MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/67
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
InstantStudioAI/instantclips-mcp
Turn an e-commerce product into short-form vertical video with Claude, Codex, Cursor, or any MCP client.
Arfiandhika/Internguard-MCP
This is our group project for hackathon with workbuddy as a sponshorsip. We manage to make an mcp tools for the workbuddy to help the user find a legit internship. Feel free to add to the repository
atushi1841/japan-anime-figure-mcp
Read-only MCP server exposing Japanese anime figure price comparison data from MyFigureList and other sources. Three tools: current price, price history, and lowest price search.
atushi1841/japan-fuel-price-mcp
MCP server: Japan weekly gasoline/diesel/kerosene retail prices from METI Agency for Natural Resources and Energy official XLSX (47 prefectures + nationwide, since 1990)
atushi1841/japan-minimum-wage-mcp
MCP server for Japan regional minimum wages (47 prefectures, MHLW official stats: hourly rates, effective dates, 24-year history)
SPFreedom/jef-mcp
MCP server for Jef, a model that decides instead of generating. Hosted, no key. A parody of TypeSafe AI's Jev.
jperelli/graylog-mcp
An MCP server to integrate ai agents with for Graylog to help debug any issue. It uses best practices to give the agent an advanced custom use of graylog, not just a clone of the http api access.
atushi1841/kensho-sweep-mcp
Read-only Japan X/Twitter sweepstakes campaign data from kensho collection (1133 observations). Three tools: current sweep, sweep history, and top prize movers. No account, no API
OutBlade/kit-campus-mcp
MCP server for the KIT Campus portal: exam results, registrations, study progress, timetables, and module catalogues.
Heymonth/kmp-api-lookup-mcp
Index Kotlin/Native iOS klib APIs with this MCP server for fast symbol lookup and local database management.
SEOSiri-Official/lambda-data-pipeline-mcp
A sovereign, high-speed, local-first Big Data Ingestion, Filtering, and Analytical Pipeline Orchestrator over the Model Context Protocol.
SEOSiri-Official/learning-orchestrator-mcp
A sovereign, AI-driven pedagogical and spaced-repetition skills development MCP server supporting progressive syllabi, Bloom's Taxonomy, and secure LMS handshakes.
yashsham/lifeflow-remote-mcp
Standalone cloud-deployable Remote Model Context Protocol (MCP) servers built with FastMCP (SSE/HTTP transport) providing global intelligence: real-time forex currency conversion, cryptocurrency valuations, live weather telemetry, and city living cost indicators.
gnmike57/linkedin-osint-cli
LinkedIn CLI + MCP server: 43 platform commands plus a 13-command OSINT suite (company discovery, employee scraping, username generation, role classification, org charts). Interactive console, cookie-session auth, AI-agent native.
chaytanc/longshore
The Reality Next Door — an open, cited worldbuilding commons: a post-extraction Seattle on the Salish Sea. Authored by LONGSHORE, an AI, in the open. Agents & humans welcome: start at AGENTS.md
madtaco-dev/mcp
Verification & utility API for AI agents — MCP server. Sanctions screening, company & tax-ID validation, and more. madtaco.dev
Adrian-Sandwich/magi-council
MAGI council of three AI heads (Melchior/Balthasar/Casper) that deliberate, vote and execute plans — local-first multi-agent deliberation with a memory graph, worktree-isolated production mode and auto-merge. Evangelion-style web UI; swappable providers (kimi/codex/claude/Ollama).
theodags/Mantic.sh
matematicsolutions/pk-eli-mcp
MCP server for Pakistani law: search and cite 967 federal statutes and 1,414 Supreme Court judgments, full text, with a strict citation contract.
arose26/mbox-mcp
Search local email archives (.mbox/.eml) entirely on your machine. No OAuth, no cloud.
smeet666/mcp-ashby
MCP server for public Ashby job boards. Resolve a company to its board, search its openings and the pay it publishes. No API key.
smeet666/mcp-books
MCP server that searches inside several archives at once, browses their catalogues and reads records. No API key.
alyiox/mcp-clickhousex
Read-only MCP server for ClickHouse: SELECT queries, EXPLAIN plan/pipeline/syntax analysis, and a snapshot mode that spills large results to a CSV resource. Read-only is enforced by the engine — every client carries readonly=1, so writes, external table functions and query-level SETTINGS are refused
smeet666/mcp-databnf
Search the BnF open catalogue: authors, works, editions and links to what is digitised.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?