MCP servers · least privilege

MCP servers with no destructive tools

3,145 MCP servers declare at least one tool and none of them is classed destructive: nothing deletes, overwrites or runs a command through a declared tool. 1,620 of them only read; the rest may create or edit.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “MCP servers with no destructive tools”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/no-destructive/page/99

Verdicts · 3,145 servers

✓SAFE1,632!CAUTION521✕BLOCK992

Transports

A server can list more than one transport.

3,145 servers

2,353–2,376 of 3,145 · ranked by trust score, then stars

MCPMate

loocor/mcpmate

✕BLOCK D

MCPMate is a progressive MCP management center for organizing servers, clients, profiles, capabilities, and runtime visibility in one local workspace.

★ 369 readstdio

PRD Creator

saml1211/prd-mcp-server

✕BLOCK D

Flagship Model Context Protocol server for generating Product Requirement Documents (PRDs) from codebase context.

★ 361 readstdio

Memory Bank

aakarsh-sasi/memory-bank-mcp

✕BLOCK D

MCP Server with Remote SSH support

★ 356 writestdio

Oracledb

rahgadda/oracledb_mcp_server

✕BLOCK D

MCP server to connect to Oracle Database

★ 352 write

Zenku

antonylu0826/zenku-v2

✕BLOCK D

AI-first No-Code engine for building production-ready data apps via conversation. Features Multi-Agent architecture, dynamic UI rendering, and built-in Undo/Time-Machine. Supports SQLite, Postgres, and MSSQL.

★ 352 writestreamable-http

extract-llms-docs

nirholas/extract-llms-docs

✕BLOCK D

Extract documentation for AI agents from any site with llms.txt support. Features MCP server, REST API, batch processing, and multiple export formats.

★ 342 writestdio

Gemini

houtini-ai/gemini-mcp

✕BLOCK D

Google Gemini MCP - Use Google's visual, video and chat capabilities in your AI Assistant. Uses MCP Apps to preview created images, landing pages, SVGs and video

★ 348 readstdio

LLM Energy

nirholas/extract-llms-docs

✕BLOCK D

Extract documentation for AI agents from any site with llms.txt support. Features MCP server, REST API, batch processing, and multiple export formats.

★ 342 writestdio

LM Studio Toolpack

zihaofu245/lmstudio-toolpack

✕BLOCK D

A MCP stdio toolpack for local LLMs

★ 342 readstdio

Mattermost Host

jagan-shanmugam/mattermost-mcp-host

✕BLOCK D

A Mattermost integration that connects to Model Context Protocol (MCP) servers, leveraging a LangGraph-based Agent.

★ 343 writestdio

Muster

giantswarm/muster

✕BLOCK D

Aggregating MCP server: one authenticated endpoint for every MCP server a platform runs, with meta-tool discovery, toolsets, OAuth 2.1 and SSO through Dex, and Kubernetes custom resources

★ 342 writestreamable-http

ThoughtSpot

thoughtspot/mcp-server

✕BLOCK D

The ThoughtSpot MCP Server

★ 345 readsse

C++ Analyzer

kandrwmrtn/cplusplus_mcp

✕BLOCK D

An MCP (Model Context Protocol) server for analyzing C++ codebases using libclang.

★ 331 writestdio

docusaurus-plugin-mcp-server

scalvert/docusaurus-plugin-mcp-server

✕BLOCK D

Docusaurus plugin that publishes your documentation as an MCP server

★ 331 writestreamable-http

Relace

possible055/relace-mcp

✕BLOCK D

Unofficial Relace MCP client with AI features. Personal project; not affiliated with or endorsed by Relace

★ 331 readstreamable-http

Kafka Schema Registry

aywengo/kafka-schema-reg-mcp

✕BLOCK D

A comprehensive Message Control Protocol (MCP) server for Kafka Schema Registry.

★ 324 writestreamable-http

Puzzlebox

cliffhall/puzzlebox

✕BLOCK D

An MCP server that hosts finite state machines as dynamic resources that multiple clients can subscribe to and be updated when their state changes.

★ 321 writesse

devbar.sh

TimMikeladze/devbar

✕BLOCK D

Drop-in toolbar for any website — annotate the UI and capture selectors, computed styles, React component trees, and screenshots as an agent-ready prompt.

★ 301 writestreamable-http

Scout Monitoring

scoutapp/scout-mcp-local

✕BLOCK D

Scout’s local MCP puts metrics, traces and errors right in your AI agent. For teams that do it all.

★ 301 writestdio

Ai-Spark

vgiri2015/ai-spark-mcp-server

✕BLOCK D
★ 292 read

DanNet

kuhumcst/dannet

✕BLOCK D

The Danish WordNet.

★ 291 writestreamable-http

IL2CPP Frida

axhlzy/il2cpp-frida-mcp

✕BLOCK D

il2cpp frida MCP Server

★ 295 writestdio

Vibetrack

chroneus/vibetrack

✕BLOCK D

Modern experiment tracking that follows you across servers, messengers, and LLMs.

★ 291 writestreamable-http

Semgrep

szowesgad/mcp-server-semgrep

✕BLOCK D

MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements di

★ 281 writestdio

Other risk hubs

By job

Questions

What counts as destructive?
A tool that deletes, overwrites or runs commands. We class every tool the source declares as read, write or destructive; a server is listed here when it has tools and none is destructive.
How is this different from read-only?
Read-only servers have only read tools (1,620 servers). This list also includes servers whose tools write: 1,525 of the 3,145 do.
Does no destructive tools mean safe?
No. 1,632 are SAFE, 521 CAUTION and 992 BLOCK on this list. The verdict comes from the audit of the source, not from the tool list alone.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.