MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/78
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
mb-dev/macos-ui-automation-mcp
sktime/sktime-mcp
An MCP (Model Context Protocol) layer that exposes sktime’s native registry and semantics to an LLM
hostinger/selfhosted-mcp-server-template
elementor/angie-sdk
Add Angie Chat Anywhere
swayingleaves/uml-mcp-server
openlinksoftware/mcp-sqlalchemy-server
A simple MCP ODBC server using FastAPI, ODBC and SQLAlchemy.
pascalorg/lingo
Make forms easier, LLM tools safer. Natural-language quantities, units, dates & ranges parsed into canonical values — zero dependencies, two-way.
mauropereiira/Moldavite
Your thoughts, forged from cosmic impact. A local-first, privacy-first Markdown notes app with a built-in MCP server, for macOS and Windows.
fruggr/zendesk-mcp-server
Bring Zendesk deep into your AI assistant: find answers and draft, update and translate Help Center articles, and manage Support tickets end to end: comments, triage and attachments. All in plain language.
fr0ster/mcp-abap-adt-clients
ADT clients for SAP ABAP systems - Read-only, CRUD, and Management operations
benwu95/prospec
A shared, resumable AI development workflow backed by project-local specs, rules, and change records. Skills guide agents; the CLI handles deterministic steps.
agentfront/mcp-from-openapi
Production-ready TypeScript library for converting OpenAPI specifications into MCP (Model Context Protocol) tool
Chris31372/better-chat
🤖 Build an AI chat app with multi-model support, secure user data isolation, and advanced features like model integration and persistent conversation management.
ignsm/formhaus
JSON form definition for React, Vue, Figma and AI agents: validation, conditional fields, multi-step and branching in one file. Zero-dependency core, MCP server, JSON Schema.
jchristn/NotDory
NotDory is durable memory your agents manage themselves — so every session starts where the last left off.
AceDataCloud/ProducerMCP
MCP server for Producer/Riffusion AI music generation via AceDataCloud API
AceDataCloud/FishMCP
Fish Audio MCP server — text-to-speech with Fish Audio voice models. Powered by AceDataCloud.
visterion/HiveMem
Personal knowledge system — MCP server with PostgreSQL semantic search and temporal knowledge graph
vinayvobbili/jobwatch
Watch company job boards (Greenhouse, Lever, Ashby, Workable, Workday, Eightfold, Rippling), get a ranked digest of new matches, track every application, and use it from Claude via MCP. Never auto-applies.
AlixAkhribi/mcp-whoop
Read-only Model Context Protocol server for WHOOP, over stdio. Browser OAuth login with automatic token refresh, and scope-gated tools across WHOOP's v2 API: cycles, sleep, recovery, workouts, profile and body measurements, plus summaries that digest the last N days into one answer.
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
timescale/pg-aiguide
MCP server and Claude plugin for Postgres skills and documentation. Helps AI coding tools generate better PostgreSQL code.
lycheemem/lycheemem
Lightweight Long-Term Memory for LLM Agents.
steipete/macos-automator-mcp
An MCP server to run AppleScript and JXA (JavaScript for Automation) to macOS.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?