MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/98

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,329–2,352 of 3,145 · ranked by trust score, then stars

SmartBear

smartbear/smartbear-mcp

✕BLOCK D

SmartBear's official MCP Server

★ 441 writesse

Kling

199-mcp/mcp-kling

✕BLOCK D

🎬 The FIRST MCP server for Kling AI video generation! Generate stunning AI videos directly from Claude.

★ 432 writestdio

Agentic Client

peakmojo/agentic-mcp-client

✕BLOCK D

A standalone agent runner that executes tasks using MCP (Model Context Protocol) tools via Anthropic Claude, AWS BedRock and OpenAI APIs. It enables AI agents to run autonomously in cloud environments and interact with various systems securely.

★ 423 read

npm-deprecated-check

KID-joker/npm-deprecated-check

✕BLOCK D

🐦 Check for deprecated packages

★ 425 readstdio

Parallel Browser

etairl/parallel-browser-mcp

✕BLOCK D

An MCP server for parallel browser automation by AI agents with multiple cloud providers

★ 423 writestdio

Python REPL

hdresearch/mcp-python

✕BLOCK D

A python repl for MCP

★ 422 writestdio

JW

advenimus/jw-mcp

✕BLOCK D

MCP Tools for Jehovah's Witnesses

★ 419 readstdio

Office Document Generator

dvejsada/mcp-ms-office-documents

✕BLOCK D

MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)

★ 411 readstreamable-http

Office Documents

forlegalai/mcp-ms-office-documents

✕BLOCK D

MCP server providing tools to create Ms Office documents like presentations, emails, spreadsheets and word docs (pptx, docx, eml, xlsx)

★ 411 readstreamable-http

MCP Server NestJS Module Library <!-- omit in toc -->

adrian-d-hidalgo/nestjs-mcp-server

✕BLOCK D
★ 392 writestreamable-http

Code Analyzer

emiryasar/mcp_code_analyzer

✕BLOCK D

A Model Context Protocol (MCP) server implementation for comprehensive code analysis. This tool integrates with Claude Desktop to provide code analysis capabilities through natural language interactions.

★ 391 writestdio

Manus

huyouare/manus-mcp

✕BLOCK D

MCP server that provides Manus-like capabilities

★ 396 readstdio

Origene

gentel-lab/origenemcp

✕BLOCK D
★ 3923 writesse

Snowflake AI Kit

snowflake-labs/snowflake-ai-kit

✕BLOCK D

Snowflake AI Kit: Cortex Code plugin for automatic Snowflake routing, envelope-based permission policy, and one-command installers for Snowflake CLI + Cortex Code CLI.

★ 394 writestdio

e-arveldaja-mcp

iseppo/e-arveldaja-mcp

✕BLOCK D

Experimental MCP server for Estonian e-arveldaja (RIK e-Financials) API. Not affiliated with RIK. Use at your own risk.

★ 382 writestdio

Okta

fctr-id/okta-mcp-server

✕BLOCK D

The Okta MCP Server is a groundbreaking tool built by the team at Fctr that enables AI models to interact directly with your Okta environment using the Model Context Protocol (MCP). Built specifically for IAM engineers, security teams, and Okta administrators, it implements the MCP specification to

★ 384 readsse

Plasmate

plasmate-labs/plasmate

✕BLOCK D

Browser engine for agents. HTML in, structured Semantic Object Model out. Native MCP and AWP with a supported CDP subset. Apache-2.0.

★ 381 readstdio

YouTube Transcript

ergut/youtube-transcript-mcp

✕BLOCK D

Zero-setup YouTube transcript extraction for Claude. Works on mobile, desktop, and web - no local installation required.

★ 381 read

AusLaw

russellbrenner/auslaw-mcp

✕BLOCK D

jurisd is an open, local-first research and drafting workbench for AU/NZ law. It gives you, or the AI assistant you already use, fast answers from legislation and case law where every claim traces back to the primary source. It runs locally by default, so confidential and privileged work never has t

★ 3712 readstdio

E-arveldaja

iseppo/e-arveldaja-mcp

✕BLOCK D

Experimental MCP server for Estonian e-arveldaja (RIK e-Financials) API. Not affiliated with RIK. Use at your own risk.

★ 372 writestdio

ShellKeeper

tranhuucanh/mcp-shellkeeper

✕BLOCK D

Persistent Terminal Sessions + File Transfer for AI Assistants

★ 373 writestdio

Tasogare

enhydrink/tasogare

✕BLOCK D

Read the same book with your AI. A collaborative reader with text-anchored two-color highlights and an MCP server so an AI companion can flip through, mark up, and comment alongside you.

★ 371 writesse

Currency Conversion

wesbos/currency-conversion-mcp

✕BLOCK D

A currency conversion MCP server

★ 364 read

Google Sheets & Forms

hellotinah/mcp

✕BLOCK D

MCP Code Example

★ 363 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.