MCP servers · least privilege
MCP servers with no destructive tools
3,151 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,622 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 30 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/95
Verdicts · 3,151 servers
Transports
- stdio, runs locally2,195
- Streamable HTTP, remote1,064
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
apvlv/davinci-resolve-mcp
A Model Context Protocol (MCP) server for interacting with DaVinci Resolve and Fusion
wham/github-brain
An experimental GitHub MCP server with local database.
tuirk/kompl
A compounding LLM-wiki, best fit as a personal second brain that organizes and updates itself as it grows, zero upkeep.
xpn/mythic_mcp
A simple POC to expose Mythic as a MCP server
matthewdcage/cursor-mcp-installer
Installs MCPs in cursor for you, give it a git URL and let it rip
postralai/masquerade
The Privacy Firewall for LLMs
tenequm/pond
Lossless storage and search for AI agent sessions, across every agentic client.
fundamentallabs/minecraft-mcp
MCP server for minecraft
kalivaraprasad-gonapa/react-mcp
react-mcp integrates with Claude Desktop, enabling the creation and modification of React apps based on user prompts
haohao-end/mcp-agent
A modular Python framework implementing the Model Context Protocol (MCP). It features a standardized client-server architecture over StdIO, integrating LLMs with external tools, real-time weather data fetching, and an advanced RAG (Retrieval-Augmented Generation) system.
get-lucid/lucid
An intelligence layer grounding autonomous agents in verified, real-time knowledge at scale.
unifai-network/unifai-sdk-js
unifai-sdk-js is the Javascript/Typescript SDK for Unifai, an AI native platform for dynamic tools and agent to agent communication.
block/vscode-mcp
PerryLink/dsh-mcp-panel
MCP management console for the official DeepSeek Harness MCP client: /mcp command with health diagnostics and pipeline trial calls, a Settings MCP tab with server CRUD (approval-gated writes, automatic backups) and a tool trial console over the official tool pipeline (Apache-2.0, dsh-plugin).
senolisci/mykg
MyKG Knowledge Graph Engine: Turn raw files into knowledge graphs with induced ontology
mitsuhiko/pexpect-mcp
python + pexpect
mgorabbani/askdb
Give AI agents safe access to your database.
nataliapc/mcp-openmsx
A Model Context Protocol (MCP) server for automating openMSX emulator instances. This server provides comprehensive tools for MSX software development, testing, and automation through standardized MCP protocols.
gebalamariusz/cloud-audit
Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.
daekeun-ml/ppt-translator
A powerful PowerPoint translation tool that leverages Amazon Bedrock models for high-quality translation. This service can be used both as a standalone command-line tool and as a MCP for integration with AI assistants like Claude Code and Kiro. It translates PowerPoint presentations while preserving
lansespirit/image-gen-mcp
An MCP server that integrates with gpt-image-1 & Gemini imagen4 model for text-to-image generation services
pollinations/chucknorris
⚡ C̷h̷u̷c̷k̷N̷o̷r̷r̷i̷s̷ MCP server: Helping LLMs break limits. Provides enhancement prompts inspired by elder-plinius' L1B3RT4S
debugg-ai/debugg-ai-mcp
Zero-Config, Fully AI-Managed End-to-End Testing for all code gen platforms.
vrtejus/pymol-mcp
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?