MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/87
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
pgtriage/pgtriage
Read-only MCP server for evidence-based PostgreSQL performance auditing
nicobailon/pi-mcp-adapter
Token-efficient MCP adapter for Pi coding agent
n24q02m/better-email-mcp
IMAP/SMTP email for AI agents -- read, send, organize folders, and manage attachments across multiple accounts, with auto-discovery.
openosint/openosint
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
yantrikos/yantrikdb-server
Cognitive memory database for AI agents — consolidates duplicates, detects contradictions, fades stale memories via temporal decay. Rust, Apache-2.0, ships as library / MCP server / HTTP cluster.
tacticlaunch/mcp-linear
MCP server that enables AI assistants to interact with Linear project management system through natural language, allowing users to retrieve, create, and update issues, projects, and teams.
cameronrye/openzim-mcp
OpenZIM MCP is a modern, secure, and high-performance MCP (Model Context Protocol) server that enables AI models to access and search ZIM format knowledge bases offline.
zxfgds/mcp-code-indexer
redis-developer/adk-redis
Redis integration for Google Agent Development Kit (ADK) - Memory, Sessions, Search Tools, MCP
SCPgamerscp/ymm4MCP
ゆっくりムービーメーカー4のMCPです。将来的にはゆっくり動画を全自動で作れるようにしたいです。
thallylabs/thally
Open-source docs platform and product knowledge layer that turns merged product changes into evidence-backed updates for human review.
ctaxnagomi/dgui-hypermem
DGUI-HyperMem (DeckerGUI HyperMemory) - self-hosted hybrid memory MCP server on Cloudflare Workers with a JEV (Choice/Noul/Score) reasoning layer and a HuggingFace training-brain flywheel.
110kc3/seo
Open registry and discovery API for AI products, agent tools, and MCP services.
g761007/figloo
Chrome extension + local MCP server that lets coding agents like Claude Code and Codex read Figma designs through the web UI with view access: walk layers, inspect properties, take screenshots, export assets. No Figma API; never edits the design.
jxnxts/mcp-brasil
MCP Server para 70 APIs públicas brasileiras
mcp-brasil/mcp-brasil
MCP Server para 70 APIs públicas brasileiras
intuition-lab/personal-model
Build your HUMAN.md.
BlockRunAI/blockrun-mcp
Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.
automations-project/vscode-perplexity-mcp
Perplexity AI search, reasoning, research, and compute - MCP server, dashboard, and multi-IDE auto-config for VS Code.
zencoderai/slack-mcp-server
adawalli/nexus
MCP Server to make searching openrouter easy
browser-gateway/browser-gateway
Control plane for browser fleets. One endpoint, any provider: failover, persistent profiles, session replay, REST API, MCP server, dashboard. OpenRouter for cloud browsers.
ask-marcel/ask-marcel-office-cli
The Microsoft 365 command line built for AI agents: one sign-in, 182 read-only commands, every document as clean markdown. Outlook, OneDrive, SharePoint, Teams, Calendar, Excel, OneNote, Planner. MCP server included.
shyn-labs/shyn
shyn — a register of your days. Local-first memory for your Mac: pages, meetings, notes — encrypted on-device, recalled by your AI over MCP.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?