MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 28 Oct 2026. https://modelsatlas.com/mcp/read-only
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
1–24 of 1,620 · ranked by trust score, then stars
figma-developer-mcp
GLips/Figma-Context-MCP
MCP server to provide Figma layout information to AI coding agents like Cursor
Figma Context
glips/figma-context-mcp
MCP server to provide Figma layout information to AI coding agents like Cursor
Mobile Next
mobile-next/mobile-mcp
Model Context Protocol Server for Mobile Automation and Scraping (iOS, Android, Emulators, Simulators and Real Devices)
Excalidraw
excalidraw/excalidraw-mcp
Fast and streamable Excalidraw MCP App
PPTAgent
icip-cas/pptagent
An Agentic Framework for Reflective PowerPoint Generation
Chart Generator
antvis/mcp-server-chart
🤖 A visualization mcp & skills contains 25+ visual charts using @antvis. Using for chart generation and data analysis.
N8n MCP Client
nerding-io/n8n-nodes-mcp
n8n custom node for MCP
Markdownify
zcaceres/markdownify-mcp
A Model Context Protocol server for converting almost anything to Markdown
DDGS
deedy5/ddgs
A metasearch library that aggregates results from diverse web search services
Supabase
supabase-community/mcp-supabase
Connect Supabase to your AI assistants
Supabase
supabase-community/supabase-mcp
Connect Supabase to your AI assistants
Mcp Proxy
sparfenyuk/mcp-proxy
A bridge between Streamable HTTP and stdio MCP transports
Perplexity API Platform MCP Server
perplexityai/modelcontextprotocol
The official MCP server implementation for the Perplexity API Platform
Perplexity Ask
ppl-ai/modelcontextprotocol
The official MCP server implementation for the Perplexity API Platform
Perplexity
perplexityai/modelcontextprotocol
The official MCP server implementation for the Perplexity API Platform
Tavily
tavily-ai/tavily-mcp
Production ready MCP server with real-time search, extract, map & crawl.
OpenNews
6551team/opennews-mcp
News Aggregation · AI Ratings · Trading Signals · Real-time Updates
Apps SDK Examples Gallery
openai/openai-apps-sdk-examples
Example apps for the Apps SDK
Financial Datasets
financial-datasets/mcp-server
An MCP server for interacting with the Financial Datasets stock market API.
Gemini CLI
jamubc/gemini-mcp-tool
MCP server that enables AI assistants to interact with Google Gemini CLI, leveraging Gemini's massive token window for large file analysis and codebase understanding
Crawl4AI RAG
coleam00/mcp-crawl4ai-rag
Web Crawling and RAG Capabilities for AI Agents and AI Coding Assistants
Office PowerPoint
gongrzhe/office-powerpoint-mcp-server
A MCP (Model Context Protocol) server for PowerPoint manipulation using python-pptx. This server provides tools for creating, editing, and manipulating PowerPoint presentations through the MCP protocol.
MCP Tools
f/mcptools
A command-line interface for interacting with MCP (Model Context Protocol) servers using both stdio and HTTP transport.
DuckDuckGo Search
nickclyde/duckduckgo-mcp-server
A Model Context Protocol (MCP) server that provides web search capabilities through DuckDuckGo, with additional features for content fetching and parsing.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?