MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/61
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
rambaarde/create-ai-memory
Persistent, agent-agnostic session memory for AI coding CLIs (Claude Code, Codex, Gemini, Cursor, opencode). One Markdown vault, any agent.
hema9265/email-design-mcp
Generate responsive, professional email templates using AI with brand memory, expert design, live preview, and easy editing in MCP-compatible clients.
josesepulvedapino/zahori
Find the media stream behind any web page: browser-driven HLS/DASH/MP4 resolution with learnable site profiles
miracleweasel/katto-mcp
Katto's official MCP server for AI video clipping — turn long videos & podcasts into scored, captioned 9:16 clips from Claude, Cursor or ChatGPT.
aesthetic-legalism5470/korean-dart-mcp
Access OpenDART financial data and corporate filings via MCP. Analyze disclosures, financial statements, and XBRL data directly in your AI assistant.
Dhi13man/oorep-mcp
Model Context Protocol (MCP) server and client SDK that provides AI assistants with access to OOREP (Open Online Repertory) - a comprehensive homeopathic repertory and materia medica database.
promptwheel-ai/logbook
Turn Git history into memory AI coding agents can use.
barissozudogru/release-intel-mcp
Auditable release evidence from commits, pull requests, issues, and contributors between two Git refs, over MCP or CLI.
stanislawherjan1/gdocs-comments-mcp
MCP server for adding inline, range-anchored comments to Google Docs — the one comment operation the Google Docs & Drive APIs can't do. For AI agents (Claude, Cursor, Copilot) that review documents.
usestring/string-ai-mcp
Model Context Protocol server for the Web Access API.
TKCollective/tanilo-mcp
MCP server for Tanilo (formerly AgentOracle): connects MCP clients to the Tanilo API. npm package: agentoracle-mcp.
barissozudogru/test-intel-mcp
Local test coverage intelligence for JavaScript and TypeScript: gaps, complexity, and practical test priorities over MCP or CLI.
lidless-labs/adguardctrl
One bad call can take down your DNS filtering. adguardctrl gates every AdGuard Home write behind confirm and destructive flags. CLI plus MCP adapter, no daemon.
comparedge/llm-cost-mcp
MCP server: token cost math for LLM API calls, 69 models across 17 providers, prices verified by ComparEdge
comparedge/price-watch-mcp
MCP server: verified SaaS price-change history, watch-log for AI assistants, data by ComparEdge
263311487-ux/dsh-verify
Browser acceptance checks for agent-built web apps. Zero-key starter, CLI, MCP and GitHub Action; inspect explicit assertions and reports.
thenavidm/facebook-ad-library-mcp-cli
Facebook Ad Library MCP server and CLI for Claude Code, Codex and AI agents. 9 tools that read every ad running on Facebook, Instagram, Messenger, Threads and Audience Network, for any advertiser in any country, free and with no API key.
carlosplanchon/firmauy-mcp-inspect
Read-only MCP server that brings FirmaUY signature inspection to your AI assistant. Offline, no smart card, no signing, redacted by default.
Aureliolo/gdharness
A harness for driving a Godot 4 project from an agent: editor addons, a runtime bridge into the running game, an MCP server in front of them, and a CLI that installs and diagnoses the Godot side.
DemigodDSK/hubmesh
Centrality-aware GraphRAG retrieval planner — drop-in layer over any vector DB. Zero LLM in the query path; MCP server included.
AntonChuraev99/Layout-debug-mcp
Point at a layer in a live UI (web DOM, Android Compose), drag it on the real screen, hand it to your AI agent via MCP
Vijay-Duke/mcp-atlassian
MCP server for seamless Atlassian integration (Confluence & Jira) with AI assistants
cavi-ai/mcp-eval
🧐 Privacy-preserving MCP server evaluation: deterministic CI probe battery (18 probe kinds, readiness score, SARIF) plus production friction capture with findings that verify and close
leonardosepulvedat/mcp-google-analytics
GA4 MCP that reads AND writes: reports, funnels, audits, and server-side events (Measurement Protocol). 26 tools.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?