MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/88

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,089–2,112 · ranked by trust score, then stars
BlockRun!CAUTION C

blockrunai/blockrun-mcp

Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.

★ 395GitHub stars19 readstdio
Ethereum Wallet Toolkit!CAUTION C

nirholas/ethereum-wallet-toolkit

Python toolkit for Ethereum wallets: CLI tools + Model Context Protocol (MCP) servers for wallet generation, BIP39/BIP44 HD wallets, Web3 Secret Storage V3 keystores, and EIP-712 typed data signing

★ 25GitHub stars3 writestdio
romdevtools!CAUTION C

monteslu/romdev

suite of tools and mcp server for quickly making retro console roms and romhacks

★ 19GitHub stars11 writestreamable-http
klimpaskov-hoi4-tools!CAUTION C

klimPaskov/hoi4-agent-tools

HOI4 modding tools for agents: local references, visual previews, focus trees, interfaces and maps.

★ 6GitHub stars6 writestdio
kb-graph!CAUTION C

uttambharadwaj/kb-graph

One coding agent learns; every agent and future session can start knowing it. Inspectable Markdown + SQLite memory over MCP.

★ 4GitHub stars1 writestdio
Anyquery!CAUTION C

julien040/anyquery

One SQL interface for 60+ tools (e.g., GitHub, Notion, Airtable). Plug into any LLM through MCP.

★ 1,775GitHub stars1 write
Lark OpenAPI!CAUTION C

larksuite/lark-openapi-mcp

飞书/Lark官方 OpenAPI MCP

★ 839GitHub stars2 writesse
Northcinder!CAUTION C

cinderline/northcinder

Open-source MCP server for comparing products and asking the buyer before purchase.

★ 1,212GitHub stars8 writestdio
Polymarket!CAUTION C

caiovicentino/polymarket-mcp-server

🤖 AI-Powered MCP Server for Polymarket - Enable Claude to trade prediction markets with 45 tools, real-time monitoring, and enterprise-grade safety features

★ 679GitHub stars4 writestdio
AnkiMCP Server!CAUTION C

ankimcp/anki-mcp-server-addon

An Anki addon that implements an MCP server, enabling AI assistants to interact with Anki, the spaced repetition flashcard application.

★ 76GitHub stars2 writestreamable-http
LinkedIn Scraper!CAUTION C

stickerdaniel/linkedin-mcp-server

Open-source MCP server for LinkedIn. Give Claude and any MCP-compatible AI agent access to profiles, companies, jobs, and messages.

★ 3,539GitHub stars1 writestdio
Tableau MCP!CAUTION C

tableau/tableau-mcp

Tableau's official MCP Server. Helping agents see and understand data.

★ 351GitHub stars3 writestdio
Tableau!CAUTION D

tableau/tableau-mcp

Tableau's official MCP Server. Helping agents see and understand data.

★ 346GitHub stars3 writestdio
Volatility!CAUTION C

bornpresident/volatility-mcp-server

A Model Context Protocol (MCP) server that integrates Volatility 3 memory forensics framework with Claude

★ 41GitHub stars11 write
Figma Context!CAUTION C

1yhy/figma-context-mcp

★ 31GitHub stars2 readsse
ateam-mcp!CAUTION D

ariekogan/ateam-mcp

ADAS MCP Server — build, validate, and deploy multi-agent solutions from any AI environment

★ 1GitHub stars2 writesse
memcastle!CAUTION C

noirbizarre/memcastle

🧠 An AI memory service inspired by MemPalace 🏰

★ 1GitHub stars3 readstreamable-http
QMD - Query Markup Documents✕BLOCK D

tobi/qmd

mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local

★ 30,342GitHub stars5 readstdio
GitDiagram✕BLOCK D

ahmedkhaleel2004/gitdiagram

Visualize any GitHub codebase: free interactive architecture diagrams and one-minute explainer videos. Replace 'hub' with 'diagram' in any GitHub URL.

★ 18,177GitHub stars2 writestreamable-http
Git✕BLOCK D

idosal/git-mcp

Put an end to code hallucinations! GitMCP is a free, open-source, remote MCP server for any GitHub project

★ 8,411GitHub stars9 readsse
Atlassian Integration✕BLOCK D

sooperset/mcp-atlassian

MCP server for Atlassian tools (Confluence, Jira)

★ 5,926GitHub stars4 readsse
Draw.io MCP Server✕BLOCK D

jgraph/drawio-mcp

Create diagrams in chat, rendered as live interactive draw.io diagrams. 10,000+ searchable shapes.

★ 5,616GitHub stars1 writestdio
Jsondiffpatch✕BLOCK D

benjamine/jsondiffpatch

Diff & patch JavaScript objects

★ 5,342GitHub stars1 readstdio
Cipher✕BLOCK D

campfirein/cipher

ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)

★ 4,964GitHub stars2 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.