MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/72

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,705–1,728 · ranked by trust score, then stars
youtube-transcript-apify✓SAFE B

nokia2k2/youtube-transcript-apify

YouTube transcripts that keep working on AWS, GCP, Vercel and other cloud servers. Python client, CLI and MCP server.

★ 0GitHub stars2 readstdio
zapi-mcp✓SAFE B

shigechika/zapi-mcp

MCP server for the Zabbix API — daily brief, problems, hosts, items

★ 0GitHub stars2 writestdio
Notion!CAUTION B

makenotion/notion-mcp-server

Official Notion MCP Server

★ 4,641GitHub stars1 writestdio
Changesets✓SAFE B

kubb-labs/kubb

🧡 Turn your API spec into type-safe code. Generate TypeScript types, API clients, hooks, validators and mocks from a spec such as OpenAPI.

★ 1,818GitHub stars5 write
Antigravity Workspace✓SAFE B

study8677/antigravity-workspace-template

🧠 RepoBrain (formerly Antigravity) — Give your repo a brain. ChatGPT for your codebase: works in Claude Code, Cursor, Codex, Windsurf & more.

★ 1,326GitHub stars1 writestdio
RepoBrain✓SAFE B

study8677/repobrain

🧠 RepoBrain (formerly Antigravity) — Give your repo a brain. ChatGPT for your codebase: works in Claude Code, Cursor, Codex, Windsurf & more.

★ 1,326GitHub stars1 writestdio
Douyin!CAUTION B

yzfly/douyin-mcp-server

提取抖音无水印视频链接,视频文案,douyin-mcp-server,mcp,claude skill,支持龙虾

★ 1,273GitHub stars5 read
Web Eval Agent!CAUTION B

refreshdotdev/web-eval-agent

An MCP server that autonomously evaluates web applications.

★ 1,235GitHub stars2 readstdio
Web Eval Agent!CAUTION B

withrefresh/web-eval-agent

An MCP server that autonomously evaluates web applications.

★ 1,235GitHub stars2 readstdio
WebEvalAgent!CAUTION B

operative-sh/web-eval-agent

An MCP server that autonomously evaluates web applications.

★ 1,235GitHub stars2 readstdio
Aider✓SAFE B

disler/aider-mcp-server

Minimal MCP Server for Aider

★ 308GitHub stars1 writestdio
PCTX!CAUTION B

portofcontext/pctx

pctx is the execution layer for agentic tool calls. It auto-converts agent tools and MCP servers into code that runs in secure sandboxes for token-efficient workflows.

★ 279GitHub stars1 writestdio
Metatrader 5!CAUTION B

qoyyuum/mcp-metatrader5-server

A Model Context Protocol (MCP) server for interacting with the MetaTrader 5 trading platform. This server provides AI assistants with tools and resources to access market data, perform trading operations, and analyze trading history.

★ 228GitHub stars2 writestdio
Xiaoi!CAUTION B

xvhuan/xiaoi

小爱音箱语音通知工具:提供 CLI/TUI/MCP/Webhook 一键播报与控制音量,支持 PM2 常驻部署,支持docker部署。

★ 204GitHub stars1 writestdio
Notion!CAUTION B

ccabanillas/notion-mcp

A Model Context Protocol (MCP) server implementation for Notion integration, providing a standardized interface for interacting with Notion's API.

★ 111GitHub stars2 writestdio
CircleCI!CAUTION B

circleci-public/mcp-server-circleci

[DEPRECATED] This package is no longer maintained. Migrate to CircleCI's hosted MCP server or the CircleCI CLI MCP. See https://circleci.com/docs/guides/toolkit/circleci-mcp-overview/

★ 93GitHub stars1 readsse
Dockmaster!CAUTION B

dcspark/mcp-dockmaster

MCP Dockmaster allows you to easily install and manage MCP servers. Available for Mac, Windows and Linux as a Desktop App, CLI and a library.

★ 89GitHub stars3 readstdio
Amazon Shopping✓SAFE B

fewsats/amazon-mcp

Amazon MCP server to search & buy products using the L402

★ 81GitHub stars3 writestreamable-http
Vibe Malware Triage✓SAFE B

eversinc33/triagemcp

Vibe Malware Triage - MCP server for static PE analysis.

★ 78GitHub stars4 writesse
Multi-CLI✓SAFE B

osanoai/multicli

Gemini, Codex, Claude, and OpenCode all in a single MCP tool for use by any coding agent.

★ 75GitHub stars16 readstdio
Things3 Integration!CAUTION B

drjforrest/mcp-things3

A Model Context Protocol for reading todos and writing todos and projects in the macOS app Things3 using a combination of Applescript and x-call URLs.

★ 75GitHub stars2 writestdio
OnionClaw!CAUTION B

jacobjandon/onionclaw

OnionClawTM — OpenClaw skill for full Tor dark web access: search .onion sites, fetch hidden services, rotate identity, run OSINT pipeline, craw.

★ 68GitHub stars1 write
Gigaxity Deep Research✓SAFE B

yoloshii/gigaxity-deep-research

Open-source deep research MCP. Qwen3-30B-A3B-Thinking via OpenRouter, cited web synthesis for Claude Code, Codex, Cursor, Hermes and any MCP-compatible agent.

★ 62GitHub stars1 writestdio
Trend Pulse!CAUTION B

claude-world/trend-pulse

Free trending topics aggregator — 20 sources, zero auth. CLI + Python library + MCP Server.

★ 62GitHub stars3 write

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.