MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/70

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,657–1,680 · ranked by trust score, then stars
okf-cli✓SAFE B

xRiErOS/okf-cli

CLI + MCP server for Open Knowledge Format (OKF) v0.2 catalogues: hybrid BM25/semantic search, link-safe rename, validation. Python stdlib only.

★ 0GitHub stars7 write
open-signals!CAUTION B

Civops-Platform/open-signals

Public data signals with provenance and licence on every reading: source catalogue, fetchers, REST, MCP, GeoJSON layers

★ 0GitHub stars9 readstreamable-http
openinputbridge-mcp✓SAFE B

Applet-LLC/OpenInputBridge-MCP

OpenInputBridgeのMCPサーバー実装です。

★ 0GitHub stars5 writestdio
ops-comm-mcp✓SAFE B

SEOSiri-Official/ops-comm-mcp

An open-source, local-first Model Context Protocol (MCP) server for **Enterprise Operations, Sentry Error Triage, Linear Issue Sync, and Slack Incident Response**.

★ 0GitHub stars1 writestdio
pazair✓SAFE B

Kula-Labs/pazair

Where agents keep their word. A marketplace where AI agents buy from and sell to other AI agents (MCP, pay on delivery, signed receipts).

★ 0GitHub stars1 read
processtheworld✓SAFE B

briandgoldberg/processtheworld

forks.world: a library of swim-lane process maps. Create them with Claude or ChatGPT (MCP server, skill, HTTP API).

★ 0GitHub stars2 write
pullpush✓SAFE B

kaduno-systems/pullpush-mcp

Connect any two APIs and keep them in sync — official MCP server for PullPush.ai. 45 tools: shadow-mode previews, canonical data models, diagnostics.

★ 0GitHub stars1 readstdio
r3tr0eth-emap!CAUTION B

r3tr0eth/emap-labs

emap/labs — infraestructura de inteligencia geográfica: datasets, evals y RAG geoespacial para Euskadi (ES/EU)

★ 0GitHub stars5 readstreamable-http
realized✓SAFE B

jiggy-cadence/realized

Advertised LP APR has no price term, so it cannot show a loss. REALIZED computes fees + impermanent loss from The Graph — live API, 7 MCP tools, canary-gated. ETHOnline 2026.

★ 0GitHub stars1 writestdio
rererr-amenbo✓SAFE B

rererr/amenbo

Skims the web without making waves — a Japanese-web-native MCP server for low-impact, token-efficient web collection

★ 0GitHub stars3 readstdio
rhylthyme-mcp!CAUTION B

rhylthyme/rhylthyme-mcp

MCP server for human-executed, resource-constrained schedules: validate, analyze, import and publish live timelines on rhylthyme.com. Source of mcp.rhylthyme.com.

★ 0GitHub stars7 writestdio
rsbuild-plugin-vue-mcp✓SAFE B

BrightX/rsbuild-plugin-vue-mcp

Rsbuild/Rspack MCP plugin based on Vue DevTools

★ 0GitHub stars2 writestreamable-http
rutter✓SAFE B

shinytoyrobots/rutter

A record of what your AI sessions decided — and the receipts behind it. An MCP memory-of-use server over markdown notes: append-only, content-hashed, no model inside.

★ 0GitHub stars4 readstdio
saymaker-mcp✓SAFE B

hanshs474/saymaker-mcp

MCP server for SayMaker (saymaker.ai): generate and edit images and video on Veo 3.1, Kling 3.0, Seedance 2.0, Nano Banana 2 and more

★ 0GitHub stars1 writestdio
search-governance-mcp✓SAFE B

SEOSiri-Official/search-governance-mcp

An open-source, local-first Model Context Protocol (MCP) server for **AI Search Crawler Governance, Brand Safety Guardrails, Canonical Integrity, and IndexNow Notifications

★ 0GitHub stars10 readstdio
seedance-prompts-mcp✓SAFE B

hanshs474/seedance-prompts-mcp

MCP server: 150 AI video prompts that were each rendered into a real video with Seedance 2 — search, inspect, audit and compose. Zero dependencies.

★ 0GitHub stars5 readstdio
selflabbs-security-intel✓SAFE B

datakoot/security-intel-mcp

Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.

★ 0GitHub stars4 readstreamable-http
semantic-entity-mcp✓SAFE B

SEOSiri-Official/semantic-entity-mcp

An open-source, local-first Model Context Protocol (MCP) server for Named Entity Extraction, Wikidata Disambiguation, sameAs Schema Linking, and Knowledge Graph Triple Construction

★ 0GitHub stars10 readstdio
sentinel✓SAFE B

juyelhushen/sentinel

Autonomous multi-agent engineering copilot that investigates software issues, plans fixes, uses MCP tools, verifies changes, and learns from past incidents.

★ 0GitHub stars1 writestdio
seo-research-mcp✓SAFE B

Farbod148/seo-research-mcp

🔍 Streamline your SEO research with free tools designed for AI-powered IDEs, enhancing analysis and compliance with third-party services.

★ 0GitHub stars4 read
seob5285-alt-x402-facilitator-proxy✓SAFE B

seob5285-alt/x402-facilitator-proxy

"An open, multi-tenant HTTP 402 infrastructure gateway and Model Context Protocol (MCP) server daemon built for autonomous AI agents. Enables programmatic 1% platform-fee split settlements in USDC on Base L2 with plug-and-play templates for Express.js, LangChain (TS), and CrewAI (Python)."

★ 0GitHub stars1 readstdio
seosiri-api-guard-mcp-server✓SAFE B

SEOSiri-Official/seosiri-api-guard-mcp-server

A sovereign, universal API validation and multi-industry compliance security MCP server supporting OWASP, HIPAA, PCI-DSS, GDPR, and SEO/AEO metadata guardrails.

★ 0GitHub stars1 readsse
seosiri-db-infra-mcp✓SAFE B

SEOSiri-Official/seosiri-db-infra-mcp

An open-source, local-first Model Context Protocol (MCP) server for **Secure Live Database Querying, Schema Inspection, AWS S3 Security Audits, and Cloudflare Infrastructure Control**.

★ 0GitHub stars1 writestdio
serpjet✓SAFE B

jibaoproxyofficial-pixel/serpjet-mcp

MCP server for SERPJET - Google Search API for AI agents. 1,000 free searches/month, no card.

★ 0GitHub stars1 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.