MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/83
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
web-infra-dev/rsdoctor
AI-friendly build analyzer for Rspack
milisp/mcp-linker
mcp store manager, add & syncs MCP server configurations across clients like Claude code, Cursor💡mcphub
sidharthrajaram/mcp-sse
A working pattern for SSE-based MCP clients and servers
dejo1307/archmcp
Understand, analyze, and govern software systems across repositories, languages, and technologies.
dejo1307/enola
Understand, analyze, and govern software systems across repositories, languages, and technologies.
enola-labs/enola
Understand, analyze, and govern software systems across repositories, languages, and technologies.
guangxiangdebizi/qmt-mcp
QMT-MCP 模块化量化交易助手
baidu-netdisk/mcp
baidu netdisk mcp server
hive-academy/anubis-mcp
sweetrb/apple-mail-mcp
MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants
lsd-so/lsd-mcp
LSD Model Context Protocol
bradrisse/kanban-mcp
MCP Kanban is a specialized middleware designed to facilitate interaction between Large Language Models (LLMs) and Planka, a Kanban board application. It serves as an intermediary layer that provides LLMs with a simplified and enhanced API to interact with Planka's task management system.
4r9un/fastmcp-threatintel
AI-Powered Threat Intelligence MCP tool
raylanlin/smarttune-cli
SmartTune CLI — Multi-platform flight log analysis & tuning advisor (ArduPilot + Betaflight + PX4)
hyunjunjeon/vibecoding-lg-mcp-a2a
ttimes 바이브코딩 컨퍼런스 라이브 코딩 - 리서치 / 보고서 작성 Multi Agent 프로젝트
KiaroSama/Numera-Image-Gen-MCP
Local TypeScript MCP server for provider-independent image generation and editing, with OmniRoute, 9router, native image APIs, and ComfyUI adapters.
SterlingJF/knowledge-mcp
Plain, structured thinking while you work. It's free, open, and local-first.
YS-projectcalc/agent-cold-email
Coldrig — cold email infrastructure run entirely by your coding agent (Claude Code / Codex / Cursor / Cline). One token, 28 intent-level MCP + HTTP tools and an npm CLI: domain purchase, mailboxes, warmup, sequences, replies, deliverability guardrails. Free fault-injecting sandbox.
contentforge-press/change-intelligence-hub
GovContract Radar — hourly US federal contract opportunity alerts from SAM.gov. NAICS-filtered, set-aside alerts, recompete radar, free public API, MCP server. https://pixharvest.com
toki0413/dsh-saturday
Materials computing tools for AI agents: structures, engines, phonons, EOS, NEB, sampling, lineage.
apify/actors-mcp-server
The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.
apify/apify-mcp-server
The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.
marclou/mailcheap
Newsletters where you pay for the emails you send, not for dormant subscribers, at a fraction of the price of beehiiv and the like. Open source: self-host it, or use mailcheap.ai.
ashwwwin/automation-mcp
Control your Mac with detailed mouse, keyboard, screen, and window management capabilities.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?