MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/60
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
7ossamfarid/mcp-mindmesh
Claude 3.7 Swarm with Field Coherence: A Model Context Protocol (MCP) server that orchestrates multiple specialized Claude 3.7 Sonnet instances in a quantum-inspired swarm. It creates a field coherence effect across pattern recognition, information theory, and reasoning specialists to produce optima
Icaro0310/poordjaevin
Djævin: calibrated local-first decision layer with a Devin ACP backend - no API key needed
kurajs/kura
Kura — the knowledgebase for humans and agents. Agent-native docs infrastructure, built on June.
pnmcguire480/cairntir
Local-first persistent memory MCP server for Claude Code, Codex, Cursor, Qwen Code, and AI coding agents. Cross-session, cross-agent SQLite memory.
aahlijia/dekko
Static code map generator (MAP.md + map.json) powered by tree-sitter — a Claude Code /map plugin and MCP server that gives coding agents call graphs, file outlines, and impacted-test lookups without spending tokens on parsing.
distu/kx
Local-first MCP server and CLI for AI coding agents. Hybrid semantic + BM25 search across code, docs and notes, with SQLite and offline embeddings.
daveremy/oura-mcp
Standalone Oura Ring CLI, MCP server, and Claude Code skill
odgrim/mcp-datetime
induction-axiom/ai-connector-for-your-wealthsimple
Ask Gemini, Claude or ChatGPT about your Wealthsimple portfolio. A private, read-only MCP connector you deploy to your own Firebase project. Unofficial.
RikepilB/crafterwiki
Provenance-first wiki of hackathon winners and submissions, with a demo-first planning harness (CLI, MCP server, static API, Astro site, Claude Code plugin).
jbechtel-97/dealflowpro-mcp-server
DealFlowPro MCP Server — Analyze multifamily real estate deals from Claude Code or Claude Desktop
3aKHP/Endfield-MCP
MCP Server for Arknights: Endfield fan creation (TypeScript / Bun, stdio + Streamable HTTP).
notsointresting/frontend-inspo-mcp
MCP server that lets AI coding agents search and pull real frontend code, UI components and design mockups from 27 open sources (shadcn/ui, Magic UI, Aceternity, FreeFrontend, three.js, drei and more)
nunner322/mcp-arr
MCP server for *arr media suite - Sonarr, Radarr, Lidarr, Readarr, Prowlarr
2fst4u/mealie-mcp
mugoherick12-boop/skillz
🛠️ Enable skills in any MCP client with Skillz, a server converting Claude-style skills into callable tools for seamless integration.
Cappahccino/SB-MCP
Supabase Model Context Protocol (MCP) server for CRUD operations and Edge Functions
TMHSDigital/Unity-Developer-Tools
AI-powered development toolkit for Unity game development in Cursor IDE. 18 skills, 8 rules, 4 MCP tools, 20 snippets, 5 templates covering the full Unity lifecycle.
fluttersdk/ai
Teach your AI assistant Wind UI, Magic Framework and more, across every major coding tool. Skills, a Claude Code marketplace and a hosted MCP server.
VRIL-LABS/aliensec-mcp-server
👽 The AlienSec MCP Server is an AlienVault OTX endpoint security scanning MCP server with VirusTotal integration.
nirajagarwal/bible-mcp
MCP server for Christian scholarship: BSB/WEB scripture, Greek/Hebrew word data, cross-references, patristic texts, and semantic search.
gulsahsarsilmaz/chaff
Separate the live work from the dead weight on a developer machine: build daemons, caches, build output and stale git worktrees, with tiered safe cleanup. CLI, Claude Code plugin and MCP server.
CloakHQ/CloakBrowser-Agent
Jev-powered stealth browser agent. TypeSafe Jev decides each step in ~0.3 s, CloakBrowser carries it out like a human. MCP server, CLI and Python API.
herreravalenz6620/context-compression
Reduce token usage for JSON, CSV, and TSV files with deterministic compression that keeps data intact for AI agents.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?