MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/89

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,113–2,136 · ranked by trust score, then stars
byterover-cli✕BLOCK D

campfirein/byterover-cli

ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)

★ 4,955GitHub stars2 readstdio
HttpRunner✕BLOCK D

httprunner/httprunner

HttpRunner 是一款开源的 API/UI 测试框架,简单易用,功能强大,具有丰富的插件化机制和高度的可扩展能力。

★ 4,298GitHub stars2 readstdio
Designlang✕BLOCK D

manavarya09/design-extract

Extract any website's complete design system with one command. DTCG tokens, semantic+primitive+composite, MCP server for Claude Code/Cursor/Windsurf, multi-platform emitters (iOS SwiftUI, Android Compose, Flutter, WordPress), Tailwind v4, Figma variables, shadcn/ui, CSS health audit, WCAG remediatio

★ 4,132GitHub stars1 writestdio
rust-sdk✕BLOCK D

modelcontextprotocol/rust-sdk

The official Rust SDK for the Model Context Protocol

★ 4,040GitHub stars1 writestdio
linkedin-mcp-server!CAUTION D

stickerdaniel/linkedin-mcp-server

Open-source MCP server for LinkedIn. Give Claude and any MCP-compatible AI agent access to profiles, companies, jobs, and messages.

★ 3,579GitHub stars1 writestdio
dsh-ops✕BLOCK D

T-Auto/dsh-ops

A toolkit for low-level operations in DSH, designed to reduce token usage and task execution time / DSH 底层操作工具插件,旨在减少 Token 消耗与任务耗时

★ 2,863GitHub stars2 read
Paper Search✕BLOCK D

openags/paper-search-mcp

MCP, CLI, Skills for searching and downloading academic papers from multiple sources like arXiv, PubMed, bioRxiv, etc.

★ 2,682GitHub stars63 readsse
kordoc✕BLOCK D

chrisryugj/kordoc

모두 파싱해버리겠다 — HWP·HWPX·PDF·Office 문서를 Markdown으로. 양식 자동 채우기와 신구대조를 갖춘 CLI·MCP 서버 | Convert Korean documents (HWP, HWPX, PDF, Office) to Markdown — CLI and MCP server with form filling and diff

★ 2,396GitHub stars1 writestdio
AssetOpsBench✕BLOCK D

ibm/assetopsbench

AssetOpsBench - Industry 4.0: A unified benchmark and framework for building, orchestrating, and evaluating domain-specific AI agents for Industry 4.0 asset operations and maintenance, with 460+ scenarios, 5 specialist agents (IoT, FMSR, TSFM, Work Order,...), and multi-agent orchestration blueprint

★ 2,312GitHub stars11 writestdio
MCP Server for MySQL✕BLOCK D

benborla/mcp-server-mysql

A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.

★ 2,155GitHub stars1 readstdio
MySQL✕BLOCK D

benborla/mcp-server-mysql

A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.

★ 2,129GitHub stars1 readstdio
Devdb✕BLOCK D

damms005/devdb-vscode

A zero-config VS Code database extension with affordances to aid development and debugging.

★ 1,437GitHub stars1 writestdio
Video Vision✕BLOCK D

jordanrendric/claude-video-vision

Give Claude the ability to watch and understand videos — Claude Code plugin with frame extraction and multimodal audio analysis

★ 1,332GitHub stars6 readstdio
jupyter-mcp-server✕BLOCK D

datalayer/jupyter-mcp-server

🪐 🔧 Model Context Protocol (MCP) Server for Jupyter.

★ 1,286GitHub stars1 writestdio
Better Chatbot✕BLOCK D

better-chatbot/better-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,185GitHub stars19 readstdio
Client Chatbot✕BLOCK D

cgoinglove/mcp-client-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,185GitHub stars19 readstdio
Better Chatbot✕BLOCK D

cgoinglove/better-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,182GitHub stars19 readstdio
Keinsaas Navigator✕BLOCK D

keinsaasforever/better-chatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

★ 1,182GitHub stars19 readstdio
Xata Agent✕BLOCK D

xataio/agent

AI agent expert in PostgreSQL

★ 1,093GitHub stars3 write
x-reader✕BLOCK D

runesleo/x-reader

Universal content reader MCP Server for 10+ platforms

★ 962GitHub stars4 read
dsh-bili-scroll✕BLOCK D

c1overzz/dsh-bili-scroll

DSH 插件:每天替你刷一轮 B站,读字幕挑出值得的、写一份日报,值得的 @ 你

★ 872GitHub stars2 writestdio
Jina AI✕BLOCK D

jina-ai/mcp

Official Jina AI Remote MCP Server

★ 867GitHub stars12 read
Gemini Skill✕BLOCK D

wjz-p/gemini-skill

gemini drawing MCP & skill through browser, can be used in openclaw or any agent that supports MCP. Gemini画图 MCP和sill,支持龙虾或任何agent使用٩(๑>◡<๑)۶

★ 833GitHub stars4 writestdio
Obsidian Tools✕BLOCK D

jacksteamdev/obsidian-mcp-tools

Add Obsidian integrations like semantic search and custom Templater prompts to Claude or any MCP client.

★ 832GitHub stars2 readstdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.