MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/16

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

361–384 of 1,620 · ranked by trust score, then stars

Youtube Data

icraft2170/youtube-data-mcp-server

✓SAFE B
★ 659 readstdio

GraphRAG

rileylemm/graphrag_mcp

✓SAFE B

This is a MCP server I built to interact with my hybrid graph rag db.

★ 642 read

OpenRouterai

heltonteixeira/openrouterai

✓SAFE B

MCP server for OpenRouter.ai integration

★ 644 readstdio

WayStation

waystation-ai/mcp

✓SAFE B

The only MCP Server you need. Connect any MCP host with the tools you use daily through our no-code, secure integration hub.

★ 642 readsse

CSFD API

bartholomej/node-csfd-api

✓SAFE B

ČSFD API in JavaScript. Amazing NPM library for scrapping csfd.cz. Now with MCP server

★ 636 readstdio

Deep Research

mcherukara/claude-deep-research

✓SAFE B

An MCP (Model Context Protocol) server that enables comprehensive research capabilities for Claude

★ 631 read

Domain

rinadelph/domain-mcp

✓SAFE B

MCP server for domain research - WHOIS, DNS, SSL certs, expired domains. No API keys needed.

★ 638 readstdio

Finance Trading AI Agents

aitrados/finance-trading-ai-agents-mcp

✓SAFE B

A comprehensive, free MCP server designed specifically for financial analysis and quantitative trading. This specialized platform offers one-click local deployment with a sophisticated department-based architecture that mirrors real financial company operations.

★ 633 readstreamable-http

Labor Law

kentaroajisaka/labor-law-mcp

✓SAFE B

MCP server for Japanese labor & social insurance law — e-Gov API, MHLW 通達, JAISH 安衛通達

★ 636 readstdio

labor-law-mcp

kentaroajisaka/labor-law-mcp

✓SAFE B

MCP server for Japanese labor & social insurance law — e-Gov API, MHLW 通達, JAISH 安衛通達

★ 636 readstdio

Open CLAW Knowledge Distiller

destinyfrancis/openclaw-knowledge-distiller

✓SAFE B

Open CLAW Knowledge Distiller · 龍蝦知識蒸餾器 — Turn YouTube/Bilibili videos into structured knowledge articles. Local Qwen3-ASR MLX + AI summarization. MCP server for Claude Code / Open CLAW agents.

★ 633 readstdio

Quick MCP Example

alucek/quick-mcp-example

✓SAFE B

Short and sweet example MCP server / client implementation for Tools, Resources and Prompts.

★ 632 readstdio

Tripadvisor

pab1it0/tripadvisor-mcp

✓SAFE B

A Model Context Protocol (MCP) server for Tripadvisor Content API. This provides access to Tripadvisor location data, reviews, and photos through standardized MCP interfaces, allowing AI assistants to search for travel destinations and experiences.

★ 634 readstdio

NS Travel Information

r-huijts/ns-mcp-server

✓SAFE B

A Model Context Protocol (MCP) server that provides access to NS (Dutch Railways) travel information through Claude AI. This server enables Claude to fetch real-time train travel information and disruptions using the official Dutch NS API.

★ 626 readstdio

RAG App on AWS

genieincodebottle/rag-app-on-aws

✓SAFE B

Build and deploy a full-stack RAG app on AWS with Terraform, using free tier Gemini Pro, real-time web search using Remote MCP server and Streamlit UI with token based authentication.

★ 622 readstreamable-http

AI Humanizer

text2go/ai-humanizer-mcp-server

✓SAFE B

A powerful Model Context Protocol (MCP) server that helps refine AI-generated content to sound more natural and human-like. Built with advanced AI detection and text enhancement capabilities.

★ 611 readstdio

Apple Books

vgnshiyer/apple-books-mcp

✓SAFE B

Apple Books MCP Server

★ 619 readstdio

Cryptocurrency Market Data

nayshins/mcp-server-ccxt

✓SAFE B

Cryptocurrency Market Data MCP Server

★ 617 readstdio

FFmpeg Video Processor

bitscorp-mcp/mcp-ffmpeg

✓SAFE B
★ 614 readstdio

Hub

warpdev/mcp-hub-mcp

✓SAFE B
★ 617 readstdio

Jimengpic

comeonzhj/jimengpic-mcp

✓SAFE B

使用即梦 API 生成图片的 MCP 服务

★ 611 readstdio

Screenshot

upnorthmedia/screenshotmcp

✓SAFE B

A Model Context Protocol MCP server for capturing website screenshots with full page, element, and device size features.

★ 613 readstdio

Domain Availability Checker

imprvhub/mcp-domain-availability

✓SAFE B

A Model Context Protocol (MCP) server that enables Claude Desktop to check domain availability across 50+ TLDs. Features DNS/WHOIS verification, bulk checking, and smart suggestions. Zero-clone installation via uvx.

★ 602 readstreamable-http

HMR

promplate/hmr

✓SAFE B

Real hot-module reload for Python—side effects handled reactively. https://py3.online/hmr

★ 601 readsse

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.