MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/89
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
campfirein/byterover-cli
ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)
httprunner/httprunner
HttpRunner 是一款开源的 API/UI 测试框架,简单易用,功能强大,具有丰富的插件化机制和高度的可扩展能力。
manavarya09/design-extract
Extract any website's complete design system with one command. DTCG tokens, semantic+primitive+composite, MCP server for Claude Code/Cursor/Windsurf, multi-platform emitters (iOS SwiftUI, Android Compose, Flutter, WordPress), Tailwind v4, Figma variables, shadcn/ui, CSS health audit, WCAG remediatio
modelcontextprotocol/rust-sdk
The official Rust SDK for the Model Context Protocol
stickerdaniel/linkedin-mcp-server
Open-source MCP server for LinkedIn. Give Claude and any MCP-compatible AI agent access to profiles, companies, jobs, and messages.
T-Auto/dsh-ops
A toolkit for low-level operations in DSH, designed to reduce token usage and task execution time / DSH 底层操作工具插件,旨在减少 Token 消耗与任务耗时
openags/paper-search-mcp
MCP, CLI, Skills for searching and downloading academic papers from multiple sources like arXiv, PubMed, bioRxiv, etc.
chrisryugj/kordoc
모두 파싱해버리겠다 — HWP·HWPX·PDF·Office 문서를 Markdown으로. 양식 자동 채우기와 신구대조를 갖춘 CLI·MCP 서버 | Convert Korean documents (HWP, HWPX, PDF, Office) to Markdown — CLI and MCP server with form filling and diff
ibm/assetopsbench
AssetOpsBench - Industry 4.0: A unified benchmark and framework for building, orchestrating, and evaluating domain-specific AI agents for Industry 4.0 asset operations and maintenance, with 460+ scenarios, 5 specialist agents (IoT, FMSR, TSFM, Work Order,...), and multi-agent orchestration blueprint
benborla/mcp-server-mysql
A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.
benborla/mcp-server-mysql
A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.
damms005/devdb-vscode
A zero-config VS Code database extension with affordances to aid development and debugging.
jordanrendric/claude-video-vision
Give Claude the ability to watch and understand videos — Claude Code plugin with frame extraction and multimodal audio analysis
datalayer/jupyter-mcp-server
🪐 🔧 Model Context Protocol (MCP) Server for Jupyter.
better-chatbot/better-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
cgoinglove/mcp-client-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
cgoinglove/better-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
keinsaasforever/better-chatbot
Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.
xataio/agent
AI agent expert in PostgreSQL
runesleo/x-reader
Universal content reader MCP Server for 10+ platforms
c1overzz/dsh-bili-scroll
DSH 插件:每天替你刷一轮 B站,读字幕挑出值得的、写一份日报,值得的 @ 你
jina-ai/mcp
Official Jina AI Remote MCP Server
wjz-p/gemini-skill
gemini drawing MCP & skill through browser, can be used in openclaw or any agent that supports MCP. Gemini画图 MCP和sill,支持龙虾或任何agent使用٩(๑>◡<๑)۶
jacksteamdev/obsidian-mcp-tools
Add Obsidian integrations like semantic search and custom Templater prompts to Claude or any MCP client.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?