MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/86

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,041–2,064 · ranked by trust score, then stars
vibeshare-live!CAUTION C

pooriaarab/vibeshare

Share a live agent coding session by URL, for developers who pair in a browser.

★ 0GitHub stars2 writestdio
Mapbox!CAUTION C

mapbox/mcp-server

Mapbox Model Context Protocol (MCP) server

★ 358GitHub stars18 readstdio
UML!CAUTION C

antoinebou12/uml-mcp

UML-MCP Server is a UML diagram generation tool based on MCP (Model Context Protocol), which can help users generate various types of UML diagrams through natural language description or directly writing PlantUML and Mermaid and Kroki https://uml-mcp.vercel.app/mcp

★ 105GitHub stars1 writestdio
BSL Atlas!CAUTION C

arman-kudaibergenov/bsl-atlas

MCP-сервер для 1С/BSL: векторный поиск, структурный индекс, граф вызовов

★ 79GitHub stars1 writestreamable-http
ChatCrystal!CAUTION C

zengliangyi/chatcrystal

Local-first AI PKM for coding conversations: import Claude Code/Cursor/Codex, distill notes, semantic search, tag graph, MCP memory.

★ 58GitHub stars1 writestdio
OSCAL Tools!CAUTION C

awslabs/mcp-server-for-oscal

OSCAL tools for AI agents

★ 53GitHub stars1 readstdio
Saju Fortune Teller!CAUTION C

hjsh200219/fortuneteller

★ 42GitHub stars1 writesse
agent-comms!CAUTION C

ExaDev/agent-comms

Cross-harness communication mesh for LLM agents. Rooms, DMs, presence, and visibility.

★ 29GitHub stars6 readstdio
Etsy SEO Generator!CAUTION C

semihbugrasezer/etsy-seo-mcp

AI-powered Etsy product listing generator for Claude Desktop Generate perfect SEO titles, descriptions, and tags in seconds

★ 28GitHub stars4 readstdio
webcrypt!CAUTION C

putervision/webcrypt

Zero-dependency Web Crypto suite & Model Context Protocol (MCP) server for AES-256-GCM, RSA-4096, and AI agent security.

★ 15GitHub stars3 writestdio
Blaxel TypeScript SDK✓SAFE C

blaxel-ai/sdk-typescript

Typescript SDK for Blaxel

★ 10GitHub stars1 readstreamable-http
kilotest!CAUTION C

jrpool/kilotest

An ensemble testing service with a focus on accessibility

★ 4GitHub stars12 readstreamable-http
uspto_fpd_mcp!CAUTION C

Tam1379/uspto_fpd_mcp

🚀 Improve patent analysis with a high-performance MCP server for USPTO Final Petition Decisions, featuring context reduction and customizable fields.

★ 4GitHub stars1 readstdio
mcp-brasil!CAUTION C

ungarbed-triggerfish318/mcp-brasil

Conecte agentes de IA a 41 APIs públicas brasileiras para acessar dados do governo, com 363 tools, 87 resources e 62 prompts

★ 2GitHub stars9 readstreamable-http
Spotify Scraper!CAUTION C

aliakhtari78/spotifyscraper

Extract public Spotify data — tracks, albums, artists, playlists, podcasts & lyrics — without the official API. Sync + async, typed models, one dependency.

★ 316GitHub stars28 readstdio
research-toolkit!CAUTION C

rrrrrredy/research-toolkit

Research methods, workflow tools, and independent review for AI agents, packaged as a Skill, plugin, and local MCP server.

★ 204GitHub stars3 writestdio
Project OS for Codex!CAUTION C

herry2059/project-os-for-codex

Open-source control plane for Codex projects: Git-backed context, visible agent progress, scoped MCP access, resumable work, and safe handoffs.

★ 102GitHub stars2 readstdio
Plumb!CAUTION C

tathagat22/plumb-mcp

Local Figma MCP server with no REST rate limits, no metered tool-call quotas, and a verification loop. Drop-in alternative to Figma's Dev Mode MCP and Framelink for Claude Code, Cursor, Windsurf — works on every plan including Free.

★ 88GitHub stars2 writestdio
Kernel!CAUTION C

onkernel/kernel-mcp-server

Open-source MCP server for secure, low-latency cloud-browser automation on Kernel.

★ 37GitHub stars3 writestreamable-http
Gemini!CAUTION C

bsmi021/mcp-gemini-server

This project provides a dedicated MCP (Model Context Protocol) server that wraps the @google/genai SDK. It exposes Google's Gemini model capabilities as standard MCP tools, allowing other LLMs (like Cline) or MCP-compatible systems to leverage Gemini's features as a backend workhorse.

★ 36GitHub stars12 readsse
LegalContext!CAUTION C

protomated/legal-context-ce

LegalContext is an open-source Model Context Protocol (MCP) server that creates a secure, standardized bridge between law firms' document management systems (specifically Clio) and AI assistants (starting with Claude Desktop)

★ 29GitHub stars11 readstdio
MiMo Free API!CAUTION C

fu-jie/mimo-free-api-mcp

MiMo Free API MCP: 基于官网逆向的高性能 OpenAI / HTTP MCP 代理网关。支持搜索、识图、长文本分段及 SQLite 持久化。

★ 29GitHub stars2 readstreamable-http
Hatago Hub!CAUTION C

himorishige/hatago-mcp-hub

Hatago MCP Hub is a lightweight hub server that provides unified management for multiple MCP servers.

★ 27GitHub stars1 writestdio
OpenAgentPack!CAUTION C

modelstudioai/OpenAgentPack

Manage, review, and migrate cloud AI agents with Git and YAML. The open-source IaC control plane for managed AI agents.

★ 24GitHub stars7 readstreamable-http

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.