MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/93

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,209–2,232 · ranked by trust score, then stars
Svelte LLM✕BLOCK D

khromov/svelte-llm-mcp

Svelte developer documentation as an MCP and in llms.txt format

★ 158GitHub stars2 readsse
OpenAPI Proxy✕BLOCK D

matthewhand/mcp-openapi-proxy

MCP server that dynamically exposes REST APIs defined by OpenAPI specs. Dual-stack MCP 1.x/2.x with native Streamable HTTP.

★ 156GitHub stars1 readstdio
LeetCode✕BLOCK D

jinzcdev/leetcode-mcp-server

An MCP server enabling automated access to LeetCode's problems, solutions, and public data with optional authentication for user-specific features, supporting leetcode.com & leetcode.cn sites.

★ 153GitHub stars4 writestdio
Live Tennis API✕BLOCK D

livetennisapi/livetennisapi-mcp

MCP server for the Live Tennis API — give Claude, Cursor and other LLM agents real-time tennis scores, odds and model win-probability

★ 152GitHub stars24 readstdio
PostHog✕BLOCK D

posthog/mcp

Official PostHog MCP Server 🦔

★ 151GitHub stars3 readstreamable-http
Magg✕BLOCK D

sitbon/magg

Magg: The MCP Aggregator

★ 144GitHub stars2 writestdio
Memex✕BLOCK D

iamtouchskyer/memex

Zettelkasten-based persistent memory for AI coding agents. Works with Claude Code, Cursor, VS Code Copilot, Codex, Windsurf & any MCP client. No vector DB — just markdown + git sync.

★ 142GitHub stars4 writestdio
MCP-X Agent✕BLOCK D

timecyber/mcp-x

这是一个MCP客户端,让你轻松配置各个大模型,对接各种MCP Server而开发。This is an MCP client that allows you to easily configure various large models and develop interfaces with various MCP servers.

★ 141GitHub stars6 readsse
Cesium✕BLOCK D

gaopengbin/cesium-mcp

Protocol-agnostic CesiumJS AI control runtime for MCP, WebMCP, function calling, and browser agents.

★ 140GitHub stars2 writestdio
mcp-evals✕BLOCK D

mclenhard/mcp-evals

A Node.js package and GitHub Action for evaluating MCP (Model Context Protocol) tool implementations using LLM-based scoring. This helps ensure your MCP server's tools are working correctly and performing well.

★ 134GitHub stars1 writestdio
Fitter✕BLOCK D

pxyup/fitter

New way for collect information from the API's/Websites

★ 133GitHub stars3 readstdio
N8N Workflow Transformer✕BLOCK D

super-chain/n8n2mcp

Convert N8N agent / workflow into MCP servers, you can use it in Claude / Cursor / Super Chain

★ 132GitHub stars1 writestreamable-http
RivalSearch✕BLOCK D

damionrashford/rivalsearchmcp

Deterministic research MCP server on FastMCP 3 — 5-engine web search, 9-platform social search, 6 academic DBs, news aggregation, entity profiles, conflict detection, document analysis. No API keys. No in-server LLM. Structured outputs for agent chaining.

★ 132GitHub stars5 read
Streamable Http✕BLOCK D

invariantlabs-ai/mcp-streamable-http

Example implementation of MCP Streamable HTTP client/server in Python and TypeScript.

★ 132GitHub stars2 readstreamable-http
MiniMax✕BLOCK D

minimax-ai/minimax-mcp-js

Official MiniMax Model Context Protocol (MCP) JavaScript implementation that provides seamless integration with MiniMax's powerful AI capabilities including image generation, video generation, text-to-speech, and voice cloning APIs.

★ 130GitHub stars36 readsse
Suede Creator Skills✕BLOCK D

jasoncolapietro/suede-creator-skills

Open-source AI skills for SEO, AI search visibility, conversion copy, marketing strategy, and business operations. Reusable workflows for Claude Code and Codex, plus code review, app delivery, and creator tools.

★ 127GitHub stars7 writestdio
Test Client✕BLOCK D

willccbb/mcp-client-server

An MCP Server that's also an MCP Client. Useful for letting Claude develop and test MCPs without needing to reset the application.

★ 127GitHub stars3 writestdio
Office✕BLOCK D

officemcp/officemcp

The MCP server for AI like to automate Microsoft office applications like Word, Excel, Outlook, PowerPoint, Access, OneNote, Publisher, Visio, Project and also WPS .

★ 121GitHub stars1 writesse
callscript✕BLOCK D

vercel-labs/callscript

★ 118GitHub stars1 write
RustChain & BoTTube & Beacon✕BLOCK D

scottcjn/rustchain-mcp

MCP server for AI agents in the RustChain ecosystem: RTC credit wallets and signed transfers, bounty discovery, BoTTube video publishing, and Beacon agent-to-agent messaging. Built on createkr's RustChain SDK.

★ 118GitHub stars9 write
Windows Desktop Automation✕BLOCK D

mario-andreschak/mcp-windows-desktop-automation

A Model Context Protocol (MCP) server for Windows desktop automation using AutoIt.

★ 118GitHub stars2 writestdio
Adobe Premiere Pro✕BLOCK D

ayushozha/adobepremierepromcp

An open-source bridge between AI assistants and Adobe Premiere Pro, for supported editing workflows. Go, Rust, Python, and TypeScript.

★ 117GitHub stars1 write
rustchain-mcp✕BLOCK D

Scottcjn/rustchain-mcp

MCP server for autonomous agent economies: wallets, signed RTC micropayments, bounty discovery, BoTTube video publishing, and Beacon agent-to-agent messaging. Give your AI agent an income. Built on createkr's RustChain SDK.

★ 116GitHub stars9 write
Three.js Devtools✕BLOCK D

dmitriygolub/threejs-devtools-mcp

Three.js MCP server — inspect and edit scenes, materials, shaders, lights in real time from any AI agent

★ 116GitHub stars2 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.