MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/84

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 1,993–2,016 · ranked by trust score, then stars
Kindly Web Search!CAUTION B

shelpuk-ai-technology-consulting/kindly-web-search-mcp-server

Kindly Web Search MCP Server: Web search + robust content retrieval for AI coding tools (Claude Code, Codex, Cursor, GitHub Copilot, Gemini, etc.) and AI agents (Claude Desktop, OpenClaw, Hermes, etc.). Supports Serper, Tavily, and SearXNG.

★ 395GitHub stars2 readstreamable-http
Confluent!CAUTION B

confluentinc/mcp-confluent

★ 167GitHub stars1 readsse
Tool Kit!CAUTION B

getfounded/mcp-tool-kit

Agentic abstraction layer for building high precision vertical AI agents written in python for Model Context Protocol.

★ 107GitHub stars3 readstdio
Gdep!CAUTION B

pirua-game/ai_game_base_analysis_cli_mcp_tool

Game Codebase Analysis AI Agentic Tool

★ 67GitHub stars3 write
Microsoft Cloud Platform!CAUTION B

aanerud/mcp-microsoft-office

an local MCP server you can run on your env, connecting you to Microsoft Graph, and the complete M365 eco system.

★ 55GitHub stars5 write
WeChat Official Accounts Scraper!CAUTION B

ditingdapeng/mcpwechatofficialaccounts

微信公众号文章MCP工具

★ 43GitHub stars3 readstdio
postbase!CAUTION B

postbasehq/postbase

Open-source social media scheduler with an MCP server: post to X, LinkedIn, Bluesky, Mastodon, TikTok and YouTube, or let your AI do it.

★ 11GitHub stars9 write
AuPM!CAUTION B

TriplEight/AuPM

npm-compatible registry that crowdfunds supply chain security: donors pay auditors and maintainers in USDC on Algorand via x402

★ 6GitHub stars1 writestdio
seamless!CAUTION B

arctop/seamless

Local-first shared memory and task coordination for AI coding agents. One Go binary, MCP server, markdown files you own. Hooks for Claude Code and Codex CLI (and their desktop apps).

★ 6GitHub stars3 readstreamable-http
genesispay-js!CAUTION B

GenesisTechAT/genesispay-js

GenesisPay JavaScript SDKs and MCP server: x402 payments in USDC on Base for sellers and AI agents (@genesis-tech/genesispay-*)

★ 1GitHub stars2 writestdio
line-mcp-server!CAUTION B

stickerdaniel/line-mcp-server

MCP server for a personal LINE account: local archive, search and messaging for coding agents

★ 1GitHub stars2 write
voyagier-cli!CAUTION B

Voyagier-Travel/voyagier-cli

Search, plan, and book real travel from the command line or any AI agent. Flights, hotels, activities — price-gated booking, quotes, MCP server built in.

★ 1GitHub stars3 readstdio
bzdos-hubd!CAUTION B

bzdOS/hubd

The project tracker for teams of humans and AI agents — in plain files. MCP server + CLI, zero dependencies.

★ 0GitHub stars7 writestdio
cool91!CAUTION B

Okle42/cool91

Apple Silicon temperature & fan monitor with real throttle detection, custom fan curves, and a Claude Code gate that waits only when your Mac throttles. English + 繁體中文.

★ 0GitHub stars6 readstdio
git-mcp!CAUTION B

selfagency/git-mcp

A Git MCP server that doesn't suck

★ 0GitHub stars1 writestdio
mapizarro1-foragex402!CAUTION B

mapizarro1/foragex402

Meta-search MCP for x402 agent-payable services -- find paid APIs across every registry.

★ 0GitHub stars2 readstreamable-http
Clipforge!CAUTION C

xixihhhh/clipforge

ClipForge(原『带货剪手』/ daihuo-jianshou):开源 AI 带货短视频神器——上传一张商品图,AI 自动提炼卖点 + 写种草脚本 + 锁定商品原图不变形 + 配画面/配音/字幕,一键产出抖音小店 / 快手 / 小红书 / TikTok Shop 卖货短视频。0 成本批量出片、开源无水印、本地自部署。也支持一句话主题成片。Open-source AI e-commerce/UGC short-video generator.

★ 900GitHub stars5 writestdio
SwarmVault!CAUTION B

swarmclawai/swarmvault

The local-first LLM Wiki: open-source knowledge graph builder, RAG knowledge base, and agent memory store. Built on Andrej Karpathy's pattern. An Obsidian alternative for personal knowledge management, AI second brain, and durable Claude Code / Codex / OpenClaw memory.

★ 704GitHub stars5 writestdio
Proxy!CAUTION B

punkpeye/mcp-proxy

A TypeScript streamable HTTP and SSE proxy for MCP servers that use stdio transport.

★ 292GitHub stars1 readsse
Canvas!CAUTION B

vishalsachdev/canvas-mcp

Canvas LMS MCP server — up to 102 tools and 8 agent skills for students & educators. Works with Claude, Cursor, Codex, and 40+ agents.

★ 280GitHub stars1 readstdio
Lite!CAUTION B

fiberplane/mcp-lite

Lightweight, composable MCP framework for TypeScript

★ 119GitHub stars3 writestreamable-http
Anylist!CAUTION B

bobby060/anylist-mcp

Unofficial MCP Server for Anylist

★ 32GitHub stars5 readsse
Kotlin Android!CAUTION B

normaltusker/kotlin-mcp-server

🧠 Kotlin MCP Server for Android app development using OpenAI, Gemini, or OpenRouter. Enables AI-assisted coding via Aider, Gradle build/test integration, Kotlin LSP, and Docker-based portability.

★ 30GitHub stars1 write
Domain Search!CAUTION C

dorukardahan/domain-search-mcp

Zero-config domain availability MCP server for Claude & ChatGPT. Live pricing via Porkbun, premium/auction detection via GoDaddy, AI suggestions, RDAP/WHOIS fallback. Stdio + HTTP.

★ 28GitHub stars8 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.