MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/80

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,897–1,920 · ranked by trust score, then stars
gitea-mcp-server✓SAFE B

pxsloot/gitea-mcp-server

Gitea MCP Server – A Model Context Protocol implementation for Gitea. Provides tools and resources for AI agents to interact with Gitea repositories, issues, pull requests, and more, much more. Built with FastMCP for seamless Gitea integration.

★ 1GitHub stars44 read
ProdKit✓SAFE B

denisbilli/prodkit

★ 0GitHub stars4 readstdio
agentic_services✓SAFE B

impanyu/agentic_services

Paid claim verification with cited web evidence, source provenance, snapshots, and hashes.

★ 0GitHub stars3 readstreamable-http
MacWork✓SAFE B

gklab/MacWork

Open-source computer-use agent and MCP server for macOS — operates any app through the Accessibility API and native interfaces instead of screenshots. No app-specific code.

★ 0GitHub stars5 writestreamable-http
mailsift!CAUTION B

itswl/mailsift

Read-only multi-mailbox triage: watch inboxes and spam, judge what actually matters with an LLM, and push only that to Feishu or a webhook. MCP server and a web view included.

★ 0GitHub stars1 readstdio
netatmo-energy-mcp✓SAFE B

christophe77/netatmo-energy-mcp

Read-only MCP server for Netatmo smart thermostats and radiator valves. Works with any MCP client and LLM: Claude, GPT, Gemini, local models. Room temperatures, setpoints, boiler activity, heating history and analytics.

★ 0GitHub stars6 writestdio
ocs-mcp-worker!CAUTION B

PostOakLabs/ocs-mcp-worker

MCP server for OmegaCentauri.me (evidence-evaluation tools, signed receipts)

★ 0GitHub stars1 writestdio
parlay-api-mcp!CAUTION B

JacobiusMakes/parlay-api-mcp

Python MCP server for ParlayAPI sports odds and props. Public discovery needs no key; account data uses your own key. Includes signup, login-email, checkout-link and preference actions. MIT code; API data redistribution rights are not included.

★ 0GitHub stars2 writestdio
plugrail-jp-calendar✓SAFE B

plugrail/servers

Japanese holiday and business-day calculations using official Japan Cabinet Office data.

★ 0GitHub stars1 writestreamable-http
popcorn-temporal-anchor!CAUTION B

violetclaire/popcorn-temporal-anchor

Signed temporal evidence for agents: trusted timestamp and proof-of-existence verification, authorization expiry, and an RFC 3161 / OpenTimestamps comparison. Free offline verifier; evidence, not authorization or proof of execution.

★ 0GitHub stars7 readstdio
BrowserTools MCP!CAUTION B

AgentDeskAI/browser-tools-mcp

Monitor browser logs directly from Cursor and other MCP compatible IDEs.

★ 7,330GitHub stars15 readstdio
BrowserTools!CAUTION B

agentdeskai/browser-tools-mcp

Monitor browser logs directly from Cursor and other MCP compatible IDEs.

★ 7,326GitHub stars15 readstdio
Interactive Feedback✓SAFE B

minidoracat/mcp-feedback-enhanced

Enhanced MCP server for interactive user feedback and command execution in AI-assisted development, featuring dual interface support (Web UI and Desktop Application) with intelligent environment detection and cross-platform compatibility.

★ 3,765GitHub stars1 read
HotClip!CAUTION B

xixihhhh/hotclip

免费开源的 AI 剪辑 / 直播切片工具:长视频、直播回放、播客一键切成爆款竖屏短视频,直发抖音/快手/B站/小红书/视频号——AI 找高光金句、弹幕热度进爆点判断、自动加字幕、横屏转竖屏,本地运行无水印不上传 | Free open-source Opus Clip alternative, 100% local: AI clips long videos & livestream VODs into viral 9:16 shorts for TikTok & YouTube Shorts. No credits, no watermark, no uploads. Win/macOS/L

★ 301GitHub stars3 read
WeLink!CAUTION B

runzhliu/welink

🔍微信聊天数据分析的本地化AI-agent(Docker/Windows/MacOS) · AI分身 / 大模型分析 / 好友排行 / 词云 / 情感趋势 / 群聊画像

★ 287GitHub stars3 read
Repowire!CAUTION B

prassanna-ravishankar/repowire

May the agents talk . Connect Claude Code, Opencode, Codex, Pi across projects, across machines and with your telegram

★ 264GitHub stars1 readstdio
BrowserStack MCP Server!CAUTION B

browserstack/mcp-server

BrowserStack's Official MCP Server

★ 154GitHub stars12 writestdio
Auth0 Mcp Server!CAUTION B

auth0/auth0-mcp-server

Connect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.

★ 121GitHub stars10 writestdio
Wxflows!CAUTION B

ibm/wxflows

Examples and tutorials for building AI applications with watsonx.ai Flows Engine

★ 118GitHub stars1 readstdio
Cryo!CAUTION B

z80dev/cryo-mcp

A Python package for accessing Cryo datasets via Claude Code

★ 91GitHub stars10 read
Ops!CAUTION B

heht571/ops-mcp-server

服务器、网络设备巡检和运维MCP工具

★ 59GitHub stars12 readstdio
Mocxykit!CAUTION B

shunseven/mocxykit

This is an Frontend development service middleware that can be used with webpack and vite. Its main function is to visualize the configuration, manage http(s)-proxy, and mock data.

★ 39GitHub stars1 readsse
AI DirScan!CAUTION B

elitewa/ai_dirscan

可用于AI进行自动目录扫描的MCP辅助工具

★ 36GitHub stars2 readsse
Agentic AI Engineering!CAUTION B

zkzkgamal/agentic-ai-engineering

Agentic AI Engineering is a production-grade engineering resource for building modern agentic AI systems with LangChain, LangGraph, RAG, MCP, local models, and deployable Python services.

★ 33GitHub stars2 writesse

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.