MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/58
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
mirascope/mcp-community
Easily run, deploy, and connect to MCP servers
jprealini/cypress-mcp
kukapay/nearby-search-mcp
An MCP server for nearby place searches with IP-based location detection.
leizongmin/mcp-server-proxy
Converts MCP protocol's SSE transport layer to a standard HTTP request/response.
songpengfei1111-dot/tracesearch_mcp
yy1588133/code-merge-mcp
Arcadi4/balatro-agent
Let AI play Balatro
aloth/cred-1
CRED-1: Open, reproducible domain credibility dataset for automated pre-bunking of online misinformation. TypeScript library, CLI & MCP server. Check any news source's reliability from terminal, code, or AI agents. CC BY 4.0, DOI-citable.
putervision/agent-reasoning-mcp
🧭 Strategic BDI cognitive reasoning engine for AI agents. Goal decomposition DAGs, multi-factor utility scoring, risk evaluation, and adaptive replanning over MCP.
settlemint/sdk
Integrate SettleMint into your application with ease.
taiga-family/taiga-ui-mcp
Taiga UI MCP server providing documentation search and scaffolding tools.
nishantmodak/call-a-human-mcp
MCP server that gives any AI phone a friend options : ask a human or request approval via Slack or macOS dialogs before taking irreversible actions.
devemberx/mcp-server-polarion
MCP server for Polarion ALM — read and write documents, work items, test runs, traceability links, and comments from any MCP-compatible AI assistant
hendrickcastro/MCPQL
MCPQL - MCP Server for SQL Server database operations and analysis
SidneyBissoli/medical-terminologies-mcp
Unified MCP server for six medical terminologies (ICD-11, LOINC, RxNorm, MeSH, ATC, CID-10) with authoritative WHO ICD-10→ICD-11 mapping and provenance on every response. Hosted endpoint: no install, no credentials.
nickjlamb/pubcrawl
MCP server giving AI assistants verifiable access to PubMed, Europe PMC, US/UK drug labelling, and ClinicalTrials.gov. Built by PharmaTools.AI.
vivian-labs/1point3acres-toolkit
一亩三分地自动签到 + 每日答题:在你自己电脑的 Chrome 里、用你自己的登录完成,不经过第三方;也是给 Claude Code / Codex 用的 MCP 服务。1point3acres daily check-in & quiz automation, local-only, plus an MCP server for AI assistants.
stefanoamorelli/storybook-mcp-server
MCP server for Storybook - provides AI assistants access to components, stories, properties and screenshots. Built with TypeScript and Model Context Protocol SDK.
yuridivonis/whoop-mcp-server
Your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted.
vin-spiegel/htmldrop
Publish HTML for agents — one API call, MCP server included
BYMCS/mssql-mcp
MCP server for Microsoft SQL Server — query, schema, and stored-procedure access for Claude Desktop, Cursor, Windsurf, and VS Code.
EshanPrakash/openhammer-api
Comprehensive Warhammer 40K API with 2,748 units across 35 factions and 2 game editions (10th and 11th). Built with FastAPI, featuring 29 endpoints. Also available as a live MCP server.
ts-oas/nest-openapi
A modern, modular set of utilities for building OpenAPI-driven NestJS apps.
putervision/behavior-mcp
⚡ High-frequency (~60Hz) in-browser behavior tree execution engine for autonomous AI agents. Reactive priority interrupts, safety guardrails & deterministic action replay over MCP.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?