MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/6
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
121–144 of 3,145 · ranked by trust score, then stars
Docker
quantgeekdev/docker-mcp
A docker MCP Server (modelcontextprotocol)
Youtube Transcript
jkawamoto/mcp-youtube-transcript
MCP server retrieving transcripts of YouTube videos
Puppeteer
merajmehrabi/puppeteer-mcp-server
This MCP server provides browser automation capabilities through Puppeteer, allowing interaction with both new browser instances and existing Chrome windows.
Google Map
cablate/mcp-google-map
18 Google Maps tools and 3 Agent Skills for place search, routes, travel planning, and local SEO—via MCP or standalone CLI.
Weixin Reader
bwkyd/wexin-read-mcp
能够让大模型阅读微信公众号文章,使用浏览器模拟绕过反爬虫。
Baidu Maps
baidu-maps/mcp
Baidu Map MCP Server
Bazi
cantian-ai/bazi-mcp
MCP server for Bazi (八字) information
DroidMind
hyperb1iss/droidmind
Control your Android devices with AI using Model Context Protocol
EdgeOne Pages
tencentedgeone/edgeone-pages-mcp
An MCP service designed for deploying HTML content to EdgeOne Makers and obtaining an accessible public URL.
Alchemy
runekaagaard/mcp-alchemy
A MCP (model context protocol) server that gives the LLM access to and knowledge about relational databases like SQLite, Postgresql, MySQL & MariaDB, Oracle, and MS-SQL.
Odoo
erpipe-org/mcp-odoo
Odoo MCP for AI agents — gated writes, multi-instance. Hosted product: https://erpipe.com
Odoo
tuanle96/mcp-odoo
Odoo MCP for AI agents — gated writes, multi-instance. Hosted product: https://erpipe.com
Apple Notes
rafalwilinski/mcp-apple-notes
Talk with your notes in Claude. RAG over your Apple Notes using Model Context Protocol.
mcp-local-rag
shinpr/mcp-local-rag
Local-first RAG server for developers. Semantic + keyword search for code and technical docs. Works with MCP or CLI. Fully private, zero setup.
Anthropic Tools
anthropics/anthropic-tools
F2C
f2c-ai/f2c-mcp
F2C MCP Server
Google Scholar
jackkuo666/google-scholar-mcp-server
A MCP Server for Google Scholar: 🔍 Enable AI assistants to search and access Google Scholar papers through a simple MCP interface.
ComfyUI
joenorton/comfyui-mcp-server
lightweight Python-based MCP (Model Context Protocol) server for local ComfyUI
enescinr/twitter-mcp
A Model Context Protocol server allows to interact with Twitter, enabling posting tweets and searching Twitter.
GraphQL
blurrah/mcp-graphql
Model Context Protocol server for GraphQL
Local RAG
shinpr/mcp-local-rag
Local-first RAG server for developers. Semantic + keyword search for code and technical docs. Works with MCP or CLI. Fully private, zero setup.
Teams Integration
inditextech/mcp-teams-server
An MCP (Model Context Protocol) server implementation for Microsoft Teams integration, providing capabilities to read messages, create messages, reply to messages, mention members.
Skillz
intellectronica/skillz
An MCP server for loading skills (shim for non-claude clients).
Ableton Live
simon-kansara/ableton-live-mcp-server
MCP Server implementation for Ableton Live OSC control
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?