MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/74

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,753–1,776 · ranked by trust score, then stars
BiznagaFest Demos✓SAFE B

0gis0/biznagafest-mcp

MCP Servers en Málaga con salero

★ 21GitHub stars3 readstdio
archprint✓SAFE B

Tommkruix/archprint

Infers architecture rules from your TypeScript repo's real import graph, gates each on statistical evidence, and emits them into the tools you already use (ESLint, dependency-cruiser, ts-arch). Turns the boundaries your code already follows into enforcement, so architecture drift gets caught, not ju

★ 7GitHub stars4 writestdio
ennodia✓SAFE B

cherninlab/ennodia

Connects the AI agents you use: your agent hands a task to another and gets the answer back

★ 6GitHub stars9 writestdio
mcp!CAUTION B

arcmira/mcp

YouTube transcript search for your AI. Find who said what with timestamps, mentions, sponsors, and recommendations. Remote MCP and agent skills.

★ 4GitHub stars1 writestreamable-http
mcp-tenant-isolation!CAUTION B

subodhkc/mcp-tenant-isolation

Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.

★ 4GitHub stars5 readstdio
Unity Editor✓SAFE B

ozankasikci/unity-editor-mcp

An MCP server and client for LLMs to interact with Unity Projects

★ 3GitHub stars2 writestdio
rag-vault!CAUTION B

RobThePCGuy/rag-vault

One command. Zero cloud. Your docs stay private.

★ 2GitHub stars7 readsse
anacraft!CAUTION B

anacrafterdev/anacraft

Google Analytics, mined block by block — Minecraft-themed TUI dashboard for GA4

★ 1GitHub stars1 writestreamable-http
anacraft!CAUTION B

mehfuzh/anacraft

Google Analytics, mined block by block — Minecraft-themed TUI dashboard for GA4

★ 1GitHub stars1 writestreamable-http
telugu-calendar-utilities!CAUTION B

socraticsurge/telugu-calendar-utilities

Telugu Panchangam as calendar feeds — tithi, nakshatra, muhurtams, Ekadashi and 30+ festivals for 22 cities, in Drik Ganita, Surya Siddhanta and Vakya systems. Plus an MCP server for AI assistants.

★ 1GitHub stars16 readstdio
tersignhq-evidence!CAUTION B

tersignhq/tersign-js

TypeScript SDK + MCP server for Tersign, the evidence layer for the agent economy — counter-signed EIP-712 receipts, hash-chained action and disclosure records, refunds, disputes, venue-ready evidence envelopes. npm: tersign

★ 1GitHub stars1 writestdio
gramps-evidence-mcp✓SAFE B

ianderso/gramps-evidence-mcp

MCP server for evidence-disciplined genealogy: read/write access to a self-hosted Gramps Web tree where every fact carries a citation, plus a read-only reference layer over legacy GEDCOM exports.

★ 0GitHub stars2 writestdio
vega-vvd-driver!CAUTION B

fortemate/vega-vvd-driver

Drive the Vega Virtual Device from scripts and AI agents: remote keys, screenshots, video with sound, frame capture and an MCP server. Unofficial; not affiliated with Amazon.

★ 0GitHub stars1 writestdio
WebExtratorMCP!CAUTION B

AceDataCloud/WebExtratorMCP

MCP server for web extraction and rendering via Ace Data Cloud.

★ 0GitHub stars1 readstdio
hyperresearch!CAUTION B

jordan-gibbs/hyperresearch

Convert Claude Code or Codex into the most intelligent Deep Research Agent. Collect, search, and synthesize web research into a persistent, searchable wiki that builds on itself. Hosted API + MCP: hyperresearch.ai

★ 3,824GitHub stars4 writestreamable-http
Fli✓SAFE B

punitarani/fli

Google Flights MCP, CLI and Python Library

★ 3,179GitHub stars1 readstdio
Local REST API!CAUTION B

coddingtonbear/obsidian-local-rest-api

A secure REST API and Model Context Protocol (MCP) server for your vault.

★ 2,946GitHub stars7 readstreamable-http
Shrimp Task Manager✓SAFE B

cjo4m06/mcp-shrimp-task-manager

Shrimp Task Manager is a task tool built for AI Agents, emphasizing chain-of-thought, reflection, and style consistency. It converts natural language into structured dev tasks with dependency tracking and iterative refinement, enabling agent-like developer behavior in reasoning AI systems.

★ 2,150GitHub stars2 readstdio
Context Space!CAUTION B

context-space/context-space

Ultimate Context Engineering Infrastructure, starting from MCPs and Integrations

★ 813GitHub stars4 readstreamable-http
Vercel Adapter✓SAFE B

vercel/mcp-adapter

Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more

★ 678GitHub stars3 readstreamable-http
Reddit Content!CAUTION B

adhikasp/mcp-reddit

A Model Context Protocol (MCP) server that provides tools for fetching and analyzing Reddit content.

★ 425GitHub stars1 write
Nano Banana✓SAFE B

zhongweili/nanobanana-mcp-server

AI image generation MCP server powered by Google Gemini, with smart model selection and 4K output

★ 400GitHub stars1 readstdio
Paws-on✓SAFE B

hemanth/paws-on-mcp

A comprehensive Model Context Protocol (MCP) server implementing the latest specification.

★ 327GitHub stars1 writestreamable-http
ServiceNow!CAUTION B

echelon-ai-labs/servicenow-mcp

MCP Server for ServiceNow

★ 303GitHub stars1 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.