MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/85
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
panktishah62/mcp-stack-for-ui-ux-designers
An end-to-end Model Context Protocol (MCP) solution that streamlines the entire UI/UX design workflow - from gathering inspiration to development handoff. This suite integrates multiple specialized MCP servers to automate and enhance the design process through AI assistance.
redhatinsights/insights-mcp
An MCP server to connect Red Hat Lightspeed functionality to an AI / LLM
dbcls/togomcp
MCP server for life-science knowledge graphs
SidneyBissoli/senado-br-mcp-cloudflare
Hosted MCP server for the Brazilian Federal Senate on Cloudflare Workers — 66 tools, 4 prompts, 5 resources. Legislative + administrative + e-Cidadania. Also on npm (npx senado-br-mcp).
Oeronteros/opencode-orchestra
kieransimkin/stemlab
Local music analysis for stems, timing, beats, harmony, lyrics, MIDI and loopable sections for Shorts. https://kieransimkin.co.uk/
silentsw0rd/x402-manifest
magicyuan876/mineru-tianshu
天枢 - 企业级 AI 一站式数据预处理平台 | PDF/Office转Markdown | 支持MCP协议AI助手集成 | Vue3+FastAPI全栈方案 | 文档解析 | 多模态信息提取
sammorrowdrums/remarkable-mcp
MCP server for accessing reMarkable tablet data - sync files, extract text from highlights, and browse your reMarkable cloud
dealfluence/adeu
docx ↔ LLM translator. Projects .docx office files to Markdown for editing. Projects edits back to OOXML as tracked changes (redlines). Python and Node.js implementations.
askbudi/roundtable
Zero-configuration MCP server that unifies multiple AI coding assistants (Codex, Claude Code, Cursor, Gemini) through intelligent auto-discovery and standardized interface
hhopke/intervals-icu-mcp
Read/write MCP server for Intervals.icu — training data, planning, and structured workout generation.
ruchernchong/mcp-server-google-analytics
Model Context Protocol server for Google Analytics, enabling LLMs to fetch and analyze web analytics data
bakhtiersizhaev/openevidence-mcp
First open-source OpenEvidence MCP server: browser-session medical research tools for Codex, Claude Code, and MCP clients
angrysky56/ast-mcp-server
By transforming source code into a queryable Semantic Graph and a structured AST, this tool bridges the gap between "reading text" and "understanding structure." For an AI assistant, it provides the "spatial" awareness needed to navigate deep dependencies without getting lost in large files.
datacovey/nornweave
An open-source, self-hosted API that turns standard email providers (Mailgun, SES, SendGrid) into "Inbox-as-a-Service" for AI Agents.
julesliu390/amadeus-qq-mcp
一个可以让你的OpenClaw和支持MCP的agent接入QQ进行私聊或者群聊的MCP。El-psy-congroo.
AgentsKit-io/doc-bridge
Portable doc bridge for AI agents — OKF + Self-Describe + AgentHandoff. CLI, MCP, Fumadocs/Docusaurus adapters.
rafaelperoco/secretgenerator
Auditable CSPRNG-backed credential generator for AI agents and machine-readable pipelines. Stable JSON schema, NIST entropy floors, SLSA 3 + cosign signed releases. CLI, Go/Python/Rust libs, MCP server.
Icaro0310/devin-memory
Anti-poisoning memory store for agents: provenance, versioning, quarantine gate
Knuckles-Team/mealie-mcp
Mealie meal planner MCP Server and A2A / AG-UI Agent
renoelis/flow-codeblock-rust-mcp
sborxyz/sbor
Benchmark lending rates for Bitcoin DeFi, read from contract state and posted on-chain on Arc, Base, Hyperliquid, Solana and Stacks. Published daily, free to use, built for agents.
thenavidm/thrivecart-mcp-cli
ThriveCart MCP server and CLI for Claude Code, Codex and AI agents. 24 tools for products, offers, transactions, revenue, customers, subscriptions and affiliates, across several carts at once.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?