MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/53

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,249–1,272 · ranked by trust score, then stars
Figma Pro✓SAFE B

artemsvit/figma-mcp-pro

★ 27GitHub stars12 readstdio
Instantly✓SAFE B

bcharleson/instantly-mcp

MCP Server for Instantly v2 API

★ 27GitHub stars1 readstdio
K6✓SAFE B

qainsights/k6-mcp-server

k6 MCP server

★ 27GitHub stars2 writestdio
Lightdash✓SAFE B

syucream/lightdash-mcp-server

A MCP(Model Context Protocol) server that accesses to Lightdash

★ 27GitHub stars13 readstdio
LLM Council!CAUTION B

rachittshah/llmcouncil

Multi-LLM deliberation council — MCP server + Claude Code skill. GPT-5, Gemini 2.5, Claude as peers. Vote, debate, synthesize, critique, MAV protocols.

★ 27GitHub stars3 writestdio
MediaWiki✓SAFE B

shiquda/mediawiki-mcp-server

A MCP server that allows you to search and retrieve content on any wiki site using MediaWiki with LLMs 🤖 wikipedia.org, fandom.com, wiki.gg and more sites using Mediawiki are supported!

★ 27GitHub stars2 readstreamable-http
Microsoft Graph Transcripts✓SAFE B

itspecialist111/microsoftgraph_transcript_mcp

A remote Model Context Protocol (MCP) server that retrieves Microsoft Teams meeting transcripts via the Microsoft Graph API, using delegated **OAuth 2.0 On-Behalf-Of (OBO)** authentication. Designed for integration with Microsoft Copilot Studio (via the MCP Wizard), though any MCP-compatible client

★ 27GitHub stars1 writestreamable-http
MongoDB✓SAFE B

mongodb-developer/mongodb-mcp-server

A Model Context Protocol server providing read-only access to MongoDB databases, letting LLMs inspect collection schemas and run aggregation pipelines.

★ 27GitHub stars1 writestdio
Offensive AI✓SAFE B

cybersecurityup/offensive-mcp-ai

★ 27GitHub stars8 write
Onyx✓SAFE B

lupuletic/onyx-mcp-server

★ 27GitHub stars2 readstdio
Prometheus✓SAFE B

idanfishman/prometheus-mcp

A Model Context Protocol (MCP) server implementation that provides AI agents with programmatic access to Prometheus metrics via a unified interface.

★ 27GitHub stars2 writestdio
Qiniu Cloud Storage✓SAFE B

joeseesun/qiniu-mcp-joe

AI写的七牛上传MCP,以后各种音频图片上传都可以传上去引用,方便很多。

★ 27GitHub stars1 write
Rime✓SAFE B

matthewdailey/rime-mcp

MCP server for Rime

★ 27GitHub stars1 readstdio
Riot✓SAFE B

jifrozen0110/mcp-riot

League of Legends MCP Server

★ 27GitHub stars5 read
Rss✓SAFE B

buhe/mcp_rss

MCP RSS is a Model Context Protocol (MCP) server for interacting with RSS feeds.

★ 27GitHub stars1 writestdio
Rss Aggregator✓SAFE B

imprvhub/mcp-rss-aggregator

Model Context Protocol Server for aggregating RSS feeds in Claude Desktop

★ 27GitHub stars3 readstdio
Sequel✓SAFE B

haxzie/sequel-mcp

MCP Database servers for Claude, Cursor and Windsuf

★ 27GitHub stars1 writestdio
Taiwan Holiday✓SAFE B

lis186/taiwan-holiday-mcp

一個基於 Model Context Protocol (MCP) 的台灣假期查詢伺服器,為 AI 工具提供準確的台灣國定假日資訊。

★ 27GitHub stars2 writestdio
TON!CAUTION B

tonnode/mcp

TON MCP server for Claude, ChatGPT, Cursor, Codex and any MCP client — liteserver queries over native ADNL: balances, account state, transaction history, get-methods. Private & archive endpoints supported

★ 27GitHub stars1 writestdio
Vods✓SAFE B

aahl/mcp-vods

📺 MCP Server for Binge-watch / MoonTV / LunaTV. 一个用于追剧/追番的MCP服务器,为AI提供搜索影视播放地址的能力,并支持在小米电视上直接播放

★ 27GitHub stars1 readstdio
Web Browser✓SAFE B

random-robbie/mcp-web-browser

An advanced web browsing server for the Model Context Protocol (MCP) powered by Playwright, enabling headless browser interactions through a flexible, secure API.

★ 27GitHub stars6 read
Whatsapp✓SAFE B

msaelices/whatsapp-mcp-server

Whatsapp MCP Server implemented in Python

★ 27GitHub stars2 write
AppInsight✓SAFE B

jiantaofu/appinsightmcp

★ 26GitHub stars20 readstdio
Apple Notifier✓SAFE B

turlockmike/apple-notifier-mcp

★ 26GitHub stars1 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.