxiaoke/mcp-media-processor
A Node.js server implementing Model Context Protocol (MCP) for media processing operations, providing powerful video and image manipulation capabilities.
vanderheijden86/moneybird-mcp-server
Moneybird MCP Server - AI-powered bookkeeping
hugohow/mcp-music-analysis
Integrate librosa, whisper with LLMs to analyze music audio.
nebula-contrib/nebulagraph-mcp-server
Model Context Protocol Server for NebulaGraph 3.x
thomasrohde/hue-mcp
milescool/rednote-mcp
RedNote MCP - Xiaohongshu Content Search Tool
intsig-textin/textin-mcp
swairshah/zotero-mcp-server
MCP server to expose local zotero repository to MCP clients
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?