MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/17

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

385–408 of 1,620 · ranked by trust score, then stars

Puremd

puremd/puremd-mcp

✓SAFE B

Unblock, scrape, and search tools for MCP clients

★ 602 readstdio

Shadcn-ui

ymadd/shadcn-ui-mcp-server

✓SAFE B

MCP server for shadcn/ui component references

★ 604 readstdio

Build

nicknochnack/buildmcpserver

✓SAFE B

A complete walkthrough on how to build an MCP server to serve a trained Random Forest model and integrate it with Bee Framework for ReAct interactivity.

★ 591 readstdio

Generative UI

op7418/generative-ui-mcp

✓SAFE B

MCP server that teaches AI models to generate interactive visualizations — charts, diagrams, mockups, and more.

★ 591 readstdio

Outlook

wallisking1991/outlook-mcp-server

✓SAFE B
★ 596 read

TradingView

lev-corrupted/tradingviewmcpserver

✓SAFE B

Professional multi-asset trading & Pine Script development MCP server for Claude. Features: 20+ indicators, Pine Script tools (validator, autocomplete, docs, testing), Forex/Stocks/Crypto support

★ 5933 readstreamable-http

Whois

bharathvaj-ganesan/whois-mcp

✓SAFE B

MCP Server for whois lookups.

★ 594 readstdio

Adx

pab1it0/adx-mcp-server

!CAUTION B

A Model Context Protocol (MCP) server that enables AI assistants to query and analyze Azure Data Explorer databases through standardized interfaces.

★ 583 readstdio

Daipendency

daipendency/daipendency-mcp

✓SAFE B

Model Context Protocol server for Daipendency

★ 581 readstdio

Koppla

ruudmens/koppla

✓SAFE B

A Model-Context-Protocol (MCP) Server for Active Directory

★ 581 read

Meme Generator

haltakov/meme-mcp

✓SAFE B

A simple Model Context Protocol (MCP) server for generating memes using the ImgFlip API

★ 581 readstdio

Minimax Search

minimax-ai/minimax_search

✓SAFE B

MiniMax Search is an MCP (Model Context Protocol) server that provides web search and browsing capabilities.

★ 582 readstdio

React Analyzer

azer/react-analyzer-mcp

✓SAFE B

MCP server for analyzing & generating docs for React code locally

★ 583 readstdio

Smart Connections

msdanyg/smart-connections-mcp

✓SAFE B

Give Claude semantic memory of your Obsidian vault — local semantic search over Smart Connections embeddings via MCP. Multi-vault, block-level, 100% private.

★ 586 readstdio

Tool Chainer

thirdstrandstudio/mcp-tool-chainer

✓SAFE B
★ 583 readstdio

TypeScript Template

nickytonline/mcp-typescript-template

!CAUTION B

TypeScript template for building MCP servers

★ 582 readstreamable-http

Korean Patent

chrisryugj/korean-patent-mcp

✓SAFE B

KIPRIS 특허·실용신안·상표·디자인 검색 MCP — 자유검색/항목검색/출원인/권리자/서지상세 7개 도구 | KIPRIS Korean patent·utility·trademark·design search → 7 MCP tools

★ 577 readstdio

Mermaid Validator

rtuin/mcp-mermaid-validator

✓SAFE B

A Model Context Protocol server that validates and renders Mermaid diagrams.

★ 571 readstdio

Security Audit

qianniuspace/mcp-security-audit

✓SAFE B

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

★ 571 readstdio

AGY Bridge

sshahzaiib/agy-bridge

✓SAFE B

MCP bridge that lets Claude Code delegate heavy tasks to the Antigravity CLI (agy) — purpose-built tools, model routing with fallback, session continuity, and output truncation to save Claude's context and tokens.

★ 566 readstdio

Azure Pricing

msftnadavbh/azurepricingmcp

✓SAFE B

An MCP server for Microsoft Azure pricing that goes beyond the Azure Pricing Calculator, with programmatic cost estimates plus FinOps features like Spot price and savings analysis, and detection of orphaned or underutilized resources.

★ 5611 readstdio

Pyzotero

gyger/mcp-pyzotero

✓SAFE B

A Model Control Protocol (MCP) connector for integrating your local Zotero with Claude

★ 562 readstreamable-http

Roo Code Memory Bank

incomestreamsurfer/roo-code-memory-bank-mcp-server

✓SAFE B
★ 564 readstdio

Whale Tracker

kukapay/whale-tracker-mcp

✓SAFE B

A mcp server for tracking cryptocurrency whale transactions.

★ 562 read

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.