MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/90
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
sbroenne/mcp-server-excel
Automate real Microsoft Excel with AI via MCP Server or CLI — Power Query, DAX, VBA, PivotTables, charts, and 326 operations.
cohnen/mcp-google-ads
An MCP tool that connects Google Ads with Claude AI/Cursor and others, allowing you to analyze your advertising data through natural language conversations. This integration gives you access to campaign information, performance metrics, keyword analytics, and ad management—all through simple chat wi
semgrep/mcp
A MCP server for using Semgrep to scan code for security vulnerabilities.
GoogleCloudPlatform/cloud-run-mcp
MCP server to deploy apps to Cloud Run
googlecloudplatform/cloud-run-mcp
MCP server to deploy apps to Cloud Run
rekklesna/proxmoxmcp-plus
Use MCP and OpenAPI to safely control Proxmox VE VMs, LXCs, backups, and snapshots from LLMs and AI agents.
concierge-hq/concierge
🚀 Universal SDK for building next-gen MCP servers
agentic-web-interfaces/concierge
🚀 Universal SDK for building next-gen MCP servers
concierge-hq/uaip
🚀 Universal SDK for building next-gen MCP servers
ravitemer/mcp-hub
A centralized manager for Model Context Protocol (MCP) servers with dynamic server management and monitoring
bvisible/mcp-ssh-manager
MCP SSH Server: 37 tools for remote SSH management | Claude Code & OpenAI Codex | DevOps automation, backups, database operations, health monitoring
docfork/docfork
Docfork - Up-to-date docs for AI Coding Agents.
docfork/docfork-mcp
Docfork - Up-to-date docs for AI Coding Agents.
brhiza/mingyu
八字、紫微、星盘、六爻、梅花、奇门、大六壬、小六壬、塔罗、雷诺曼、灵签、择日一站式玄学算命占卜工具包,输出结构化提示词与数据。提供公开 API、MCP Server 与 skill。
cdump/evmole
EVMole is an open-source library that analyzes deployed EVM bytecode to infer function selectors, argument types, state mutability, persistent and transient storage layout, control flow, and compiler metadata, including for unverified contracts
peakmojo/applescript-mcp
MCP server that execute applescript giving you full control of your Mac
78/mcp-calculator
Xiaozhi MCP sample program
mondaycom/mcp
Enable AI agents to work reliably - giving them secure access to structured data, tools to take action, and the context needed to make smart decisions.
grll/mcpadapt
Unlock 650+ MCP servers tools in your favorite agentic framework.
kunchenguid/chrome-devtools-axi
The most agent-ergonomic browser automation
nkarasiak/qgis-mcp
Connect QGIS to AI agent through the Model Context Protocol (MCP)
ergut/mcp-logseq-server
MCP server to interact with LogSeq via its Local HTTP API - enabling AI assistants like Claude to seamlessly read, write, and manage your LogSeq graph.
ergut/mcp-logseq
MCP server to interact with LogSeq via its Local HTTP API - enabling AI assistants like Claude to seamlessly read, write, and manage your LogSeq graph.
milisp/mcp-store
MCP store. Discover, add & syncs configuration manager across clients like Claude code, Codex, Cursor💡mcphub
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?