MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/76
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
fannon/u-he-preset-randomizer
Generate u-he synth presets through randomization and merging of your existing presets.
rohitsingh-iitd/robinhood-mcp-server
The Robinhood MCP Server provides a comprehensive interface to the Robinhood Crypto API. This server handles authentication, account management, market data retrieval, and trading operations through both REST API and WebSocket interfaces.
flaviodelgrosso/fastify-mcp-server
Wire MCP protocol in your Fastify applications with ease
hideya/langchain-mcp-tools-py
MCP to LangChain Tools Conversion Utility / Python
pratikjadhav2726/unified-mcp-tool-graph
Instead of dumping 1000+ tools into a model’s prompt and expecting it to choose wisely, the Unified MCP Tool Graph equips your LLM with structure, clarity, and relevance. It fixes tool confusion, prevents infinite loops, and enables modular, intelligent agent workflows.
krekun/vrchat-mcp-osc
olalonde/mcp-human
Human Assistance for AI Assistants
mattiasw/browserloop
A Model Context Protocol (MCP) server for taking screenshots and reading console logs of web pages using Playwright.
amplitude/Amplitude-MCP-Analytics-Node
Amplitude MCP Analytics SDK - MCP tracking for Amplitude Analytics. :sparkles: :calendar: Book a session with us :arrow_down:
NestDevLab/agentwheel
Skills, rules, and instructions across every AI agent. One source, every agent.
shigechika/mcp-stdio
Bidirectional stdio ↔ HTTP gateway for MCP servers — connect clients to remote servers or publish local servers
nexibeo/jev-browser-control
Let Claude code, chatgpt codex or control your own Chrome. Chrome extension + MCP server: Jev, TypeSafe's decision model, picks each click in ~0.5 s for a fraction of a cent. MIT, bring your own OpenRouter key.
spencerbeggs/vitest-agent
A Vitest reporter that keeps results of test runs focused for LLMs
kyle122497/llamator-mcp-server
🚀 Automate LLM red teaming workflows with the MCP server for LLAMATOR, featuring asynchronous job handling and seamless integration.
KyaniteLabs/Achiote
Achiote — nostalgic food-memory reconstruction MCP server: recreates childhood dishes using ingredients available where you are
observer-protocol/at-directory
Agent commerce directory for Lightning, BOLT12, L402, and USDT merchants. Merchants self-register and land self-attested; an Observer Protocol attestation tier records what has been checked on each.
eater2/ai_agents_api_library
Verified catalog of 300+ APIs and MCP servers that AI agents can call after a one-time API key/OAuth setup. JSON, llms.txt and an MCP server for agents.
nishantsny/browden
Read-only browser MCP server — a local, configurable MCP shell around real Chrome for LLM agents.
keyuraghao/EDB_FILE_EXPLORER
Cross-platform GUI, CLI and MCP server for Microsoft ESE databases (ntds.dit, SRUDB.dat, Exchange .edb, WebCacheV01.dat, Windows.edb) - digital forensics tool with multi-format extract and reporting
Birdieflemishspeaking787/MCP_Detailed_With_Projects
Learn MCP with practical projects for beginner to advanced use, connecting AI models, tools, and external systems
orkestrel/probe
kujolang/mcp
Kujo-native MCP server framework.
korals-ai/mcp-broker
An MCP gateway for tool servers that aren't up yet — upstreams appear mid-session instead of blocking agent startup
Javi-cba/StoreTalk-MCP-Tiendanube
PROYECTO EN DESARROLLO: Gestioná tu tienda online conversando con tu asistente de IA. Creá, editá o borrá productos, actualizá precios y stock, revisá pedidos, consultá ventas y creá cupones en lenguaje natural, sin entrar al panel. Conectás tu tienda una vez y listo.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?