MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/82

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,945–1,968 · ranked by trust score, then stars
Vera!CAUTION B

lemon07r/vera

Local code search combining BM25, vector similarity, and cross-encoder reranking. Parses 60+ languages with tree-sitter, runs entirely offline, and returns structured results with file paths, line ranges, and symbol metadata. Built in Rust.

★ 118GitHub stars6 read
Yingdao RPA!CAUTION B

ying-dao/yingdao_mcp_server

影刀RPA MCP Server

★ 107GitHub stars7 readsse
Custom!CAUTION B

sharan-kumar-r/custom-mcp-server

MCP server for scraping LinkedIn, Facebook, Instagram profiles and Google search.

★ 98GitHub stars5 readstdio
Codesearch!CAUTION B

flupkede/codesearch

Multi-repo semantic code search MCP server in Rust — hybrid vector + BM25 retrieval, tree-sitter AST chunking, fully offline. For OpenCode, Claude Code, Cursor, and any MCP client.

★ 88GitHub stars4 readstreamable-http
Firebird Integration!CAUTION B

purodelphi/mcpfirebird

Implementation of Anthropic's MCP protocol for Firebird databases.

★ 69GitHub stars3 writesse
Figma!CAUTION B

jayzeedesign/figma-mcp

★ 67GitHub stars3 read
NestJS Starter!CAUTION B

hmake98/nestjs-starter

Production-ready NestJS boilerplate — JWT auth, Prisma, Redis, BullMQ, Swagger, i18n, and full AI developer workflows (Claude Code + GitHub Copilot) with spec-driven feature scaffolding.

★ 63GitHub stars2 read
Yby6 Video Parser!CAUTION B

yangbuyiya/yby6-crawling-short-video-mcp

本项目是一个基于 FastMCP 的全网短视频去水印解析服务,支持多平台视频分享链接的解析,自动提取视频真实地址及相关信息。 适用于需要批量解析、去水印、采集短视频的场景。本项目还支持视频内容文本提取功能,可以通过语音识别将视频内容转为文本。

★ 63GitHub stars3 readsse
Create App!CAUTION B

boguan/create-mcp-app

A CLI tool for quickly scaffolding Model Context Protocol (MCP) server applications with TypeScript support and modern development tooling

★ 57GitHub stars1 writestdio
SAP Datasphere!CAUTION B

mariodefelipe/sap-datasphere-mcp

SAP Datasphere MCP Server - AI-powered access to SAP Datasphere APIs

★ 48GitHub stars1 writestdio
igniteui-theming!CAUTION B

IgniteUI/igniteui-theming

A set of Sass mixins, functions, and variables used to create themes for a variety of UI frameworks built by Infragistics.

★ 44GitHub stars9 writestdio
Coworker!CAUTION B

array-ventures/coworker

Open-source AI agent with MCP UI, app builder, A2A protocol, skills marketplace, and multi-provider chat. Built with Mastra. Alternative to OpenClaw.

★ 43GitHub stars2 writestreamable-http
TeamCity!CAUTION B

daghis/teamcity-mcp

Model Context Protocol (MCP) server for JetBrains TeamCity: control builds, tests, agents and configs from AI coding assistants.

★ 30GitHub stars12 readstdio
Code Knowledge!CAUTION B

davidvc/code-knowledge-mcptool

MCP tool that lets Cline inquire about a code base

★ 24GitHub stars1 write
codegraph-brain!CAUTION B

zaebee/codegraph-brain

Code graph for AI agents: impact analysis and call tracing over MCP (Python, TypeScript). Local, deterministic, SQLite.

★ 2GitHub stars2 readstdio
clawstash!CAUTION B

fo0/clawstash

AI-optimized stash storage — dynamic RAG for agents. Store, search, and retrieve docs, code, and data on demand via MCP or REST API.

★ 1GitHub stars1 writestdio
SlidPhiLabs✓SAFE B

ceedot-rock/SlidPhiLabs

Slid Phi Labs — PCC hosted lossless compression, Rider, Chamber, CuNi. https://www.slidphilabs.com

★ 1GitHub stars6 writestdio
corpus.333.eco!CAUTION B

333eco/corpus.333.eco

An MCP server for an open-licensed corpus, served with verifiable provenance — sha256, DOI and OpenTimestamps with every response.

★ 0GitHub stars7 read
@mcp-z/oauth!CAUTION B

mcp-z/oauth

Multi-account orchestration and secure token storage for OAuth-based MCP servers

★ 0GitHub stars1 read
rootpublish-ai-facts!CAUTION B

nandarona-inc/rootpublish-ai-facts

Claude plugin: check what AI assistants tell buyers about your company against your own pricing pages. No API key.

★ 0GitHub stars1 writestreamable-http
Apify Mcp Server!CAUTION B

apify/apify-mcp-server

The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.

★ 10,720GitHub stars5 writestdio
Windows!CAUTION B

cursortouch/windows-mcp-server

MCP Server for Computer Use in Windows

★ 8,308GitHub stars2 writestdio
UltraRAG!CAUTION B

openbmb/ultrarag

A Low-Code MCP Framework for Building Complex and Innovative RAG Pipelines

★ 5,703GitHub stars6 writestdio
Router!CAUTION B

mcp-router/mcp-router

MCP Router — development, support and security updates ended 2026-09-18. Historical source and final release for existing users.

★ 2,149GitHub stars1 writesse

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.