MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/79
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
indragiek/uniprof
Universal CPU profiler designed for humans and AI agents
comet-ml/opik-mcp
Model Context Protocol (MCP) server for Opik, the open-source LLM observability and evaluation platform, built by Comet. Read traces, log scores, and manage prompts from Claude Code, Cursor, or VS Code.
comet-ml/opik-mcp
Model Context Protocol (MCP) server for Opik, the open-source LLM observability and evaluation platform, built by Comet. Read traces, log scores, and manage prompts from Claude Code, Cursor, or VS Code.
browserstack/mcp-server
BrowserStack's Official MCP Server
manavmishra/ZeroSlop
Open-source Agent Skill that finds and removes AI slop from your writing
auth0/auth0-mcp-server
Connect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.
vertile-ai/next-mcp-server
Help LLMs to understand your Next apps better
jazelly/next-mcp-server
Help LLMs to understand your Next apps better
abrinsmead/mindpilot-mcp
See through your agent's eyes. Visualize legacy code, architect new systems, understand everything.
yuchenssr/multi-ai-advisor-mcp
council of models for decision
ilialarchenko/robot_mcp
A simple MCP server for the SO-ARM100 control
takumi0706/google-calendar-mcp
Google Calendar MCP server for Claude Desktop integration
marianfoo/mcp-sap-notes
MCP Server to search and retrieve SAP Notes
tomtom-international/tomtom-mcp
A Model Context Protocol (MCP) server providing TomTom's location services, search, routing, and traffic data to AI agents.
davidfuchs/mcp-uptime-kuma
A Model Context Protocol (MCP) server for Uptime Kuma version 2.
particlefuture/1mcpserver
duhlink/instagram-server-next-mcp
gitguardian/ggmcp
MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.
gitguardian/gg-mcp
MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.
vespo92/truenascoremcp
A working TrueNAS Core MCP Server
averatec0773/beatos
Local-first beat library built for producers — catalog, BPM/key analysis, license tiers & PDFs, tagged-MP3 + loopkit export, and assisted multi-platform publishing. Chat with your catalog via a built-in AI Agent (Claude · ChatGPT · DeepSeek), or wire it to any MCP client. Desktop + web.
cmann50/mcp-chrome-google-search
angrysky56/gemini-mcp-client
A MCP (Model Context Protocol) client that uses Google Gemini AI models for intelligent tool usage and conversation handling. Tested working nicely with Claude Desktop as an MCP Server currently. Based on untested AI gen code by a non-coder use at own risk.
ninjacazul/hono-mcp-server
🔧 Expose Hono API endpoints as MCP tools, simplifying integration and enhancing your API's functionality.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?