MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/66

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,561–1,584 · ranked by trust score, then stars
content-schema-mcp✓SAFE B

SEOSiri-Official/content-schema-mcp

An open-source, local-first (MCP) server for Automated Schema org JSON-LD Generation, GA4 Metric Validation, llm.txt Auditing

★ 0GitHub stars10 readstdio
conventional-git✓SAFE B

gajaguar/conventional-git

Conventional Commits and Conventional Branch enforcement, validation, and generation

★ 0GitHub stars2 writestdio
crawler✓SAFE B

mark1russell7/crawler

polite-crawler: a polite web crawler for research and AI agents. Fetch once, keep it, read it many times. robots.txt, one request per site, full-text search, MCP server.

★ 0GitHub stars4 readstdio
Currensor✓SAFE B

Kay0sstheory/Currensor

Live currency converter — a one-file web app, plus a free plugin for Claude and ChatGPT with an in-chat card. 166 currencies, no sign-in.

★ 0GitHub stars1 readstreamable-http
DiaChiMoi!CAUTION B

mahiepit/DiaChiMoi

Convert old Vietnamese addresses (63 provinces) to the 2025 units (34 provinces): library, CLI, MCP server, Claude skill.

★ 0GitHub stars1 write
dns-sec-audit-mcp✓SAFE B

SEOSiri-Official/dns-sec-audit-mcp

A sovereign, local-first MCP server for Technical SEO DNS record auditing, SOA health checks, SSL/TLS inspection, and HTTP security header analysis.

★ 0GitHub stars10 readstdio
episodai✓SAFE B

lalithbuilds/episodai

Sovereign local AI agent memory MCP server with SQLite WAL, hybrid retrieval, Obsidian workflows, HTTP bridge, and hardware-aware acceleration.

★ 0GitHub stars1 write
etl-pipeline-mcp!CAUTION B

SEOSiri-Official/etl-pipeline-mcp

A sovereign, local-first MCP-Native ETL System with Hot/Cold tiering, PII scrubbing, ID stitching, Parquet buffers, and data warehouse exports.

★ 0GitHub stars9 readstdio
fasuizu-br-brainiall-tts✓SAFE B

fasuizu-br/brainiall-tts-mcp

Hosted pay-per-use text-to-speech MCP server — 54 neural voices, 9 languages incl. Brazilian Portuguese. $0.008/1K chars, $10 free credits.

★ 0GitHub stars2 readstreamable-http
figma_bridge_agent✓SAFE B

Lancasteerr/figma_bridge_agent

一个本地运行的 MCP 服务器和 Figma 开发插件,用于读取 Figma Design 文档,并在隔离的 Proposal 副本中创建可审查的修改。

★ 0GitHub stars6 write
fldigi-mcp✓SAFE B

sbrunner-atx/fldigi-mcp

Operate fldigi by chatting with an AI — read, tune, log, and transmit ham-radio digital modes through the Model Context Protocol.

★ 0GitHub stars5 writestdio
flow-codeblock-mcp✓SAFE B

renoelis/flow-codeblock-mcp

Flow Codeblock stdio MCP Server and Codex Plugin

★ 0GitHub stars6 writestdio
flowchart-mcp-server✓SAFE B

Lawsonseminiferous124/flowchart-mcp-server

Generate academic quality flowcharts from text or code through this local MCP server that renders SVG graphs using Graphviz.

★ 0GitHub stars2 read
flowgraf✓SAFE B

abhishek-genailytics/flowgraf-mcp

Flowgraf MCP server (stdio proxy) — create & edit architecture diagrams from your AI agent; returns an SVG + a link to a live, editable canvas. No API key.

★ 0GitHub stars2 writestdio
free-agent-tools✓SAFE B

sean0007/free-agent-tools

Free no-auth remote MCP server (streamable HTTP): 16 deterministic tools for business ideas, pricing, hotel OTA fees, SaaS savings, ads notice risk, App Store 4.2 precheck, Japan trips.

★ 0GitHub stars1 writestreamable-http
gdocs-comments-mcp✓SAFE B

Abdulreh4874/gdocs-comments-mcp

Master modern software development through Stanford's CS146S assignments, featuring hands-on Python projects, Poetry workflows, and Conda environment setup for building production-ready skills.

★ 0GitHub stars1 writestdio
geoaeo✓SAFE B

pooriaarab/geoaeo

Scores a site 0-100 and generates GEO/AEO files for owners who want AI citations.

★ 0GitHub stars2 writestdio
goaimoat-ai-visibility-cn-mcp!CAUTION B

jayniebingyu-cyber/goaimoat-ai-visibility-cn-mcp

AI visibility audit MCP

★ 0GitHub stars3 readstreamable-http
goaimoat-web-scrape-mcp✓SAFE B

jayniebingyu-cyber/goaimoat-web-scrape-mcp

URL to clean Markdown for AI agents. 2 tools: scrape_url (one page) and crawl_website (whole site). Blocked or paywalled pages are reported honestly, never invented. Hosted endpoint at scrape.mcp.goaimoat.com/mcp, free 3 calls per email, no card. A cheaper Firecrawl alternative; also runs locally vi

★ 0GitHub stars2 readstreamable-http
gtm-mcp✓SAFE B

aleprieto790-alt/gtm-mcp

Run B2B cold outreach in Claude Code: find companies, verify fit, extract contacts, write sequences, and launch campaigns locally

★ 0GitHub stars24 writestdio
hedging8563-tokenlab✓SAFE B

hedging8563/tokenlab-mcp-server

OpenAPI-generated MCP server for TokenLab model discovery, pricing, chat, native System One decisions, media, files, embeddings, webhooks and async tasks.

★ 0GitHub stars2 readstdio
huangdun-tempmd✓SAFE B

tempmd/tempmd-mcp

MCP server for temp.md — one stable public link for agent-made artifacts, updated in place

★ 0GitHub stars3 writestdio
ilinxa-capture✓SAFE B

yuniirhm/ilinxa-capture

Extract video frames and compose AI-readable grid sheets for multimodal LLM pipelines, self-hosted via REST, Web UI, or MCP.

★ 0GitHub stars8 readstdio
indian-stock-market-mcp✓SAFE B

ratan-systems/indian-stock-market-mcp

MCP-first server for Indian equity research with local CSV/ Parquet data, price history, ticker validation, weekly performance, and Nifty 50 rankings.

★ 0GitHub stars7 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.