MCP servers · least privilege

MCP servers with no destructive tools

3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/94

Verdicts · 3,151 servers

✓SAFE1,634!CAUTION522✕BLOCK995

Transports

A server can list more than one transport.

3,151 servers · 2,233–2,256 · ranked by trust score, then stars
Agent Search✕BLOCK D

lennney/agent-search-mcp

Free-first Chinese and English web search MCP using zero-key sources and inspectable evidence.

★ 110GitHub stars9 readstdio
OpenTofu✕BLOCK D

opentofu/opentofu-mcp-server

OpenTofu MCP Server for accessing the OpenTofu Registry

★ 110GitHub stars7 readstdio
Shadcn-Vue✕BLOCK D

helloggx/shadcn-vue-mcp

Shadcn-vue and Tailwind CSS are essential for component development, offering developers a fast and high-quality experience in Vue component development.

★ 108GitHub stars5 read
S&P 500✕BLOCK D

zhensherlock/sp500-mcp-server

An MCP server and Next.js web app for querying S&P 500 company data from Supabase, with tools for company info, news, officers, and SEC filings, plus embedded MCP App UI resources, Elicitation, and Sampling support.

★ 107GitHub stars6 readstreamable-http
Ida Pro Server✕BLOCK D

fdrechsler/mcp-server-idapro

A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.

★ 102GitHub stars2 writestdio
WhatsApp Claude Plugin✕BLOCK D

rich627/whatsapp-claude-plugin

Claude Code WhatsApp channel plugin — run AI directly from WhatsApp, voice transcription, remote tool approval, access control. No API keys, no Docker, just a linked device.

★ 102GitHub stars2 writestdio
turbomcp✕BLOCK D

Epistates/turbomcp

A full featured, enterprise grade rust MCP SDK

★ 98GitHub stars1 writestdio
Openrouter Mcp Multimodal✕BLOCK D

stabgan/openrouter-mcp-multimodal

MCP server for OpenRouter — chat with 300+ LLMs (Claude, Gemini, GPT), analyze images / audio / video, generate images / speech / music / video (Veo 3.1, Sora, Seedance, Wan) from Claude Desktop, Cursor, Kiro, VS Code.

★ 97GitHub stars1 readstdio
Claude-C2✕BLOCK D

dmcxblue/claude-c2

Utilizng an MCP Server to communicate with your C2

★ 94GitHub stars1 write
Arm✕BLOCK D

arm/mcp

Arm's MCP server

★ 91GitHub stars2 readstdio
MCP Advisor✕BLOCK D

istarwyh/mcpadvisor

MCP Advisor & Installation - Use the right MCP server for your needs

★ 89GitHub stars1 writesse
agent-skills✕BLOCK D

youdotcom-oss/agent-skills

You.com skills and plugins for web search, content extraction, research, finance, and integration discovery, helping AI agents build with up-to-date web context.

★ 86GitHub stars1 readstreamable-http
Codebase✕BLOCK D

dedeveloper23/codebase-mcp

Model Context Protocol implementation for retrieving codebases using RepoMix

★ 84GitHub stars1 writesse
Django ORM Lens✕BLOCK D

frowningdev/django-orm-lens

Django ER diagrams, N+1 detection, schema drift & migration-risk linting — in VS Code, a CLI and an MCP server. Static analysis: no database, no django.setup(). Free & MIT.

★ 84GitHub stars13 readstdio
Postman Runner✕BLOCK D

shannonlal/mcp-postman

MCP Server for running Postman Collections with Newman

★ 84GitHub stars1 writestdio
Pdfmux✕BLOCK D

nameetp/pdfmux

PDF extraction that audits its own output — and certifies any other extractor's, catching pages they silently dropped. Verify signed manifests offline: free, MIT, no account. 0.903 on opendataloader-bench, #2 of 8 engines. 7-tool MCP server.

★ 83GitHub stars8 readstdio
Yorishiro✕BLOCK D

sktkkoo/Yorishiro

A terminal that gives AI a body and a living space.

★ 82GitHub stars4 writestreamable-http
Paper Format Agent✕BLOCK D

zxyasfas/paper_format_agent

DOCX formatter for academic papers with a content-fingerprint guard: proves your text is never altered, only the formatting. Also installable as an agent skill. 毕业论文、学位论文的 Word 自动排版:按格式要求改字体字号、行距、缩进、标题和题注;指纹校验保证只改格式、不动正文,也可做格式检查评分。

★ 81GitHub stars3 readstdio
Schwab✕BLOCK D

sudowealth/schwab-mcp

Schwab MCP server that enables AI assistants like Claude to retrieve and interact with your Schwab accounts and Schwab market data.

★ 81GitHub stars4 write
AutoMobile✕BLOCK D

zillow/auto-mobile

Mobile automation suite of tools including an MCP and libraries for test authoring & execution

★ 80GitHub stars16 readsse
Email✕BLOCK D

timecyber/email-mcp

一个让AI轻松接管邮箱的MCP服务,基于 Model Context Protocol (MCP) 构建,支持在 MCP-X,Claude Desktop 等 MCP 客户端中使用。

★ 80GitHub stars1 writestdio
Mcp Gateway✕BLOCK D

aarora79/mcp-gateway

MCP Gateway and Registry

★ 80GitHub stars2 read
Cursor10x✕BLOCK D

aiurda/cursor10x-mcp

The Cursor10x MCP is a persistent multi-dimensional memory system for Cursor that enhances AI assistants with conversation context, project history, and code relationships across sessions.

★ 78GitHub stars1 writestdio
Cursor10x✕BLOCK D

aurda012/cursor10x-mcp

The Cursor10x MCP is a persistent multi-dimensional memory system for Cursor that enhances AI assistants with conversation context, project history, and code relationships across sessions.

★ 78GitHub stars1 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,622 servers). This list also includes servers whose tools write: 1,529 of the 3,151 do.
Does no destructive tools mean safe?
No. 1,634 are SAFE, 522 CAUTION and 995 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.