MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/15
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
337–360 of 1,620 · ranked by trust score, then stars
HexDocs
bradleygolden/hexdocs-mcp
Semantic search for Hex documentation, right in your editor ✨
Logseq Tools
joelhooks/logseq-mcp-tools
mcp server for logseq graph
Shannon Thinking
olaservo/shannon-thinking
MCP server for applying a Claude Shannon-inspired problem-solving pattern
Web Search
uk0/web-search-fast
一个简单的本地 web search mcp ,可以集群规模化进行对外提供服务。
AI Diagram & Prototype Generator
simonutd/ai-diagram-prototype-generator-mcp-server-
AI Diagram & Prototype File Generator (MCP Server)
Claude Memory
whenmoon-afk/claude-memory-mcp
Local citation-backed recall for Pi, OMP, Claude Code, Codex, and ChatGPT history.
Datadog
geli2001/datadog-mcp-server
MCP server interacts with the official Datadog API
datadog-mcp-server
GeLi2001/datadog-mcp-server
MCP server interacts with the official Datadog API
Deepseek Thinker
ruixingshi/deepseek-thinker-mcp
A MCP provider Deepseek reasoning content to MCP-enabled AI Clients, like Claude Desktop. Supports access to Deepseek's CoT from the Deepseek API service or a local Ollama server.
Design System
freema/mcp-design-system-extractor
MCP (Model Context Protocol) server that enables AI assistants to interact with Storybook design systems. Extract component HTML, analyze styles, and help with design system adoption and refactoring.
Google Search
adenot/mcp-google-search
Linked API
linked-api/linkedapi-mcp
MCP server that lets AI assistants control LinkedIn accounts and retrieve real-time data.
agentmail-mcp
agentmail-to/agentmail-mcp
Email inboxes for AI agents: send, receive, reply, search, and manage threaded email over MCP.
Deepseek R1
66julienmartin/mcp-server-deepseek_r1
A Model Context Protocol (MCP) server implementation connecting Claude Desktop with DeepSeek's language models (R1/V3)
Xcode Index
block/xcode-index-mcp
Give AI agents access to Xcode's index
Claude Code Emacs
yuya373/claude-code-emacs
This package provides seamless integration with Claude Code, allowing you to run AI-powered coding sessions directly in your Emacs environment.
Unity API
codeturion/unity-api-mcp
Instant, accurate Unity API lookups instead of expensive source file reads, saving your agent tokens, context, and hallucinations
AgentMail
agentmail-to/agentmail-mcp
Email inboxes for AI agents: send, receive, reply, search, and manage threaded email over MCP.
Astro Docs
withastro/docs-mcp
Astro Docs MCP Server
AI Federation Network
ruvnet/federated-mcp
This implementation follows the official MCP specification, including proper message framing, transport layer implementation, and complete protocol lifecycle management. It provides a foundation for building federated MCP systems that can scale across multiple servers while maintaining security and
Legifrance
pylegifrance/mcp-server-legifrance
Legifrance MCP Server
MyChatArchive
1ch1n/mychatarchive
Local-first AI memory archive. Import ChatGPT, Claude, and Grok exports, generate semantic embeddings, and search via MCP server. Zero cloud, zero cost.
ReactBits
ceorkm/reactbits-mcp-server
MCP server providing access to 135+ animated React components from ReactBits.dev (9.2/10 test score)
Searchoor
0xdaef0f/job-searchoor
A simple MCP server that delivers you jobs based on your needs
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?