MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/86
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
pooriaarab/vibeshare
Share a live agent coding session by URL, for developers who pair in a browser.
mapbox/mcp-server
Mapbox Model Context Protocol (MCP) server
antoinebou12/uml-mcp
UML-MCP Server is a UML diagram generation tool based on MCP (Model Context Protocol), which can help users generate various types of UML diagrams through natural language description or directly writing PlantUML and Mermaid and Kroki https://uml-mcp.vercel.app/mcp
arman-kudaibergenov/bsl-atlas
MCP-сервер для 1С/BSL: векторный поиск, структурный индекс, граф вызовов
zengliangyi/chatcrystal
Local-first AI PKM for coding conversations: import Claude Code/Cursor/Codex, distill notes, semantic search, tag graph, MCP memory.
awslabs/mcp-server-for-oscal
OSCAL tools for AI agents
hjsh200219/fortuneteller
ExaDev/agent-comms
Cross-harness communication mesh for LLM agents. Rooms, DMs, presence, and visibility.
semihbugrasezer/etsy-seo-mcp
AI-powered Etsy product listing generator for Claude Desktop Generate perfect SEO titles, descriptions, and tags in seconds
putervision/webcrypt
Zero-dependency Web Crypto suite & Model Context Protocol (MCP) server for AES-256-GCM, RSA-4096, and AI agent security.
blaxel-ai/sdk-typescript
Typescript SDK for Blaxel
jrpool/kilotest
An ensemble testing service with a focus on accessibility
Tam1379/uspto_fpd_mcp
🚀 Improve patent analysis with a high-performance MCP server for USPTO Final Petition Decisions, featuring context reduction and customizable fields.
ungarbed-triggerfish318/mcp-brasil
Conecte agentes de IA a 41 APIs públicas brasileiras para acessar dados do governo, com 363 tools, 87 resources e 62 prompts
aliakhtari78/spotifyscraper
Extract public Spotify data — tracks, albums, artists, playlists, podcasts & lyrics — without the official API. Sync + async, typed models, one dependency.
rrrrrredy/research-toolkit
Research methods, workflow tools, and independent review for AI agents, packaged as a Skill, plugin, and local MCP server.
herry2059/project-os-for-codex
Open-source control plane for Codex projects: Git-backed context, visible agent progress, scoped MCP access, resumable work, and safe handoffs.
tathagat22/plumb-mcp
Local Figma MCP server with no REST rate limits, no metered tool-call quotas, and a verification loop. Drop-in alternative to Figma's Dev Mode MCP and Framelink for Claude Code, Cursor, Windsurf — works on every plan including Free.
onkernel/kernel-mcp-server
Open-source MCP server for secure, low-latency cloud-browser automation on Kernel.
bsmi021/mcp-gemini-server
This project provides a dedicated MCP (Model Context Protocol) server that wraps the @google/genai SDK. It exposes Google's Gemini model capabilities as standard MCP tools, allowing other LLMs (like Cline) or MCP-compatible systems to leverage Gemini's features as a backend workhorse.
protomated/legal-context-ce
LegalContext is an open-source Model Context Protocol (MCP) server that creates a secure, standardized bridge between law firms' document management systems (specifically Clio) and AI assistants (starting with Claude Desktop)
fu-jie/mimo-free-api-mcp
MiMo Free API MCP: 基于官网逆向的高性能 OpenAI / HTTP MCP 代理网关。支持搜索、识图、长文本分段及 SQLite 持久化。
himorishige/hatago-mcp-hub
Hatago MCP Hub is a lightweight hub server that provides unified management for multiple MCP servers.
modelstudioai/OpenAgentPack
Manage, review, and migrate cloud AI agents with Git and YAML. The open-source IaC control plane for managed AI agents.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?