MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/72
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
nokia2k2/youtube-transcript-apify
YouTube transcripts that keep working on AWS, GCP, Vercel and other cloud servers. Python client, CLI and MCP server.
shigechika/zapi-mcp
MCP server for the Zabbix API — daily brief, problems, hosts, items
makenotion/notion-mcp-server
Official Notion MCP Server
kubb-labs/kubb
🧡 Turn your API spec into type-safe code. Generate TypeScript types, API clients, hooks, validators and mocks from a spec such as OpenAPI.
study8677/antigravity-workspace-template
🧠 RepoBrain (formerly Antigravity) — Give your repo a brain. ChatGPT for your codebase: works in Claude Code, Cursor, Codex, Windsurf & more.
study8677/repobrain
🧠 RepoBrain (formerly Antigravity) — Give your repo a brain. ChatGPT for your codebase: works in Claude Code, Cursor, Codex, Windsurf & more.
yzfly/douyin-mcp-server
提取抖音无水印视频链接,视频文案,douyin-mcp-server,mcp,claude skill,支持龙虾
refreshdotdev/web-eval-agent
An MCP server that autonomously evaluates web applications.
withrefresh/web-eval-agent
An MCP server that autonomously evaluates web applications.
operative-sh/web-eval-agent
An MCP server that autonomously evaluates web applications.
disler/aider-mcp-server
Minimal MCP Server for Aider
portofcontext/pctx
pctx is the execution layer for agentic tool calls. It auto-converts agent tools and MCP servers into code that runs in secure sandboxes for token-efficient workflows.
qoyyuum/mcp-metatrader5-server
A Model Context Protocol (MCP) server for interacting with the MetaTrader 5 trading platform. This server provides AI assistants with tools and resources to access market data, perform trading operations, and analyze trading history.
xvhuan/xiaoi
小爱音箱语音通知工具:提供 CLI/TUI/MCP/Webhook 一键播报与控制音量,支持 PM2 常驻部署,支持docker部署。
ccabanillas/notion-mcp
A Model Context Protocol (MCP) server implementation for Notion integration, providing a standardized interface for interacting with Notion's API.
circleci-public/mcp-server-circleci
[DEPRECATED] This package is no longer maintained. Migrate to CircleCI's hosted MCP server or the CircleCI CLI MCP. See https://circleci.com/docs/guides/toolkit/circleci-mcp-overview/
dcspark/mcp-dockmaster
MCP Dockmaster allows you to easily install and manage MCP servers. Available for Mac, Windows and Linux as a Desktop App, CLI and a library.
fewsats/amazon-mcp
Amazon MCP server to search & buy products using the L402
eversinc33/triagemcp
Vibe Malware Triage - MCP server for static PE analysis.
osanoai/multicli
Gemini, Codex, Claude, and OpenCode all in a single MCP tool for use by any coding agent.
drjforrest/mcp-things3
A Model Context Protocol for reading todos and writing todos and projects in the macOS app Things3 using a combination of Applescript and x-call URLs.
jacobjandon/onionclaw
OnionClawTM — OpenClaw skill for full Tor dark web access: search .onion sites, fetch hidden services, rotate identity, run OSINT pipeline, craw.
yoloshii/gigaxity-deep-research
Open-source deep research MCP. Qwen3-30B-A3B-Thinking via OpenRouter, cited web synthesis for Claude Code, Codex, Cursor, Hermes and any MCP-compatible agent.
claude-world/trend-pulse
Free trending topics aggregator — 20 sources, zero auth. CLI + Python library + MCP Server.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?