MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/82
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
lemon07r/vera
Local code search combining BM25, vector similarity, and cross-encoder reranking. Parses 60+ languages with tree-sitter, runs entirely offline, and returns structured results with file paths, line ranges, and symbol metadata. Built in Rust.
ying-dao/yingdao_mcp_server
影刀RPA MCP Server
sharan-kumar-r/custom-mcp-server
MCP server for scraping LinkedIn, Facebook, Instagram profiles and Google search.
flupkede/codesearch
Multi-repo semantic code search MCP server in Rust — hybrid vector + BM25 retrieval, tree-sitter AST chunking, fully offline. For OpenCode, Claude Code, Cursor, and any MCP client.
purodelphi/mcpfirebird
Implementation of Anthropic's MCP protocol for Firebird databases.
jayzeedesign/figma-mcp
hmake98/nestjs-starter
Production-ready NestJS boilerplate — JWT auth, Prisma, Redis, BullMQ, Swagger, i18n, and full AI developer workflows (Claude Code + GitHub Copilot) with spec-driven feature scaffolding.
yangbuyiya/yby6-crawling-short-video-mcp
本项目是一个基于 FastMCP 的全网短视频去水印解析服务,支持多平台视频分享链接的解析,自动提取视频真实地址及相关信息。 适用于需要批量解析、去水印、采集短视频的场景。本项目还支持视频内容文本提取功能,可以通过语音识别将视频内容转为文本。
boguan/create-mcp-app
A CLI tool for quickly scaffolding Model Context Protocol (MCP) server applications with TypeScript support and modern development tooling
mariodefelipe/sap-datasphere-mcp
SAP Datasphere MCP Server - AI-powered access to SAP Datasphere APIs
IgniteUI/igniteui-theming
A set of Sass mixins, functions, and variables used to create themes for a variety of UI frameworks built by Infragistics.
array-ventures/coworker
Open-source AI agent with MCP UI, app builder, A2A protocol, skills marketplace, and multi-provider chat. Built with Mastra. Alternative to OpenClaw.
daghis/teamcity-mcp
Model Context Protocol (MCP) server for JetBrains TeamCity: control builds, tests, agents and configs from AI coding assistants.
davidvc/code-knowledge-mcptool
MCP tool that lets Cline inquire about a code base
zaebee/codegraph-brain
Code graph for AI agents: impact analysis and call tracing over MCP (Python, TypeScript). Local, deterministic, SQLite.
fo0/clawstash
AI-optimized stash storage — dynamic RAG for agents. Store, search, and retrieve docs, code, and data on demand via MCP or REST API.
ceedot-rock/SlidPhiLabs
Slid Phi Labs — PCC hosted lossless compression, Rider, Chamber, CuNi. https://www.slidphilabs.com
333eco/corpus.333.eco
An MCP server for an open-licensed corpus, served with verifiable provenance — sha256, DOI and OpenTimestamps with every response.
mcp-z/oauth
Multi-account orchestration and secure token storage for OAuth-based MCP servers
nandarona-inc/rootpublish-ai-facts
Claude plugin: check what AI assistants tell buyers about your company against your own pricing pages. No API key.
apify/apify-mcp-server
The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.
cursortouch/windows-mcp-server
MCP Server for Computer Use in Windows
openbmb/ultrarag
A Low-Code MCP Framework for Building Complex and Innovative RAG Pipelines
mcp-router/mcp-router
MCP Router — development, support and security updates ended 2026-09-18. Historical source and final release for existing users.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?