MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/7
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
145–168 of 3,145 · ranked by trust score, then stars
E2B
e2b-dev/mcp-server
Giving Claude ability to run code with E2B via MCP (Model Context Protocol)
VS Code Server
juehang/vscode-mcp-server
MCP server to expose VS Code editing features to an LLM for AI coding
AkTools
aahl/mcp-aktools
📈 提供股票、加密货币的数据查询和分析功能MCP服务器
Maa
maa-ai/maamcp
基于 MaaFramework 的 MCP 服务器 为 AI 助手提供 Android 设备和 Windows 桌面自动化能力
Azan
ahmedeltaher/azan-mcp
Azan + Prayer Time + MCP + AI Agents + Islamic + Salah + A lightweight MCP library to calculate prayer times and trigger Azan with a single tool call. If you’re building an AI agent or prayer application, there’s no need to deal with astronomical calculations, timezones, or edge cases again.
Computer Use
domdomegg/computer-use-mcp
💻 Give AI models complete control of your computer (probably a bad idea)
Run Model Context Protocol (MCP) servers with AWS Lambda
awslabs/run-model-context-protocol-servers-with-aws-lambda
Run existing Model Context Protocol (MCP) stdio-based servers in AWS Lambda functions
EVM
mcpdotdirect/evm-mcp-server
MCP server that provides LLMs with tools for interacting with EVM networks
BloodHound AI
mordavid/bloodhound-mcp-ai
BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.
Trading Skills
staskh/trading_skills
Claude powered advisor system for option traders
GPT Researcher
assafelovic/gptr-mcp
MCP server for enabling LLM applications to perform deep research via the MCP protocol
Erick Wendel Contributions
erickwendel/erickwendel-contributions-mcp
A Model Context Protocol (MCP) server that provides tools to query Erick Wendel's contributions across different platforms
Facebook Ads
gomarble-ai/facebook-ads-mcp-server
Acemcp
yeuxuan/ace-mcp-node
Acemcp 是一个高性能的 MCP (Model Context Protocol) 服务器,专为 AI 助手(如 Claude、GPT 等)提供代码库索引和语义搜索能力。通过 Acemcp,AI 助手可以: 🔍 快速搜索和理解大型代码库 📊 获取带行号的精确代码片段 🤖 自动增量更新索引 🌐 通过 Web 界面管理和调试
H1 Brain
patrikfehrenbach/h1-brain
MCP server that connects AI assistants to HackerOne for bug bounty hunting
Interactive
ttommyth/interactive-mcp
Vibe coding should have human in the loop! interactive-mcp: Local, cross-platform MCP server for interact with your AI Agent
Apple Shortcuts
recursechat/mcp-server-apple-shortcuts
Base
base/base-mcp
A Model Context Protocol (MCP) server that provides onchain tools for LLMs, allowing them to interact with the Base network and Coinbase API.
Debugger
scriptedalchemy/devtools-debugger-mcp
An MCP server exposing full Chrome DevTools Protocol debugging: breakpoints, step/run, call stacks, eval, and source maps.
Omnisearch
spences10/mcp-omnisearch
🔍 A Model Context Protocol (MCP) server providing unified access to multiple search engines (Tavily, Brave, Kagi, Exa), AI tools (Kagi FastGPT, Exa, Linkup), and content extraction services (Firecrawl, Tavily, Kagi). Includes GitHub search. All through a single interface.
Investor Agent
ferdousbhai/investor-agent
A Model Context Protocol server for building an investor agent
Linear
jerhadf/linear-mcp-server
A server that integrates Linear's project management system with the Model Context Protocol (MCP) to allow LLMs to interact with Linear.
Codemogger
glommer/codemogger
Codemogger is a code indexing library and MCP server for AI coding agents
OnionClaw
christinminor459/onionclaw
Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?