MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/77

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,825–1,848 · ranked by trust score, then stars
Nocturne Memory!CAUTION B

dataojitori/nocturne_memory

A lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Say goodbye to Vector RAG and amnesia. Empower your AI with persistent, graph-like structured memory across any model, session, or tool. Drop-in replacement for OpenClaw.

★ 1,371GitHub stars2 readstreamable-http
mcp-searxng✓SAFE B

ihor-sokoliuk/mcp-searxng

Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client

★ 1,284GitHub stars6 readstdio
SearXNG✓SAFE B

ihor-sokoliuk/mcp-searxng

Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client

★ 1,260GitHub stars4 readstdio
Finance Data Server!CAUTION B

guangxiangdebizi/financemcp

这是一个金融领域相关的mcp,本项目通过集成 Tushare API 和 Binance API 为语言模型(如Claude)提供全面的实时金融数据访问能力,支持股票、基金、债券、宏观经济指标、稳定币、虚拟货币等多维度金融数据分析。其中也包含了金融数据查询、财经新闻查询、国家统计局数据查询等

★ 860GitHub stars18 readstreamable-http
Next.js DevTools!CAUTION B

vercel/next-devtools-mcp

Next.js Development for Coding Agent

★ 823GitHub stars1 writestdio
mcp-handler✓SAFE B

vercel/mcp-handler

Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more

★ 684GitHub stars4 readstreamable-http
mcp-handler✓SAFE B

vercel-labs/mcp-handler

Easily spin up an MCP Server on Next.js, Nuxt, Svelte, and more

★ 683GitHub stars4 readstreamable-http
Pullmd✓SAFE B

aeternalabshq/pullmd

Self-hosted URL- and file-to-Markdown service for humans and AI agents - web pages, documents, images, audio, YouTube. PWA + REST + MCP + Claude Code skill, Reddit-aware, refreshable share links.

★ 485GitHub stars3 readstreamable-http
Ratel!CAUTION B

ratel-ai/ratel

Context engineering for AI agents. ~80% fewer tokens. Fix tool overload. Skills and memory with in-process BM25 and semantic retrieval. Progressive Disclosure. No vector DB.

★ 462GitHub stars12 writestreamable-http
Claude Gemini✓SAFE B

cmdaltctr/claude-gemini-mcp-slim

Lightweight MCP integration bringing Google's Gemini AI capabilities to Claude Code with 1M+ token context window, smart model selection, and powerful code analysis tools

★ 233GitHub stars3 readstdio
Notion!CAUTION B

danhilse/notion_mcp

A simple MCP integration that allows Claude to read and manage a personal Notion todo list

★ 208GitHub stars1 writestdio
Zen7 Payment Agent!CAUTION B

zen7-labs/zen7-payment-agent

Zen7 Payment Agent is the first implementation project of DePA (Decentralized Payment Agent), pioneers next-generation intelligent payment infrastructure.

★ 178GitHub stars1 writesse
SQLite Explorer!CAUTION B

hannesrudolph/sqlite-explorer-fastmcp-mcp-server

An MCP server that provides safe, read-only access to SQLite databases through Model Context Protocol (MCP). This server is built with the FastMCP framework, which enables LLMs to explore and query SQLite databases with built-in safety features and query validation.

★ 108GitHub stars1 write
Chat Application!CAUTION B

machaojin1917939763/mcp-ui

基于MCP(Model Context Protocol)的智能聊天应用,支持Web和桌面环境。集成OpenAI/Anthropic API,提供MCP服务器的所有工具能力。简洁现代的UI设计,支持跨平台部署。

★ 89GitHub stars2 read
SmartDB!CAUTION B

wenb1n-dev/smartdb_mcp

Universal database MCP server connecting to MySQL, PostgreSQL, SQL Server, MariaDB,DM8,Oracle,not only provides basic database connection such as OAuth 2.0 authentication , health checks, SQL optimization, and index health detection

★ 77GitHub stars18 readstdio
PlumoAI!CAUTION B

plumoai/plumoai

World's First Autonomous Open-source Pretrained AI Employees Platform

★ 76GitHub stars4 write
Codebase Context!CAUTION B

patricksys/codebase-context

Codebase Context gives AI agents understanding of your codebase through semantic code search, team conventions, patterns, and memory, so they use fewer tokens, spend less time, and produce better, more familiar output.

★ 65GitHub stars1 writestdio
Suno!CAUTION B

acedatacloud/sunomcp

MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.

★ 64GitHub stars10 readstdio
Bank!CAUTION B

elcukro/bank-mcp

Give your AI assistant secure, read-only access to your bank accounts. MCP server supporting Plaid, Teller, Enable Banking, and Tink.

★ 50GitHub stars5 readstdio
Withings!CAUTION B

akutishevsky/withings-mcp

MCP server for Withings health data integration

★ 43GitHub stars14 readstreamable-http
File Context✓SAFE B

bsmi021/mcp-file-context-server

A Model Context Protocol (MCP) server that provides file system context to Large Language Models (LLMs). This server enables LLMs to read, search, and analyze code files with advanced caching and real-time file watching capabilities.

★ 39GitHub stars1 writestdio
Better Godot✓SAFE B

n24q02m/better-godot-mcp

Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.

★ 36GitHub stars1 writestdio
Pdf2Md!CAUTION B

futureunreal/mcp-pdf2md

PDF to Markdown conversion tool

★ 34GitHub stars2 read
ChessAgine!CAUTION B

jalpp/chessagine-mcp

ChessAgine MCP is a MCP server that gives AI agents access to chess domain knowledge.

★ 33GitHub stars6 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.