MCP servers · least privilege
MCP servers with no destructive tools
3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.
Cite
Cite this page
ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/97
Verdicts · 3,145 servers
Transports
- stdio, runs locally2,191
- Streamable HTTP, remote1,060
- SSE, legacy remote253
- Not declared563
A server can list more than one transport.
3,145 servers
2,305–2,328 of 3,145 · ranked by trust score, then stars
A11y
priyankark/a11y-mcp
An MCP (Model Context Protocol) server for performing accessibility audits on webpages using axe-core. Use the results in an agentic loop with your favorite AI assistants (Amp/Cline/Cursor/GH Copilot) and let them fix a11y issues for you!
Dotbot
andresharpe/dotbot
Structured, auditable AI-assisted development for teams. Zero-dependency MCP server, web dashboard, and multi-provider AI CLI support.
Matrix
mjknowles/matrix-mcp-server
MCP Server for a Matrix home server integration; chat, manage rooms, etc.
Perplexity Comet
rapiercraft/perplexity-comet-mcp
MCP server connecting Claude Code to Perplexity Comet browser. Autonomous web browsing, agentic research, multi-tab management. Windows/WSL/macOS support. Smart completion detection, auto-reconnect, tab protection. Enhanced fork with 7 tools including comet_tabs.
Binance
analyticace/binance-mcp-server
Unofficial tools and server implementation for Binance's Model Context Protocol (MCP). Designed to support developers building crypto trading AI Agents.
Binance
analyticace/binancemcpserver
Unofficial tools and server implementation for Binance's Model Context Protocol (MCP). Designed to support developers building crypto trading AI Agents.
Widget
ref-tools/widget-mcp
Simple MCP-UI widgets for common use cases.
@putervision/state-memory-mcp
putervision/state-memory-mcp
Persistent, branch-aware workflow state memory MCP server for AI coding assistants. Tracks tasks, accepted decisions, and active blockers to prevent session context bloat and speed up development.
Agentmap
raymondchins/agentmap
Stop your coding agent reading the wrong files. Compiler-grade TS/JS repo map — 100% precision on blast radius vs grep's 60%, measured on public repos. CLI + MCP server, fully local, no vector DB.
maintainer-skills-lab
00200200/maintainer-skills-lab
17 reusable skills and 6 agents for Codex, Claude, Cursor, OpenCode, and Windsurf, built for maintainers
RLM
richardwhiteii/rlm
Recursive Language Model patterns for Claude Code — handle massive contexts (10M+ tokens) by treating them as external variables
ZenML
zenml-io/mcp-zenml
MCP server to connect an MCP client (Cursor, Claude Desktop etc) with your ZenML MLOps and LLMOps pipelines
Pagecast
mcpware/pagecast
Record any browser page as GIF or video via MCP — powered by Playwright + ffmpeg
Puppeteer Vision
djannot/puppeteer-vision-mcp
Engram
tstockham96/engram
Universal memory layer for AI agents. Remember, recall, consolidate.
McpDocServer
ruan11223344/mcpdocserver
一个基于MCP协议的开发文档服务器,专为各类开发框架文档设计
Motif
jvogan/motif
An AI-native molecular biology workbench for Claude Science: Claude opens sequence files and prepares analyses on request; you annotate, align, and review them in an interactive workspace.
Rosetta
tikoci/rosetta
MCP Server with RouterOS docs + commands + products + changelogs, using SQLite-as-RAG, sourced from MikroTik
Memory Bank
movibe/memory-bank-mcp
MCP Server para gerenciar o Memory Bank
Storybook
mcpland/storybook-mcp
A MCP server for Storybook.
Tempo
ivelin-web/tempo-mcp-server
MCP server for managing Tempo worklogs in Jira
Cloudflare Remix Vite
kentcdodds/cloudflare-remix-vite-mcp
OpenStack Operations
call518/mcp-openstack-ops
90+ production-safe OpenStack tools for AI agents via MCP. Project-scoped & read-only by default. Works with Claude, Open WebUI & any MCP client. FastMCP + OpenStack SDK. Available on PyPI, Docker Hub & Smithery.
Smartbear Mcp
SmartBear/smartbear-mcp
SmartBear's official MCP Server
Other risk hubs
By job
Questions
What counts as destructive?
How is this different from read-only?
Does no destructive tools mean safe?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What counts as destructive?
- How is this different from read-only?
- Does no destructive tools mean safe?