MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/92

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,185–2,208 · ranked by trust score, then stars
Mermaid Diagram Generator✕BLOCK D

peng-shawn/mermaid-mcp-server

A Model Context Protocol (MCP) server that converts Mermaid diagrams to PNG images

★ 235GitHub stars1 readstdio
N8n Workflow Builder!CAUTION D

salacoste/mcp-n8n-workflow-builder

AI-powered n8n workflow automation through natural language. MCP server enabling Claude AI & Cursor IDE to create, manage, and monitor workflows via Model Context Protocol. Multi-instance support, 17 tools, comprehensive docs. Build workflows conversationally without manual JSON editing.

★ 234GitHub stars1 writestdio
FreeCAD✕BLOCK D

bonninr/freecad_mcp

FreecadMCP connects Freecad to Claude AI and other MCP-ready tools like Cursor through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Freecad. This integration enables prompt assisted CAD 3d Design.

★ 229GitHub stars2 writestdio
Google Tag Manager✕BLOCK D

stape-io/google-tag-manager-mcp-server

MCP server for Google Tag Manager

★ 226GitHub stars1 writestdio
WebRtcPerf✕BLOCK D

vpalmisano/webrtcperf

WebRTC performance and quality evaluation tool.

★ 225GitHub stars1 readstdio
Axion Planetary✕BLOCK D

dhenenjay/axion-planetary-mcp

World's first Virtual Satellite that you can connect with MCP

★ 221GitHub stars1 writesse
ZotSeek✕BLOCK D

introfini/zotseek

AI semantic search for Zotero, with a built-in MCP server for AI agents (Claude Code, Codex). Find papers by meaning. 100% local and private.

★ 219GitHub stars3 read
Apple Events✕BLOCK D

fradser/mcp-server-apple-events

MCP server providing native macOS integration with Apple Reminders and Calendar via EventKit

★ 216GitHub stars1 writestdio
Apple Reminders✕BLOCK D

fradser/mcp-server-apple-reminders

MCP server providing native macOS integration with Apple Reminders and Calendar via EventKit

★ 216GitHub stars1 writestdio
Systemprompt Multimodal✕BLOCK D

ejb503/multimodal-mcp-client

[DEPRECATED] Superseded by systempromptio/systemprompt-template and systempromptio/systemprompt-core. Multi-modal MCP client for voice-powered agentic workflows.

★ 210GitHub stars1 writesse
X-Twitter Scraper✕BLOCK D

xquik-dev/x-twitter-scraper

X (Twitter) scraper API & X API alternative with REST, MCP, SDKs & webhooks. Not affiliated with X Corp.

★ 209GitHub stars1 writestreamable-http
Unreal Motion Graphics✕BLOCK D

winyunq/unrealmotiongraphicsmcp

🚀 UE5-UMG-MCP: A deep-focused MCP for Unreal Engine UMG layout. Designed to maximize AI efficiency within limited context windows by prioritizing precision in UI structure, animations, and blueprint integration.

★ 206GitHub stars3 readstdio
UTCP Bridge✕BLOCK D

universal-tool-calling-protocol/utcp-mcp

All-in-one MCP server that can connect your AI agents to any native endpoint, powered by UTCP

★ 206GitHub stars7 readstdio
Waldzell✕BLOCK D

waldzellai/waldzell-mcp

Waldzell AI's monorepo of MCP servers. Use in Claude Desktop, Cline, Roo Code, and more!

★ 201GitHub stars7 writestdio
Postgres✕BLOCK D

ericzakariasson/pg-mcp-server

MCP Server for Postgres

★ 180GitHub stars1 readstdio
Codex Tool✕BLOCK D

cexll/codex-mcp-server

Codex Mcp Server

★ 178GitHub stars1 writestdio
Stock✕BLOCK D

huweihua123/stock-mcp

专业的金融市场数据 MCP 服务器 - 支持A股/美股/加密货币,原生 MCP 协议,AI Agent 友好

★ 178GitHub stars23 readstreamable-http
WeApp Dev✕BLOCK D

yfmeii/weapp-dev-mcp

FastMCP server for automating WeChat Mini Program developer tooling

★ 174GitHub stars35 read
Furikake✕BLOCK D

ashwwwin/furi

CLI & API for MCP management

★ 172GitHub stars1 read
Godot✕BLOCK D

satelliteoflove/godot-mcp

Give your AI assistant eyes and hands in the Godot editor: scene editing, input injection, deterministic playtesting, and live game state for agents

★ 172GitHub stars1 writestdio
Executable✕BLOCK D

shadowcz007/mcp_server_exe

小智 & Cursor 的 MCP 启动器 - MCP For Cursor&xiaozhi。打包成可执行文件。Turn MCP server into an executable file

★ 166GitHub stars1 writesse
Toolbase✕BLOCK D

toolbase-ai/toolbase

A desktop application that adds powerful tools to Claude and AI platforms

★ 165GitHub stars1 write
Memory✕BLOCK D

puliczek/mcp-memory

🔥🖥️ MCP Memory is a MCP Server that gives MCP Clients (Cursor, Claude, Windsurf and more) the ability to remember information about users (preferences, behaviors) across conversations.

★ 161GitHub stars2 read
Llmctx✕BLOCK D

khromov/llmctx

Svelte developer documentation as an MCP and in llms.txt format

★ 158GitHub stars2 readsse

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.