MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/13
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
289–312 of 1,620 · ranked by trust score, then stars
Scira AI
zaidmukaddam/scira-mcp
Patent Literature Search
patsnap/patent-literature-search-mcp
Search global patents across WIPO, EPO, USPTO, CNIPA, JPO, KIPO and other authorities, together with scientific literature from PubMed, arXiv, Nature, Science and other major sources using natural-language, semantic, keyword and structured search.
IMessage Query
hannesrudolph/imessage-query-fastmcp-mcp-server
An MCP server that provides safe access to your iMessage database through Model Context Protocol (MCP). This server is built with the FastMCP framework and the imessagedb library, enabling LLMs to query and analyze iMessage conversations with proper phone number validation and attachment handling.
Server Template
interactionco/mcp-server-template
Shanghai Disney
syyuan14/sh-disney-mcp
sh-disney-mcp 是一个基于 Model Context Protocol (MCP) 的mcp server,旨在通过标准化的接口,帮助大模型快速获取上海迪士尼乐园的门票价格和售卖状态信息
Bing Search
leehanchung/bing-search-mcp
MCP Server for Bing Search API
Context
dodopayments/context-mcp
Self-hosted MCP server for your documentation
GPT-5
allaboutai-yt/gpt5mcp
GPT-5 Local MCP
Wan 3.0
anil-matcha/wan-3.0-api
Wan 3.0 API Python SDK and MCP server for AI video generation: text-to-video, image-to-video, multimodal references, uploads, and async job polling.
codemirror-mcp
marimo-team/codemirror-mcp
CodeMirror extension to hook up a Model Context Provider (MCP)
Bankless Onchain
bankless/onchain-mcp
Bringing the bankless onchain API to MCP
Chotu Robo
vishalmysore/choturobo
Integrate Arduino-based robotics (using the NodeMCU ESP32 or Arduino Nano 368 board) with AI using the MCP (Model Context Protocol) framework from Claude Anthropic
i-can-hack/pdf-mcp
PDF MCP server with image rendering capabilities. Useful for automatically searching datasheets, manuals, etc...
AgentAnycast
agentanycast/agentanycast
Connect AI agents across any network — zero config, encrypted, skill-based routing
Figma Context Cached
pactortester/figma-context-mcp-cached
Cache‐enabled Figma Context MCP with persistent disk caching to reduce API rate limits and improve performance.
Search
fengin/search-server
一个基于MCP协议的搜索服务实现,提供网络搜索和本地搜索功能,Cursor和Claude Desktop能与之无缝集成。
App Store Scraper
appreply-co/mcp-appstore
This is an MCP server that provides tools to LLMs for searching and analyzing apps from both Google Play Store and Apple App Store – perfect for ASO.
ExternalAttacker
mordavid/externalattacker-mcp
A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.
Figma To React
studentofjs/mcp-figma-to-react
MCP server for converting Figma designs to React components
LLMS.txt Explorer
thedaviddias/mcp-llms-txt-explorer
MCP to explore websites with llms.txt files
Memory Bank
ipospelov/mcp-memory-bank
MCP server that helps build Memory Bank - structured documentation system for context preservation
Openai Integration
mzxrai/mcp-openai
Chat with OpenAI models from Claude Desktop
Tiktok
yap-audio/tiktok-mcp
A Model Context Protocol service for TikTok video discovery and metadata extraction.
Hacker News
erithwik/mcp-hn
MCP Server for Hackernews
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?