MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/80
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
pxsloot/gitea-mcp-server
Gitea MCP Server – A Model Context Protocol implementation for Gitea. Provides tools and resources for AI agents to interact with Gitea repositories, issues, pull requests, and more, much more. Built with FastMCP for seamless Gitea integration.
denisbilli/prodkit
impanyu/agentic_services
Paid claim verification with cited web evidence, source provenance, snapshots, and hashes.
gklab/MacWork
Open-source computer-use agent and MCP server for macOS — operates any app through the Accessibility API and native interfaces instead of screenshots. No app-specific code.
itswl/mailsift
Read-only multi-mailbox triage: watch inboxes and spam, judge what actually matters with an LLM, and push only that to Feishu or a webhook. MCP server and a web view included.
christophe77/netatmo-energy-mcp
Read-only MCP server for Netatmo smart thermostats and radiator valves. Works with any MCP client and LLM: Claude, GPT, Gemini, local models. Room temperatures, setpoints, boiler activity, heating history and analytics.
PostOakLabs/ocs-mcp-worker
MCP server for OmegaCentauri.me (evidence-evaluation tools, signed receipts)
JacobiusMakes/parlay-api-mcp
Python MCP server for ParlayAPI sports odds and props. Public discovery needs no key; account data uses your own key. Includes signup, login-email, checkout-link and preference actions. MIT code; API data redistribution rights are not included.
plugrail/servers
Japanese holiday and business-day calculations using official Japan Cabinet Office data.
violetclaire/popcorn-temporal-anchor
Signed temporal evidence for agents: trusted timestamp and proof-of-existence verification, authorization expiry, and an RFC 3161 / OpenTimestamps comparison. Free offline verifier; evidence, not authorization or proof of execution.
AgentDeskAI/browser-tools-mcp
Monitor browser logs directly from Cursor and other MCP compatible IDEs.
agentdeskai/browser-tools-mcp
Monitor browser logs directly from Cursor and other MCP compatible IDEs.
minidoracat/mcp-feedback-enhanced
Enhanced MCP server for interactive user feedback and command execution in AI-assisted development, featuring dual interface support (Web UI and Desktop Application) with intelligent environment detection and cross-platform compatibility.
xixihhhh/hotclip
免费开源的 AI 剪辑 / 直播切片工具:长视频、直播回放、播客一键切成爆款竖屏短视频,直发抖音/快手/B站/小红书/视频号——AI 找高光金句、弹幕热度进爆点判断、自动加字幕、横屏转竖屏,本地运行无水印不上传 | Free open-source Opus Clip alternative, 100% local: AI clips long videos & livestream VODs into viral 9:16 shorts for TikTok & YouTube Shorts. No credits, no watermark, no uploads. Win/macOS/L
runzhliu/welink
🔍微信聊天数据分析的本地化AI-agent(Docker/Windows/MacOS) · AI分身 / 大模型分析 / 好友排行 / 词云 / 情感趋势 / 群聊画像
prassanna-ravishankar/repowire
May the agents talk . Connect Claude Code, Opencode, Codex, Pi across projects, across machines and with your telegram
browserstack/mcp-server
BrowserStack's Official MCP Server
auth0/auth0-mcp-server
Connect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.
ibm/wxflows
Examples and tutorials for building AI applications with watsonx.ai Flows Engine
z80dev/cryo-mcp
A Python package for accessing Cryo datasets via Claude Code
heht571/ops-mcp-server
服务器、网络设备巡检和运维MCP工具
shunseven/mocxykit
This is an Frontend development service middleware that can be used with webpack and vite. Its main function is to visualize the configuration, manage http(s)-proxy, and mock data.
elitewa/ai_dirscan
可用于AI进行自动目录扫描的MCP辅助工具
zkzkgamal/agentic-ai-engineering
Agentic AI Engineering is a production-grade engineering resource for building modern agentic AI systems with LangChain, LangGraph, RAG, MCP, local models, and deployable Python services.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?