MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/11
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
241–264 of 1,620 · ranked by trust score, then stars
Square
square/square-mcp-server
A Model Context Protocol (MCP) server for square
Think
rai220/think-mcp
MCP Server for reasoning
Awsome Kali
ccq1/awsome_kali_mcpservers
awsome kali MCPServers is a set of MCP servers tailored for Kali Linux
Splunk Integration
livehybrid/splunk-mcp
[ARCHIVED] Community Splunk MCP server — use the official Splunk MCP Server on Splunkbase (app 7931)
Workspace Automation Suite
tanaikech/toolsformcpserver
The Gemini CLI confirmed that the MCP server built with Google Apps Script (GAS), a low-code platform, offers immense possibilities. If you've created snippets for GAS, these could be revitalized and/or leveraged in new ways by using them as the MCP server. The Gemini CLI and other MCP clients will
Redash MCP Server
suthio/redash-mcp
Redash
suthio/redash-mcp
Alpha Vantage
berlinbra/alpha-vantage-mcp
MCP Server for Alpha Advantage API
Train in Silence
hlpun/train-in-silence
The first Task-Aware MCP server and automated VRAM calculator for LLM fine-tuning. Instantly snipe the cheapest, fastest GPUs across 10+ cloud providers.
Jadx
mobilehackinglab/jadx-mcp-plugin
Rest API Tester
dkmaker/mcp-rest-api
A TypeScript-based MCP server that enables testing of REST APIs through Cline. This tool allows you to test and interact with any REST API endpoints directly from your development environment.
WeCom Bot
loonghao/wecom-bot-mcp-server
A Python server implementation for WeCom (WeChat Work) bot that follows the Model Context Protocol (MCP). This server provides a standardized interface for handling automated messaging and context-aware interactions within enterprise WeChat environments.
SSH Agent
aiondadotcom/mcp-ssh
A Model Context Protocol (MCP) server for managing and controlling SSH connections.
Android Source Explorer
mrmike/android-source-explorer-mcp
MCP server for exploring AOSP internals and Jetpack libraries
Gemini API Docs
philschmid/gemini-api-docs-mcp
Server Box
box-community/mcp-server-box
Securely connect AI agents to your enterprise content in Box
Agents
amtiYo/agents
One .agents source of truth to sync MCP servers, skills, and instructions across Codex, Claude Code, Gemini CLI, Cursor, Copilot, and Antigravity.
Shortcut
useshortcut/mcp-server-shortcut
The MCP server for Shortcut
Sub-Agents
shinpr/sub-agents-mcp
Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.
sub-agents-mcp
shinpr/sub-agents-mcp
Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.
Japanese Tax Law
kentaroajisaka/tax-law-mcp
MCP server for Japanese tax law — e-Gov API & NTA 通達 (administrative circulars)
Perplexity
wysh3/perplexity-mcp-zerver
MCP web search using perplexity without any API KEYS
Weather Server
microsoft/lets-learn-mcp-javascript
@shortcut/mcp
useshortcut/mcp-server-shortcut
The MCP server for Shortcut
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?