MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/8

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

169–192 of 3,145 · ranked by trust score, then stars

Code Execution Mode

elusznik/mcp-server-code-execution-mode

✓SAFE B

An MCP server that executes Python code in isolated rootless containers with optional MCP server proxying. Implementation of Anthropic's and Cloudflare's ideas for reducing MCP tool definitions context bloat.

★ 3391 readstdio

CSS

stolinski/css-mcp

✓SAFE B
★ 3344 readstdio

ImageSorcery

sunriseapps/imagesorcery-mcp

!CAUTION B

An MCP server providing tools for image processing operations

★ 3321 readstreamable-http

Ical

omar-v2/mcp-ical

✓SAFE B

A Model Context Protocol Server that allows you to interact with your MacOS Calendar through natural language.

★ 3312 writestdio

Deep Research

ozamatash/deep-research-mcp

✓SAFE B
★ 3221 readstdio

Neovim

bigcodegen/mcp-neovim-server

✓SAFE B

Control Neovim using Model Context Protocol (MCP) and the official neovim/node-client JavaScript library

★ 3228 writestdio

Git Ingest

adhikasp/mcp-git-ingest

✓SAFE B

A Model Context Protocol (MCP) server that helps read GitHub repository structure and important files.

★ 3142 read

Facebook Ads Library

talknerdytome-labs/facebook-ads-library-mcp

✓SAFE B

MCP Server for Facebook ADs Library - Get instant answers from FB's ad library

★ 3105 readstdio

Facebook Ads Library

trypeggy/facebook-ads-library-mcp

✓SAFE B

MCP Server for Facebook ADs Library - Get instant answers from FB's ad library

★ 3105 readstdio

tty-table

tecfu/tty-table

✓SAFE B

Cross-platform terminal table (Windows, Linux, macOS). Can also run in the browser console and provide. MCP server gives your coding agent with a quick way to add text-wrapped ASCII tables to your README or other files.

★ 3101 readstdio

Chrome DevTools

benjaminr/chrome-devtools-mcp

✓SAFE B

An MCP Server for Chrome DevTools, following the Chrome DevTools Protocol. Integrates with Claude Desktop and Claude Code.

★ 3092 write

Facebook Ads Library

proxy-intell/facebook-ads-library-mcp

✓SAFE B

MCP Server for Facebook ADs Library - Get instant answers from FB's ad library

★ 3085 readstdio

Perplexity

jsonallen/perplexity-mcp

✓SAFE B

A Model Context Protocol (MCP) server that provides web search functionality using Perplexity AI's API.

★ 3081 readstdio

Excel Agent

sylvianai/sv-excel-agent

✓SAFE B

An Excel AI agent that uses MCP tools to let LLMs read, edit, and automate Excel spreadsheets.

★ 3051 read

JianYing

hey-jian-wei/jianying-mcp

✓SAFE B

jiangying mcp

★ 30416 write

Lokka

merill/lokka

!CAUTION B

MCP (Model Context Protocol) for Microsoft 365. Includes support for Microsoft Graph and other services

★ 3032 writestdio

Reddit

arindam200/reddit-mcp

✓SAFE B

Model Context Protocol server implementation for Reddit

★ 30110 read

Researcher

dainfernalcoder/perplexity-mcp

✓SAFE B

A Model Context Protocol (MCP) server for research and documentation assistance using Perplexity AI. Won 1st @ Cline Hackathon

★ 2983 readstdio

Snowflake Agent

snowflake-labs/mcp

✓SAFE B

MCP Server for Snowflake including Cortex AI, object management, SQL orchestration, semantic view consumption, and more

★ 2981 writestdio

Web Research

mzxrai/mcp-webresearch

✓SAFE B

MCP web research server (give Claude real-time info from the web)

★ 2983 readstdio

Aws

rafalwilinski/aws-mcp

✓SAFE B

Talk with your AWS using Claude. Model Context Protocol (MCP) server for AWS. Better Amazon Q alternative.

★ 2961 writestdio

Google Search Console

saurabhsharma2u/search-console-mcp

✓SAFE B

Search & analytics data as infrastructure — MCP server for Google Search Console, Bing Webmaster Tools, Google Adsense and GA4, designed for AI agents and automation.

★ 29620 readsse

Proxmox Manager

canvrno/proxmoxmcp

✓SAFE B

MCP for Proxmox integration in Cline

★ 2935 read

Video Editor

burningion/video-editing-mcp

!CAUTION B

MCP Interface for Video Jungle

★ 2918 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.