MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/94
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
lennney/agent-search-mcp
Free-first Chinese and English web search MCP using zero-key sources and inspectable evidence.
opentofu/opentofu-mcp-server
OpenTofu MCP Server for accessing the OpenTofu Registry
helloggx/shadcn-vue-mcp
Shadcn-vue and Tailwind CSS are essential for component development, offering developers a fast and high-quality experience in Vue component development.
zhensherlock/sp500-mcp-server
An MCP server and Next.js web app for querying S&P 500 company data from Supabase, with tools for company info, news, officers, and SEC filings, plus embedded MCP App UI resources, Elicitation, and Sampling support.
fdrechsler/mcp-server-idapro
A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.
rich627/whatsapp-claude-plugin
Claude Code WhatsApp channel plugin — run AI directly from WhatsApp, voice transcription, remote tool approval, access control. No API keys, no Docker, just a linked device.
Epistates/turbomcp
A full featured, enterprise grade rust MCP SDK
stabgan/openrouter-mcp-multimodal
MCP server for OpenRouter — chat with 300+ LLMs (Claude, Gemini, GPT), analyze images / audio / video, generate images / speech / music / video (Veo 3.1, Sora, Seedance, Wan) from Claude Desktop, Cursor, Kiro, VS Code.
dmcxblue/claude-c2
Utilizng an MCP Server to communicate with your C2
arm/mcp
Arm's MCP server
istarwyh/mcpadvisor
MCP Advisor & Installation - Use the right MCP server for your needs
youdotcom-oss/agent-skills
You.com skills and plugins for web search, content extraction, research, finance, and integration discovery, helping AI agents build with up-to-date web context.
dedeveloper23/codebase-mcp
Model Context Protocol implementation for retrieving codebases using RepoMix
frowningdev/django-orm-lens
Django ER diagrams, N+1 detection, schema drift & migration-risk linting — in VS Code, a CLI and an MCP server. Static analysis: no database, no django.setup(). Free & MIT.
shannonlal/mcp-postman
MCP Server for running Postman Collections with Newman
nameetp/pdfmux
PDF extraction that audits its own output — and certifies any other extractor's, catching pages they silently dropped. Verify signed manifests offline: free, MIT, no account. 0.903 on opendataloader-bench, #2 of 8 engines. 7-tool MCP server.
sktkkoo/Yorishiro
A terminal that gives AI a body and a living space.
zxyasfas/paper_format_agent
DOCX formatter for academic papers with a content-fingerprint guard: proves your text is never altered, only the formatting. Also installable as an agent skill. 毕业论文、学位论文的 Word 自动排版:按格式要求改字体字号、行距、缩进、标题和题注;指纹校验保证只改格式、不动正文,也可做格式检查评分。
sudowealth/schwab-mcp
Schwab MCP server that enables AI assistants like Claude to retrieve and interact with your Schwab accounts and Schwab market data.
zillow/auto-mobile
Mobile automation suite of tools including an MCP and libraries for test authoring & execution
timecyber/email-mcp
一个让AI轻松接管邮箱的MCP服务,基于 Model Context Protocol (MCP) 构建,支持在 MCP-X,Claude Desktop 等 MCP 客户端中使用。
aarora79/mcp-gateway
MCP Gateway and Registry
aiurda/cursor10x-mcp
The Cursor10x MCP is a persistent multi-dimensional memory system for Cursor that enhances AI assistants with conversation context, project history, and code relationships across sessions.
aurda012/cursor10x-mcp
The Cursor10x MCP is a persistent multi-dimensional memory system for Cursor that enhances AI assistants with conversation context, project history, and code relationships across sessions.
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?