MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/73
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
prefecthq/prefect-mcp-server
Prefect MCP server
mcpcat/mcpcat-python-sdk
AgentCat is an analytics platform for MCP server owners 🐱.
d-kimuson/modular-mcp
A Model Context Protocol (MCP) proxy server that enables efficient management of large tool collections across multiple MCP servers by grouping them and loading tool schemas on-demand.
lxe/chrome-mcp
Allows LLM agents to control a local chrome instance without taking screenshots
xiaonieli7/flightticketmcp
Flight Ticket MCP Server 实现了供航空机票相关查询操作的工具和资源。它作为AI助手与航空服务系统之间的桥梁,专注于航班实时动态查询功能。
himanshusanecha/mcp-osint-server
bjeans/homelab-mcp
Model Context Protocol (MCP) servers for managing homelab infrastructure through Claude Desktop. Monitor Docker/Podman containers, Ollama AI models, Pi-hole DNS, Unifi networks, and Ansible inventory. Includes security checks, templates, and automated pre-push validation. Production-ready for homela
chapirousia/pje-mcp-server
yindia/rootcause
RootCause is a local-first MCP server that turns natural-language requests into evidence-backed incident analysis, Kubernetes diagnostics, and safer operations.
symfony/ai-mate
AI development assistant CLI for Symfony projects
Wolfe-Jam/faf-cli
The context every AI coding agent reads — authors AGENTS.md, CLAUDE.md, GEMINI.md & .cursorrules from your repo's real stack. IANA-registered .faf format.
tercumantanumut/sunnysidefigma-context-mcp
A comprehensive Model Context Protocol (MCP) server that bridges Figma designs with AI development workflows. It provides 30 specialized tools for extracting pixel-perfect code, assets, and component structures directly from Figma designs.
digitarald/vscode-agent-todos
Gives VS Code agent mode planning superpowers with dynamic todo lists
n24q02m/better-notion-mcp
Markdown-first Notion for AI agents -- pages, databases, blocks, and comments in one call.
aws-samples/sample-cfm-tips-mcp
A MCP Server that's built on top of AWS Cloud Financial Management (CFM) Technical Implementation Playbooks (TIPs) - our proven collection of cost optimization best practices
carlosazaustre/advocu-mcp-server
rollbar/rollbar-mcp-server
Model Context Protocol server for Rollbar
junfanz1/mcp-multiserver-interoperable-agent2agent-langgraph-ai-system
This project demonstrates a decoupled real-time agent architecture that connects LangGraph agents to remote tools served by custom MCP (Modular Command Protocol) servers. The architecture enables a flexible and scalable multi-agent system where each tool can be hosted independently (via SSE or STDIO
ctvidic/whoop-mcp-server
dazeb/mcp-github-mapper
MCP GitHub Mapper is a MCP tool that will map any repository remotely and import the map directly into your code editor.
kerbelp/metatron
Git-native context layer for AI coding agents. Your team's real engineering decisions — patterns, pitfalls, conventions — live as reviewed markdown files in your repo; agents consult them before writing code and record what they learn. Files-first, no server required; MCP as an optional serving laye
hanweg/mcp-tool-builder
MCP server that creates its own tools as needed
longnguyen0612/v0-platform-mcp
jigsawstack/jigsawstack-mcp-server
Model Context Protocol Server that allows AI models to interact with JigsawStack models!
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?