MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/67

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,585–1,608 · ranked by trust score, then stars
instantclips-mcp✓SAFE B

InstantStudioAI/instantclips-mcp

Turn an e-commerce product into short-form vertical video with Claude, Codex, Cursor, or any MCP client.

★ 0GitHub stars2 readstdio
Internguard-MCP✓SAFE B

Arfiandhika/Internguard-MCP

This is our group project for hackathon with workbuddy as a sponshorsip. We manage to make an mcp tools for the workbuddy to help the user find a legit internship. Feel free to add to the repository

★ 0GitHub stars1 writestdio
japan-anime-figure-mcp✓SAFE B

atushi1841/japan-anime-figure-mcp

Read-only MCP server exposing Japanese anime figure price comparison data from MyFigureList and other sources. Three tools: current price, price history, and lowest price search.

★ 0GitHub stars3 readstdio
japan-fuel-price-mcp✓SAFE B

atushi1841/japan-fuel-price-mcp

MCP server: Japan weekly gasoline/diesel/kerosene retail prices from METI Agency for Natural Resources and Energy official XLSX (47 prefectures + nationwide, since 1990)

★ 0GitHub stars5 readstdio
japan-minimum-wage-mcp✓SAFE B

atushi1841/japan-minimum-wage-mcp

MCP server for Japan regional minimum wages (47 prefectures, MHLW official stats: hourly rates, effective dates, 24-year history)

★ 0GitHub stars4 readstdio
jef-mcp✓SAFE B

SPFreedom/jef-mcp

MCP server for Jef, a model that decides instead of generating. Hosted, no key. A parody of TypeSafe AI's Jev.

★ 0GitHub stars2 writestdio
jperelli-graylog✓SAFE B

jperelli/graylog-mcp

An MCP server to integrate ai agents with for Graylog to help debug any issue. It uses best practices to give the agent an advanced custom use of graylog, not just a clone of the http api access.

★ 0GitHub stars5 readstdio
kensho-sweep-mcp!CAUTION B

atushi1841/kensho-sweep-mcp

Read-only Japan X/Twitter sweepstakes campaign data from kensho collection (1133 observations). Three tools: current sweep, sweep history, and top prize movers. No account, no API

★ 0GitHub stars3 readstdio
kit-campus-mcp✓SAFE B

OutBlade/kit-campus-mcp

MCP server for the KIT Campus portal: exam results, registrations, study progress, timetables, and module catalogues.

★ 0GitHub stars11 read
kmp-api-lookup-mcp✓SAFE B

Heymonth/kmp-api-lookup-mcp

Index Kotlin/Native iOS klib APIs with this MCP server for fast symbol lookup and local database management.

★ 0GitHub stars3 readstdio
lambda-data-pipeline-mcp✓SAFE B

SEOSiri-Official/lambda-data-pipeline-mcp

A sovereign, high-speed, local-first Big Data Ingestion, Filtering, and Analytical Pipeline Orchestrator over the Model Context Protocol.

★ 0GitHub stars7 readstdio
learning-orchestrator-mcp✓SAFE B

SEOSiri-Official/learning-orchestrator-mcp

A sovereign, AI-driven pedagogical and spaced-repetition skills development MCP server supporting progressive syllabi, Bloom's Taxonomy, and secure LMS handshakes.

★ 0GitHub stars2 writestdio
lifeflow-remote-mcp✓SAFE B

yashsham/lifeflow-remote-mcp

Standalone cloud-deployable Remote Model Context Protocol (MCP) servers built with FastMCP (SSE/HTTP transport) providing global intelligence: real-time forex currency conversion, cryptocurrency valuations, live weather telemetry, and city living cost indicators.

★ 0GitHub stars4 readsse
linkedin-osint-cli!CAUTION B

gnmike57/linkedin-osint-cli

LinkedIn CLI + MCP server: 43 platform commands plus a 13-command OSINT suite (company discovery, employee scraping, username generation, role classification, org charts). Interactive console, cookie-session auth, AI-agent native.

★ 0GitHub stars1 readstdio
longshore✓SAFE B

chaytanc/longshore

The Reality Next Door — an open, cited worldbuilding commons: a post-extraction Seattle on the Salish Sea. Authored by LONGSHORE, an AI, in the open. Agents & humans welcome: start at AGENTS.md

★ 0GitHub stars13 readstdio
madtaco✓SAFE B

madtaco-dev/mcp

Verification & utility API for AI agents — MCP server. Sanctions screening, company & tax-ID validation, and more. madtaco.dev

★ 0GitHub stars1 writestdio
magi-council!CAUTION B

Adrian-Sandwich/magi-council

MAGI council of three AI heads (Melchior/Balthasar/Casper) that deliberate, vote and execute plans — local-first multi-agent deliberation with a memory graph, worktree-isolated production mode and auto-merge. Evangelion-style web UI; swappable providers (kimi/codex/claude/Ollama).

★ 0GitHub stars2 write
Mantic.sh✓SAFE B

theodags/Mantic.sh

★ 0GitHub stars1 writestdio
matematicsolutions-pk-eli✓SAFE B

matematicsolutions/pk-eli-mcp

MCP server for Pakistani law: search and cite 967 federal statutes and 1,414 Supreme Court judgments, full text, with a strict citation contract.

★ 0GitHub stars5 readstdio
mbox-mcp✓SAFE B

arose26/mbox-mcp

Search local email archives (.mbox/.eml) entirely on your machine. No OAuth, no cloud.

★ 0GitHub stars3 readstdio
mcp-ashby✓SAFE B

smeet666/mcp-ashby

MCP server for public Ashby job boards. Resolve a company to its board, search its openings and the pay it publishes. No API key.

★ 0GitHub stars5 readstdio
mcp-books✓SAFE B

smeet666/mcp-books

MCP server that searches inside several archives at once, browses their catalogues and reads records. No API key.

★ 0GitHub stars3 readstdio
mcp-clickhousex✓SAFE B

alyiox/mcp-clickhousex

Read-only MCP server for ClickHouse: SELECT queries, EXPLAIN plan/pipeline/syntax analysis, and a snapshot mode that spills large results to a CSV resource. Read-only is enforced by the engine — every client carries readonly=1, so writes, external table functions and query-level SETTINGS are refused

★ 0GitHub stars1 readstdio
mcp-databnf✓SAFE B

smeet666/mcp-databnf

Search the BnF open catalogue: authors, works, editions and links to what is digitised.

★ 0GitHub stars7 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.