MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/10
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
217–240 of 1,620 · ranked by trust score, then stars
Stitch
kargatharaakash/stitch-mcp
Universal MCP Server for Google Stitch. Connect AI agents to your UI designs.
FFmpeg
egoist/ffmpeg-mcp
An MCP server for FFmpeg
Scrapling Fetch
cyberchitta/scrapling-fetch-mcp
Helps AI assistants access text content from bot-protected websites. MCP server that fetches HTML/markdown from sites with anti-automation measures using Scrapling.
Terraform Registry
thrashr888/terraform-mcp-server
Terraform Registry MCP Server
Codex Bridge
elyin/codex-bridge
A lightweight MCP server bridging AI agents to OpenAI models via official CLI
JavaSinkTracer
zacarx/javasinktracer_mcp
基于函数级污点分析的 Java 源代码漏洞审计工具JavaSinkTracer,通过 Model Context Protocol (MCP) 为 AI 助手提供安全分析能力。
Mureka
skyworkai/mureka-mcp
generate lyrics, song and background music(instrumental). Model Context Protocol (MCP) server.
deepl-mcp-server
DeepL/deepl-mcp-server
A Model Context Protocol (MCP) server that provides translation capabilities using the DeepL API.
Posecode
posecode-dev/posecode
An open-source text language, parser, validator and Three.js renderer for inspectable 3D human movement.
WordPress
emzimmer/server-wp-mcp
Academic Search
afrise/academic-search-mcp-server
Academic Paper Search MCP Server for Claude Desktop integration. Allows Claude to access data from Semantic Scholar and Crossref.
DeepL
deeplcom/deepl-mcp-server
A Model Context Protocol (MCP) server that provides translation capabilities using the DeepL API.
Oura
yuzehao2023/mcp-oura
MCP server for Oura API integration
Xueqiu
liqiongyu/xueqiu_mcp
Cli
mcpgod/cli
Fine-grained control over model context protocol (MCP) clients, servers, and tools. Context is God.
Deepseek Thinking Claude
newideas99/deepseek-thinking-claude-3.5-sonnet-cline-mcp
🧠 MCP server implementing RAT (Retrieval Augmented Thinking) - combines DeepSeek's reasoning with GPT-4/Claude/Mistral responses, maintaining conversation context between interactions.
Luma
jochenyang/luma-mcp
多模型视觉理解 MCP 服务器,为不支持图片理解的 AI 编码模型提供视觉能力:分析截图、报错、UI 与文档,可接入多家主流视觉大模型。Multi-model vision MCP server that adds image understanding to AI coding models without native vision — analyze screenshots, errors, UI and documents via major vision LLM providers.
Py-MCP-Naver
pfldy2850/py-mcp-naver
python MCP NAVER
Vectorize
vectorize-io/vectorize-mcp-server
Official Vectorize MCP Server
Medical
jamesanz/medical-mcp
An MCP server that provides comprehensive medical information by querying multiple authoritative medical APIs including FDA, WHO, PubMed, Google Scholar, and RxNorm
medical-mcp
JamesANZ/medical-mcp
An MCP server that provides comprehensive medical information by querying multiple authoritative medical APIs including FDA, WHO, PubMed, Google Scholar, and RxNorm
Meting Agent
eldment/meting-agent
🪐 面向 AI 的多音乐平台的 API 代理 • 网易云 • QQ音乐 • 酷狗 • 酷我 🎻 Multi-platform music API agent for AI • NetEase • QQ Music • KuGou • Kuwo
Korean DART
chrisryugj/korean-dart-mcp
OpenDART 전자공시MCP | 83개 API → 15 MCP 도구. 공시·재무·지분·XBRL + 버핏급 애널리스트 프레임(내부자 시그널·회계 리스크·퀄리티 체크리스트) + HWP/PDF 첨부 마크다운화 | 83 Korean DART disclosure APIs → 15 MCP tools with Buffett-grade analyst frames
Screenshot
just-every/mcp-screenshot-website-fast
Quickly screenshots webpages and converts to an LLM friendly size
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?