MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/12

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

265–288 of 1,620 · ranked by trust score, then stars

Unreal API

codeturion/unreal-api-mcp

✓SAFE B

Instant, accurate Unreal Engine API lookups instead of expensive source file reads, saving your agent tokens, context, and hallucinations.

★ 965 readstdio

Open Library

8ensmith/mcp-open-library

✓SAFE B

A Model Context Protocol (MCP) server for the Internet Archive's Open Library API that enables AI assistants to search for book and author information.

★ 957 readstdio

Flux UI

iannuttall/flux-ui-mcp

✓SAFE B
★ 934 readstdio

Octagon Deep Research

octagonai/octagon-deep-research-mcp

✓SAFE B

The Octagon Deep Research MCP server provides specialized AI-powered comprehensive research and analysis capabilities by integrating with advanced deep research agents. No rate limits, faster than ChatGPT Deep Research, more thorough than Grok DeepSearch or Perplexity Deep Research.

★ 931 readstdio

A11y

ronantakizawa/a11ymcp

✓SAFE B

MCP Server for Web Accessibility Testing (10k+ Downloads, #20 on ProductHunt)

★ 926 readstdio

Atom of Thoughts

dioptx/mcp-atom-of-thoughts

!CAUTION B

MCP server for structured AI reasoning — decompose problems into atomic thoughts with dependency graphs, confidence tracking, and interactive D3.js visualization

★ 912 readstdio

Ragie

ragieai/ragie-mcp-server

✓SAFE B

Ragie Model Context Protocol Server

★ 911 readstdio

Chess.com

pab1it0/chess-mcp

✓SAFE B

A Model Context Protocol server for Chess.com's Published Data API. This provides access to Chess.com player data, game records, and other public information through standardized MCP interfaces, allowing AI assistants to search and analyze chess information.

★ 9010 readsse

GitHub Chat

asyncfuncai/github-chat-mcp

!CAUTION B

A Model Context Protocol (MCP) for analyzing and querying GitHub repositories using the GitHub Chat API.

★ 901 read

Lucidity

hyperb1iss/lucidity-mcp

✓SAFE B

AI-powered code quality analysis using MCP to help AI assistants review code more effectively. Analyze git changes for complexity, security issues, and more through structured prompts.

★ 901 readstdio

ReAPI OpenAPI

reapi-com/mcp-openapi

✓SAFE B

OpenAPI specification MCP server.

★ 908 readstdio

RimSage

realloon/rimsage

✓SAFE B

An MCP server that enables searching and browsing of RimWorld source code.

★ 906 read

Augmented Nature ChEMBL

augmented-nature/augmented-nature-chembl-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server providing advanced access to the ChEMBL chemical database.

★ 8927 readstdio

ChEMBL

augmented-nature/chembl-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server providing advanced access to the ChEMBL chemical database.

★ 8927 readstdio

OPNsense

pixelworlds/opnsense-mcp-server

!CAUTION B

Modular MCP server for OPNsense firewall management - 88 tools providing access to 2000+ methods through AI assistants

★ 894 readstdio

iPhone

blitzdotdev/iphone-mcp

✓SAFE B

The MCP Server the lets AI use an iPhone

★ 8810 readstdio

Naver Search

isnow890/naver-search-mcp

!CAUTION B

MCP server for Naver Search API integration. Provides comprehensive search capabilities across Naver services (web, news, blog, shopping, etc) and data trend analysis tools via DataLab API.

★ 8818 readstdio

Secondhand

jlsookiki/secondhand-mcp

✓SAFE B

MCP server for searching secondhand marketplaces — Facebook Marketplace, eBay, and Depop. Works with Claude Desktop, Claude Code, and other MCP clients.

★ 885 readstdio

DuckDuckGo Search

zhsama/duckduckgo-mcp-server

✓SAFE B
★ 871 readstdio

Deep Web Research

qpd-v/mcp-deepwebresearch

✓SAFE B

Enhanced MCP server for deep web research

★ 865 readstdio

Semantic Scholar

jackkuo666/semanticscholar-mcp-server

✓SAFE B

🔍 This project implements a Model Context Protocol (MCP) server for interacting with the Semantic Scholar API. It provides tools for searching papers, retrieving paper and author details, and fetching citations and references.

★ 864 readstdio

Spline

aydinfer/spline-mcp-server

✓SAFE B

An MCP server for working with Spline 3D design tool API

★ 85145 readstdio

OpenAI Integration

pierrebrunelle/mcp-server-openai

✓SAFE B

Query OpenAI models directly from Claude using MCP protocol.

★ 841 readstdio

Gemini Google Search

yukukotani/mcp-gemini-google-search

✓SAFE B

MCP server for Google Search integration using Gemini's built-in search capabilities

★ 831 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.