MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/81
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
apology-is-policy/hyades
Unicode/ASCII Mathematical Typesetting Engine with LaTeX Input, VSCode Integration, MCP server, and Automatic Rendering into Source Code Comments
rollbar/rollbar-mcp-server
Model Context Protocol server for Rollbar
purupurupu/css-noop-checker
Chrome DevTools extension that detects CSS properties with no effect
roomi-fields/rtfm
The open retrieval layer for AI coding agents. Indexes code, docs, legal, research, data — 22 parsers (incl. EPUB, DOCX, ODT), FTS5 + semantic search, knowledge graph. Serves surgical context via MCP. Open source, local, free.
noteflowai/dsh-skills-anywhere
Check Agent Skills before reuse: find missing local resources in browser or CI, review pinned examples, and serve skills through DeepSeek Harness or MCP.
YawLabs/lemonsqueezy-mcp
LemonSqueezy MCP server for managing your store from AI assistants
echelongraph/echelongraph-mcp
MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-CVE exposure from Shodan data (© Shodan). Free and keyless.
WhiteBite/stop-ai-slop
Zero-dependency linter and gate that blocks AI-generated comment slop: multi-line narrative comments, changelog markers, step-numbered filler. Write-time plugin for OpenCode, Claude Code hooks, pre-commit, GitHub Action, GitLab CI, MCP server. RU+EN+DE+FR+ES detection.
Xxx91n/6F
Macro + micro engineering-content audit for git-healthy repositories — Claude Code Agent Plugin (Hub-of-Facts + federated adjudication, evidence gates, verifiable receipts). Preview: 3 of 5 capabilities live.
Drudley/indexagentica-mcp
Read-only remote MCP server (Streamable HTTP) and REST search for indexagentica.com
Knuckles-Team/microsoft-agent
Microsoft A2A / AG-UI Agent
WizardofTryout/oszillation-mixing-buddy
Universal AI Co-Producer for DAWs · Bit-transparent ITU-R BS.1770-4 telemetry, 128-band RTA & zero-latency native accessibility bridges (macOS / Logic Pro & Steinberg).
pimzino/spec-workflow-mcp
A Model Context Protocol (MCP) server that provides structured spec-driven development workflow tools for AI-assisted software development, featuring a real-time web dashboard and VSCode extension for monitoring and managing your project's progress directly in your development environment.
bethington/ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
shroominic/codeinterpreter-api
👾 Open source implementation of the ChatGPT Code Interpreter
microsoft/azure-devops-mcp
The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents.
lucasastorian/llmwiki
Open Source Implementation of Karpathy's LLM Wiki. Upload documents, connect your Claude account via MCP, and have it write your wiki !
xytom/coding-tools-mcp
Give any AI agent the ability to code
mem0ai/mem0-mcp
lamaalrajih/kicad-mcp
Model Context Protocol server for KiCad on Mac, Windows, and Linux
buildingjoshbetter/truememory
The memory your AI should have had from the start. Automatic capture, automatic recall, 100% local. One SQLite file, zero cloud. Works with Claude Code, Claude CLI, Cursor, Codex CLI, Gemini CLI.
awkoy/notion-mcp-server
Notion MCP server for Claude, Cursor, ChatGPT & Claude Desktop. Connect AI agents to Notion via Model Context Protocol — pages, databases, blocks, comments, files.
vortiago/mcp-outline
A Model Context Protocol (MCP) server enabling AI assistants to interact with Outline documentation services.
sib-swiss/sparql-llm
🦜✨ Chat system, MCP server, and reusable components to improve LLMs capabilities when generating SPARQL queries
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?