MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/75

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,777–1,800 · ranked by trust score, then stars
ServiceNow!CAUTION B

osomai/servicenow-mcp

MCP Server for ServiceNow

★ 303GitHub stars1 readstdio
Uteke!CAUTION B

codecoradev/uteke

🧠 The Brain for Your AI — Local-first memory engine for AI agents. Store, recall, and search memories with semantic embeddings. Single Rust binary, zero config, fully offline.

★ 269GitHub stars2 read
SAP Documentation✓SAFE B

marianfoo/mcp-sap-docs

Fast MCP server for unified SAP docs search (SAPUI5, CAP, OpenUI5, wdi5) with BM25 full-text search

★ 236GitHub stars24 readstdio
Oh My Cassette✓SAFE B

cassette-editor/oh-my-cassette

你的随身 AI 剪辑搭档 | Pocket AI co-editor for video montage — AI video editing plugin & MCP server for Claude Code, Codex, Hermes & OpenCode

★ 157GitHub stars6 readstdio
Systemprompt Code Orchestrator!CAUTION B

systempromptio/systemprompt-code-orchestrator

[DEPRECATED] Superseded by systempromptio/systemprompt-template and systempromptio/systemprompt-core. MCP server for orchestrating AI coding agents (Claude Code CLI & Gemini CLI).

★ 140GitHub stars11 writestreamable-http
MCPcat✓SAFE B

mcpcat/mcpcat-typescript-sdk

AgentCat is an analytics platform for MCP server owners 🐱.

★ 124GitHub stars7 writestreamable-http
Twilio!CAUTION B

twilio-labs/mcp

Monorepo providing 1) OpenAPI to MCP Tool generator 2) Exposing all of Twilio's API as MCP Tools

★ 112GitHub stars1 readstdio
InfraNodus!CAUTION B

infranodus/mcp-server-infranodus

The official InfraNodus MCP server

★ 102GitHub stars9 readsse
markdy-com!CAUTION B

HoangYell/markdy-com

🎬 Open-source animated architecture diagrams as code. Diagram-native DSL, 17 layout engines, Web Animations API, and MCP server for AI agents.

★ 97GitHub stars1 writestdio
Video Analyzer!CAUTION B

guimatheus92/mcp-video-analyzer

MCP server that turns any video — YouTube, Instagram, TikTok, Loom, X, Vimeo, direct URLs, local files — into transcripts, key frames, OCR text, and metadata for AI agents.

★ 90GitHub stars3 read
Overmind!CAUTION B

xuanlinai/overmind

玄霖超脑 · 无量网络 v4 重构版— 66 模块6通道 AI 认知神经系统 · 装一次,你所有的 AI 工具从此共享一个永远不失忆的大脑。跨会话记忆 · 多 Agent 互通 · 自动代码审查 · 零配置

★ 85GitHub stars2 write
Xiaohongshu✓SAFE B

todieornot/xiaohongshu-mcp-nodejs

企业级小红书MCP Node.js重构 - 支持多账号矩阵管理、反风控、数据采集与发布

★ 79GitHub stars1 read
OpenFinClaw!CAUTION B

mirror29/openfinclaw-cli

One-stop quant-trading AI agent — research · strategy · backtest · paper trade from one prompt. Works in Claude Code, Cursor, and 20+ AI agents via MCP. 60-second install with auto Skill registration.

★ 64GitHub stars3 writestdio
SunoMCP!CAUTION B

AceDataCloud/SunoMCP

MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.

★ 62GitHub stars10 readstdio
CAP Plugin✓SAFE B

gavdilabs/cap-mcp-plugin

MCP (Model Context Protocol) server plugin for CAP NodeJS

★ 61GitHub stars23 readstreamable-http
Alibaba Cloud RDS OpenAPI!CAUTION B

aliyun/alibabacloud-rds-openapi-mcp-server

MCP server for RDS Services via OPENAPI.

★ 54GitHub stars9 writestreamable-http
Dremio!CAUTION B

dremio/dremio-mcp

Dremio MCP server

★ 53GitHub stars4 readstreamable-http
Dev.to MCP Server!CAUTION B

nickytonline/dev-to-mcp

A remote Model Context Protocol (MCP) server for interacting with the dev.to public API without requiring authentication.

★ 45GitHub stars6 readstreamable-http
CDK Pywrapper!CAUTION B

sebotic/cdk_pywrapper

A Python wrapper for the Chemistry Development Kit (CDK)

★ 38GitHub stars8 read
1mcp✓SAFE B

buremba/mcpsandbox

Embedded sandbox with MCP proxy

★ 36GitHub stars2 write
1mcp✓SAFE B

buremba/1mcp

Embedded sandbox with MCP proxy

★ 36GitHub stars2 write
Google Researcher✓SAFE B

zoharbabin/google-researcher-mcp

⚠️ DEPRECATED — Use https://github.com/zoharbabin/web-researcher-mcp instead

★ 36GitHub stars12 readstdio
DBJavaGenix!CAUTION B

zhaoxingpeng/dbjavagenix

面向 Java 后端开发的智能数据库代码生成工具:基于 MCP 解析 MySQL 等数据库结构与关系,生成 Entity、DAO、Service、Controller 等分层代码,并支持模板扩展、规范校验与依赖管理。

★ 35GitHub stars2 writestdio
Cisco Support!CAUTION B

sieteunoseis/mcp-cisco-support

Comprehensive TypeScript MCP server for Cisco Support APIs with dual transport support

★ 33GitHub stars2 writesse

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.