MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/60

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,417–1,440 · ranked by trust score, then stars
mcp-mindmesh✓SAFE B

7ossamfarid/mcp-mindmesh

Claude 3.7 Swarm with Field Coherence: A Model Context Protocol (MCP) server that orchestrates multiple specialized Claude 3.7 Sonnet instances in a quantum-inspired swarm. It creates a field coherence effect across pattern recognition, information theory, and reasoning specialists to produce optima

★ 6GitHub stars4 readsse
poordjaevin!CAUTION B

Icaro0310/poordjaevin

Djævin: calibrated local-first decision layer with a Devin ACP backend - no API key needed

★ 6GitHub stars10 readstdio
Kura✓SAFE B

kurajs/kura

Kura — the knowledgebase for humans and agents. Agent-native docs infrastructure, built on June.

★ 5GitHub stars1 read
cairntir!CAUTION B

pnmcguire480/cairntir

Local-first persistent memory MCP server for Claude Code, Codex, Cursor, Qwen Code, and AI coding agents. Cross-session, cross-agent SQLite memory.

★ 5GitHub stars1 writestdio
dekko✓SAFE B

aahlijia/dekko

Static code map generator (MAP.md + map.json) powered by tree-sitter — a Claude Code /map plugin and MCP server that gives coding agents call graphs, file outlines, and impacted-test lookups without spending tokens on parsing.

★ 5GitHub stars1 readstdio
kx!CAUTION B

distu/kx

Local-first MCP server and CLI for AI coding agents. Hybrid semantic + BM25 search across code, docs and notes, with SQLite and offline embeddings.

★ 5GitHub stars2 writestdio
oura-mcp✓SAFE B

daveremy/oura-mcp

Standalone Oura Ring CLI, MCP server, and Claude Code skill

★ 4GitHub stars10 readstdio
MCP DateTime✓SAFE B

odgrim/mcp-datetime

★ 4GitHub stars4 readsse
ai-connector-for-your-wealthsimple✓SAFE B

induction-axiom/ai-connector-for-your-wealthsimple

Ask Gemini, Claude or ChatGPT about your Wealthsimple portfolio. A private, read-only MCP connector you deploy to your own Firebase project. Unofficial.

★ 4GitHub stars1 writestreamable-http
crafterwiki✓SAFE B

RikepilB/crafterwiki

Provenance-first wiki of hackathon winners and submissions, with a demo-first planning harness (CLI, MCP server, static API, Astro site, Claude Code plugin).

★ 4GitHub stars8 read
dealflowpro-mcp-server✓SAFE B

jbechtel-97/dealflowpro-mcp-server

DealFlowPro MCP Server — Analyze multifamily real estate deals from Claude Code or Claude Desktop

★ 4GitHub stars4 readstdio
endfield-mcp✓SAFE B

3aKHP/Endfield-MCP

MCP Server for Arknights: Endfield fan creation (TypeScript / Bun, stdio + Streamable HTTP).

★ 4GitHub stars19 readstdio
frontend-inspo-mcp✓SAFE B

notsointresting/frontend-inspo-mcp

MCP server that lets AI coding agents search and pull real frontend code, UI components and design mockups from 27 open sources (shadcn/ui, Magic UI, Aceternity, FreeFrontend, three.js, drei and more)

★ 4GitHub stars1 writestdio
mcp-arr✓SAFE B

nunner322/mcp-arr

MCP server for *arr media suite - Sonarr, Radarr, Lidarr, Readarr, Prowlarr

★ 4GitHub stars11 writestdio
mealie-mcp✓SAFE B

2fst4u/mealie-mcp

★ 4GitHub stars1 readstdio
skillz!CAUTION B

mugoherick12-boop/skillz

🛠️ Enable skills in any MCP client with Skillz, a server converting Claude-style skills into callable tools for seamless integration.

★ 4GitHub stars1 read
supabase-mcp✓SAFE B

Cappahccino/SB-MCP

Supabase Model Context Protocol (MCP) server for CRUD operations and Edge Functions

★ 4GitHub stars6 readstdio
Unity-Developer-Tools✓SAFE B

TMHSDigital/Unity-Developer-Tools

AI-powered development toolkit for Unity game development in Cursor IDE. 18 skills, 8 rules, 4 MCP tools, 20 snippets, 5 templates covering the full Unity lifecycle.

★ 4GitHub stars4 readstdio
Ai✓SAFE B

fluttersdk/ai

Teach your AI assistant Wind UI, Magic Framework and more, across every major coding tool. Skills, a Claude Code marketplace and a hosted MCP server.

★ 3GitHub stars2 readstdio
aliensec-mcp-server✓SAFE B

VRIL-LABS/aliensec-mcp-server

👽 The AlienSec MCP Server is an AlienVault OTX endpoint security scanning MCP server with VirusTotal integration.

★ 3GitHub stars15 read
bible-mcp✓SAFE B

nirajagarwal/bible-mcp

MCP server for Christian scholarship: BSB/WEB scripture, Greek/Hebrew word data, cross-references, patristic texts, and semantic search.

★ 3GitHub stars16 readstreamable-http
chaff✓SAFE B

gulsahsarsilmaz/chaff

Separate the live work from the dead weight on a developer machine: build daemons, caches, build output and stale git worktrees, with tiered safe cleanup. CLI, Claude Code plugin and MCP server.

★ 3GitHub stars1 write
CloakBrowser-Agent!CAUTION B

CloakHQ/CloakBrowser-Agent

Jev-powered stealth browser agent. TypeSafe Jev decides each step in ~0.3 s, CloakBrowser carries it out like a human. MCP server, CLI and Python API.

★ 3GitHub stars4 read
context-compression!CAUTION B

herreravalenz6620/context-compression

Reduce token usage for JSON, CSV, and TSV files with deterministic compression that keeps data intact for AI agents.

★ 3GitHub stars1 read

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.