MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/78

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,849–1,872 · ranked by trust score, then stars
macOS UI Automation✓SAFE B

mb-dev/macos-ui-automation-mcp

★ 33GitHub stars8 readsse
Sktime✓SAFE B

sktime/sktime-mcp

An MCP (Model Context Protocol) layer that exposes sktime’s native registry and semantics to an LLM

★ 31GitHub stars1 writestdio
Professional SEO Checker✓SAFE B

hostinger/selfhosted-mcp-server-template

★ 29GitHub stars3 readstreamable-http
@elementor/angie-sdk✓SAFE B

elementor/angie-sdk

Add Angie Chat Anywhere

★ 28GitHub stars4 writestreamable-http
UML Diagram Generator✓SAFE B

swayingleaves/uml-mcp-server

★ 27GitHub stars10 readsse
SQLAlchemy!CAUTION B

openlinksoftware/mcp-sqlalchemy-server

A simple MCP ODBC server using FastAPI, ODBC and SQLAlchemy.

★ 25GitHub stars2 write
lingo!CAUTION B

pascalorg/lingo

Make forms easier, LLM tools safer. Natural-language quantities, units, dates & ranges parsed into canonical values — zero dependencies, two-way.

★ 20GitHub stars1 write
Moldavite!CAUTION B

mauropereiira/Moldavite

Your thoughts, forged from cosmic impact. A local-first, privacy-first Markdown notes app with a built-in MCP server, for macOS and Windows.

★ 13GitHub stars1 read
zendesk-mcp-server!CAUTION B

fruggr/zendesk-mcp-server

Bring Zendesk deep into your AI assistant: find answers and draft, update and translate Help Center articles, and manage Support tickets end to end: comments, triage and attachments. All in plain language.

★ 12GitHub stars1 writestdio
@mcp-abap-adt/adt-clients!CAUTION B

fr0ster/mcp-abap-adt-clients

ADT clients for SAP ABAP systems - Read-only, CRUD, and Management operations

★ 6GitHub stars11 read
prospec!CAUTION B

benwu95/prospec

A shared, resumable AI development workflow backed by project-local specs, rules, and change records. Skills guide agents; the CLI handles deterministic steps.

★ 5GitHub stars8 writestdio
mcp-from-openapi✓SAFE B

agentfront/mcp-from-openapi

Production-ready TypeScript library for converting OpenAPI specifications into MCP (Model Context Protocol) tool

★ 4GitHub stars12 read
better-chat!CAUTION B

Chris31372/better-chat

🤖 Build an AI chat app with multi-model support, secure user data isolation, and advanced features like model integration and persistent conversation management.

★ 3GitHub stars3 readstreamable-http
formhaus!CAUTION B

ignsm/formhaus

JSON form definition for React, Vue, Figma and AI agents: validation, conditional fields, multi-step and branching in one file. Zero-dependency core, MCP server, JSON Schema.

★ 3GitHub stars2 writestdio
NotDory✓SAFE B

jchristn/NotDory

NotDory is durable memory your agents manage themselves — so every session starts where the last left off.

★ 2GitHub stars4 readstreamable-http
ProducerMCP!CAUTION B

AceDataCloud/ProducerMCP

MCP server for Producer/Riffusion AI music generation via AceDataCloud API

★ 2GitHub stars1 writestdio
FishMCP!CAUTION B

AceDataCloud/FishMCP

Fish Audio MCP server — text-to-speech with Fish Audio voice models. Powered by AceDataCloud.

★ 1GitHub stars4 readstdio
HiveMem✓SAFE B

visterion/HiveMem

Personal knowledge system — MCP server with PostgreSQL semantic search and temporal knowledge graph

★ 1GitHub stars1 read
jobwatch!CAUTION B

vinayvobbili/jobwatch

Watch company job boards (Greenhouse, Lever, Ashby, Workable, Workday, Eightfold, Rippling), get a ranked digest of new matches, track every application, and use it from Claude via MCP. Never auto-applies.

★ 0GitHub stars2 writestdio
mcp-whoop!CAUTION B

AlixAkhribi/mcp-whoop

Read-only Model Context Protocol server for WHOOP, over stdio. Browser OAuth login with automatic token refresh, and scope-gated tools across WHOOP's v2 API: cycles, sleep, recovery, workouts, profile and body measurements, plus summaries that digest the last N days into one answer.

★ 0GitHub stars14 read
ghidra-mcp!CAUTION B

bethington/ghidra-mcp

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

★ 4,899GitHub stars3 readstdio
Pg Aiguide!CAUTION B

timescale/pg-aiguide

MCP server and Claude plugin for Postgres skills and documentation. Helps AI coding tools generate better PostgreSQL code.

★ 1,849GitHub stars1 readstreamable-http
LycheeMem!CAUTION B

lycheemem/lycheemem

Lightweight Long-Term Memory for LLM Agents.

★ 1,092GitHub stars4 read
MacOS Automator✓SAFE B

steipete/macos-automator-mcp

An MCP server to run AppleScript and JXA (JavaScript for Automation) to macOS.

★ 885GitHub stars1 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.