MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/14
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
313–336 of 1,620 · ranked by trust score, then stars
Template
mcpdotdirect/template-mcp-server
Template to quickly set up your own MCP server
BitDive
bitdive/mcp-server
BitDive Model Context Protocol (MCP) server. The Autonomous Quality Loop for AI agents. Provides real runtime context, before/after trace comparison, and integration testing workflows.
Korean Law
seonaru/korean-law-mcp
korean-law-mcp
Ntfy-Me
gitmotion/ntfy-me-mcp
An ntfy MCP server for sending/fetching ntfy notifications to self-hosted or ANY ntfy.sh server from AI Agents 📤 (supports secure token auth & more - use with npx or docker!)
Wolfram Alpha
secretiveshell/mcp-wolfram-alpha
Connect your chat repl to wolfram alpha computational intelligence
CryptoPanic
kukapay/cryptopanic-mcp-server
Provide latest cryptocurrency news to AI agents.
Flutter
adamsmaka/flutter-mcp
GDB
smadi0x86/gdb-mcp
Multi Debugger MCP server that enables LLMs to interact with GDB and LLDB for binary debugging and analysis.
Omni
openadaptai/omnimcp
Labs: a perceive-plan-act computer-use experiment. Not the OpenAdapt product. The product is openadapt-flow: a compiled program that halts unless an independent check passes.
SearchAPI
rmmargt/searchapi-mcp
SearchAPI MCP for Google searches
Boilerplate
aashari/boilerplate-mcp-server
TypeScript Model Context Protocol (MCP) server boilerplate providing IP lookup tools/resources. Includes CLI support and extensible structure for connecting AI systems (LLMs) to external data sources like ip-api.com. Ideal template for creating new MCP integrations via Node.js.
kospi-kosdaq-stock-server
dragon1086/kospi-kosdaq-stock-server
An MCP server that provides KOSPI/KOSDAQ stock data using FastMCP
Gdrive
felores/gdrive-mcp-server
Efficient implementation of the Google Drive MCP server
Hugging Face
shreyaskarnik/huggingface-mcp-server
Quran API
djalal/quran-mcp-server
Quran.com API integration for verse search, translation and tafsir
Simple Voicevox
t09tanaka/mcp-simple-voicevox
Tavily
ramxx/mcp-tavily
An MCP server for Tavily's search API
Tavily Load Balancer
yatotm/tavily-mcp-loadbalancer
Load-balanced Tavily MCP server with API key pool management
Time
yokingma/time-mcp
⏰ Time MCP Server: Giving LLMs Time Awareness Capabilities
Newsnow
sligter/mcp_newsnow
一个基于 Model Context Protocol (MCP) 的新闻聚合服务器,通过 Newsnow API 提供多平台热点新闻和趋势话题。
OpenMemory
baryhuang/mcp-openmemory
Simple standalone MCP server giving Claude the ability to remember your conversations and learn from them over time.
Pinecone Developer
pinecone-io/pinecone-mcp
Connect your Pinecone projects to Cursor, Claude, and other AI assistants
Yokatlas
saidsurucu/yokatlas-mcp
MCP Server for YOK Atlas
YouTube Connector
shellydeng08/youtube-connector-mcp
MCP server for YouTube — search videos, channels, playlists, and transcripts. Works with Claude, Cursor, Windsurf, and any MCP client.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?