MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/96
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,281–2,304 of 3,145 · ranked by trust score, then stars
Bonsai
jotaderodriguez/bonsai_mcp
CTF Solver
foxibu/ctf-solver
Calculator
huhabla/calculator-mcp-server
A Model Context Protocol (MCP) server that provides Claude with advanced mathematical calculation capabilities
Codebase Index
mikerecognex/mcp-codebase-index
17 MCP query tools for codebase navigation — functions, classes, imports, dependency graphs, change impact. Zero dependencies. 87% token reduction.
Guosheng Toolbox
2234839/mcpserver
为claude code+glm 添加上眼睛
Iron Manus
dnnyngyen/ironmanus-mcp
Iron Manus MCP
Iron Manus
dnnyngyen/iron-manus-mcp
Iron Manus MCP
qinyuanpei/mcp-server-weibo
基于 Model Context Protocol 的微博数据接口服务器 - 实时获取微博用户信息、动态内容、热搜榜单、粉丝关注数据。支持用户搜索、内容搜索、话题分析,为 AI 应用提供完整的微博数据接入方案。
Mailgun
mailgun/mailgun-mcp-server
Implementation of Model Context Protocol server for Mailgun APIs
Goke
remorses/goke
simple, type safe, elegant command line framework. the CLI framework for agents
CKAN Server
ondata/ckan-mcp-server
MCP server for querying CKAN open data portals (package search, DataStore SQL, organizations, groups, tags)
Context Awesome
bh-rat/context-awesome
awesome-lists now available as CLI & MCP server for your agent.
Contentful
contentful/contentful-mcp-server
MCP (Model Context Protocol) server for the Contentful Management API
WeChat Publisher
bobgod/wechat-publisher-mcp
微信公众号MCP服务
Xcode
lapfelix/xcodemcp
MCP server for Xcode that wraps its AppleScript interface & uses XCLogParser to return clear build results
SmartStudy Agent
humphreysun98/smart-study-agent
The AI study agent that learns how you learn — RL picks the action, FSRS picks the timing, the LLM only writes the quizzes. Chrome extension · Anki export · MCP server · runs on Ollama
Brightspace
rohanmuppa/brightspace-mcp-server
MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, rosters, syllabus & course content via Claude, ChatGPT, Cursor, Windsurf, or any MCP client. Works with any school. npm: npx brightspace-mcp-server@latest
brightspace-mcp-server
RohanMuppa/brightspace-mcp-server
MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, rosters, syllabus & course content via Claude, ChatGPT, Cursor, Windsurf, or any MCP client. Works with any school. npm: npx brightspace-mcp-server@latest
LinkedIn Browser
alinaqi/mcp-linkedin-server
LinkedIn MCP Server for local automation
OpenRouter Agents
wheattoast11/openrouter-deep-research-mcp
A multi-agent research MCP server + mini client adapter - orchestrates a net of async agents or streaming swarm to conduct ensemble consensus-backed research. Each task builds its own indexed pglite database on the fly in web assembly. Includes semantic + hybrid search, SQL execution, semaphores, pr
Pentester
halilkirazkaya/pentester-mcp
Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via the Model Context Protocol (MCP) using a secure Docker sandbox.
Cedar For Agents
cedar-policy/cedar-for-agents
Python Local
alec2435/python_mcp
MCP Server to run python code locally
Mermaid
narasimhaponnada/mermaid-mcp
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?