MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/56
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
gongrzhe/acp-mcp-server
A bridge server that connects Agent Communication Protocol (ACP) agents with Model Context Protocol (MCP) clients, enabling seamless integration between ACP-based AI agents and MCP-compatible tools like Claude Desktop.
jiayao/mcp-chess
MCP server for playing chess against AI
phialsbasement/cmd-mcp-server
MCP server for executing CMD commands. Can be hooked to claude for additional agentics.
shyuan/coolpc-mcp-server
利用「原價屋」估價資料作為生成電腦設備估價單的 MCP Server
ritvij14/crawl4ai-mcp
umbra2728/ctfd-mcp
ecovacs-ai/ecovacs-mcp
Ecovacs MCP Server
keithagroves/elysia-mcp
Model Context Protocol (MCP) Server for Bun and Elysia
thesethrose/fetch-browser
A powerful headless browser MCP server that enables AI agents to fetch web content and perform Google searches without requiring any API keys.
seanivore/mcp-file-preview
MCP server for HTML file preview and analysis - Has been weird with OS but good on Cline so WIP
erniebrodeur/mcp-grep
simple mcp server to wrap the local instance of grep.
growthbook/growthbook-mcp
Official GrowthBook MCP server for creating flags, getting experiments, and more.
kenm47/jensenify-mcp
An MCP server that helps engineers achieve Jensen Huang's recommended $250k/year compute spend by injecting ~2.9M tokens of canonical Western literature into every AI interaction. Deep humanistic context for every engineering decision.
dswbx/jsonv-ts
JSON Schema builder and validator for TypeScript with static type inference, Hono middleware for OpenAPI generation and validation, and MCP server/client implementation. Lightweight, dependency-free, and built on Web Standards.
winterjung/mcp-korean-spell
MCP(Model Context Protocol) server designed for Korean spell checking
hideya/langchain-mcp-tools-ts
MCP to LangChain Tools Conversion Utility / TypeScript
199-mcp/mcp-limitless
Advanced MCP Server with AI-powered Limitless API features: natural time queries, meeting detection, action item extraction, daily summaries, and speaker analytics
mfukushim/map-traveler-mcp
Virtual traveler library for MCP
shane-kercheval/mcp-client-agent
CLI that uses DSPy to interact with MCP servers.
hesreallyhim/mcp-observer-server
An MCP server that provides server-to-client notifications for file changes that the client subscribes to
shwstone/mcp-oi-wiki
🌟 Wiki of OI / ICPC for LLMs. (面向大模型的某大型游戏线上攻略,内含炫酷算术魔法)
olostep/olostep-mcp-server
MCP server for Olostep — the web scraping, crawling, and search infrastructure used by top AI companies. Gives any MCP-compatible AI agent the ability to scrape, crawl, batch-extract, and search the web in real time.
dylangroos/patchright-mcp-lite
Patchright (Playwright patch) MCP server for lightweight models
66julienmartin/mcp-server-qwen_max
MCP server for Qwen Max model
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?