MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/91

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,161–2,184 · ranked by trust score, then stars
Daiso✕BLOCK D

hmmhmmhm/daiso-mcp

다이소를 MCP로! 뿐만 아니라 한국 로컬 리테일과 영화관 조회를 MCP, CLI, Codex Skill로 가능하게 해줍니다.

★ 333GitHub stars3 readsse
Svelte Agent Core✕BLOCK D

sveltejs/mcp

The official svelte MCP for all your agentic needs.

★ 330GitHub stars6 readstdio
add-mcp✕BLOCK D

neon-solutions/add-mcp

The open MCP config tool - npx add-mcp

★ 313GitHub stars2 readstreamable-http
Llm Context✕BLOCK D

cyberchitta/llm-context.py

Share code with LLMs via Model Context Protocol or clipboard. Rule-based customization enables easy switching between different tasks (like code review and documentation). Includes smart code outlining.

★ 308GitHub stars5 readstdio
Blender VXAI✕BLOCK D

vxasi/blender-mcp-vxai

★ 300GitHub stars1 write
Roblox Studio MCP✕BLOCK D

chrrxs/robloxstudio-mcp

MCP server for Roblox Studio runtime debugging, playtest control, screenshots/input, multiplayer testing, and per-peer server/client eval from AI agents.

★ 297GitHub stars3 readstreamable-http
OpenAPI✕BLOCK D

ivo-toby/mcp-openapi-server

MCP Server (Model Context Protocol) for turning OpenAPI specifications into a MCP Resource

★ 297GitHub stars2 writestdio
Overleaf✕BLOCK D

mjyoo2/overleafmcp

Model Context Protocol (MCP) server that lets AI assistants read Overleaf projects, parse LaTeX document structure, and push section-level edits back via Git. Compatible with Claude Desktop, Cursor, Windsurf, and any MCP client.

★ 292GitHub stars2 writestdio
Monet✕BLOCK D

zenolab124/monet

Monet — Multi-engine mission control for coding agents (Claude Code and Codex today). Browse, search, and drive your agent sessions from a native desktop app.

★ 283GitHub stars1 write
UniFi✕BLOCK D

enuno/unifi-mcp-server

An MCP server that leverages official UniFi API

★ 280GitHub stars2 readstdio
G-Search✕BLOCK D

jae-jae/g-search-mcp

A powerful MCP server for Google search that enables parallel searching with multiple keywords simultaneously.

★ 273GitHub stars1 readstdio
Figma UI✕BLOCK D

tranhoaihung/figma-ui-mcp

AI can draw UI directly on the Figma canvas via JavaScript, and read existing designs back as structured data. Works with Claude Code, Cursor, VS Code, and Windsurf. No API KEY required.

★ 262GitHub stars1 writestdio
Jeb✕BLOCK D

dawnslab/jebmcp

★ 260GitHub stars2 writesse
Jebmcp✕BLOCK D

flankerhqd/jebmcp

★ 260GitHub stars2 writesse
Api200✕BLOCK D

api-200/api200

API 200 is an open source API gateway to simplify 3rd-party integrations. Import endpoints, set up caching, retries, and mocks. Access all services via one URL. Monitor logs, track errors, and get alerts on API incidents.

★ 257GitHub stars1 readstdio
Foundry✕BLOCK D

praneshasp/foundry-mcp-server

An experimental MCP Server for foundry built for Solidity devs

★ 253GitHub stars5 writestdio
MoltBrain✕BLOCK D

nhevers/moltbrain

Long-term memory layer for OpenClaw & MoltBook agents that learns and recalls your project context automatically.

★ 252GitHub stars1 writestdio
Kronova Asset Intelligence✕BLOCK D

kronova-intelligent-systems/asset-intel-orchestration-engine

Open-source platform for multi-agent AI orchestration, real-world asset tokenization, workflow automation. Includes OAuth 2.1 MCP agent management, a 44-field RWA schema, Stripe, designed to integrate with AetherNet QUAS & KVS sovereign, post quantum, architecture agnostic omni-substrate, semantic m

★ 249GitHub stars9 write
3D Printer Server✕BLOCK D

dmontgomery40/mcp-3d-printer-server

Connects MCP to major 3D printer APIs (Orca, FULU's Orca/Bambu, OctoPrint, Klipper, Duet, Repetier, Prusa, Creality). Control prints, monitor status, and perform advanced STL operations like scaling, rotation, sectional editing, and base extension. Includes slicing and visualization.

★ 245GitHub stars10 writestdio
Ant Design Components✕BLOCK D

zhixiaoqiang/antd-components-mcp

An MCP service for Ant Design components query | 一个减少 Ant Design 组件代码生成幻觉的 MCP 服务,包含系统提示词、组件文档、API 文档、代码示例和更新日志查询

★ 245GitHub stars4 readstdio
Code Runner✕BLOCK D

formulahendry/mcp-server-code-runner

Code Runner MCP Server

★ 244GitHub stars1 writestdio
Penpot✕BLOCK D

montevive/penpot-mcp

Penpot MCP server

★ 241GitHub stars10 read
Git✕BLOCK D

cyanheads/git-mcp-server

Clone, commit, diff, branch, merge, rebase, cherry-pick, stash, tag, and manage worktrees in local git repos via MCP. STDIO or Streamable HTTP.

★ 239GitHub stars1 readstdio
Mise VS Code✕BLOCK D

hverlin/mise-vscode

VS Code extension for mise-en-place (https://mise.jdx.dev/)

★ 239GitHub stars1 write

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.