MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/19

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

433–456 of 1,620 · ranked by trust score, then stars

DeepSeek-Claude

harshj23/deepseek-claude-mcp-server

✓SAFE B

a MCP server which integrates reasoning capabilities of DeepSeek R1 model into claude desktop app.

★ 501 readstdio

DexPaprika

coinpaprika/dexpaprika-mcp

✓SAFE B

DexPaprika MCP server for real-time crypto token data, DEX trading activity, and DeFi analytics across multiple blockchains.

★ 501 readsse

Minimal Dev

datawhalechina/mcp-lite-dev

✓SAFE B

共学《MCP极简开发》项目代码

★ 501 readsse

Tavily Search

tomatio13/mcp-server-tavily

✓SAFE B

Taivily APIを利用するMCP Serverです。Officialが提供される前に開発しました

★ 501 readstdio

Ukrainian Statistics

vladyslavmykhailyshyn/ukrainian-stats-mcp-server

✓SAFE B

stat.gov.ua MCP server

★ 508 readstdio

World Bank Data

anshumax/world_bank_mcp_server

✓SAFE B

An implementation of the Model Context Protocol for the World Bank open data API

★ 501 readstdio

Youtube Transcript

adhikasp/mcp-youtube

✓SAFE B

Model Context Protocol to fetch youtube transcript

★ 501 read

ClickUp MCP for AI Assistants

hauptsacheNet/clickup-mcp

✓SAFE B
★ 4914 readstdio

Claude Search

doriandarko/claude-search-mcp

✓SAFE B

A MCP server that provides web search capabilities using the Claude API.

★ 491 readstdio

ClickUp

hauptsachenet/clickup-mcp

✓SAFE B
★ 4914 readstdio

Code Memory

kapillamba4/code-memory

✓SAFE B

MCP server with local vector search for your codebase. Smart indexing, semantic search, Git history — all offline.

★ 497 readsse

Coinmarket

anjor/coinmarket-mcp-server

✓SAFE B
★ 492 readstdio

Hourei

groundcobra009/hourei-mcp-server

✓SAFE B

e-Gov法令APIを使用して日本の法令情報を検索・取得するModel Context Protocolサーバー

★ 493 readstdio

hourei-mcp-server

groundcobra009/hourei-mcp-server

✓SAFE B

e-Gov法令APIを使用して日本の法令情報を検索・取得するModel Context Protocolサーバー

★ 493 readstdio

Human

upamune/human-mcp

✓SAFE B

👨🔧 人間をMCPサーバーとして利用する👩🔧

★ 497 read

Mail

shuakami/mcp-mail

!CAUTION B

📧 MCP Mail Tool - AI-powered email management tool | 基于 MCP 的智能邮件管理工具

★ 4917 readstdio

OpenAPI Schema

hannesj/mcp-openapi-schema

✓SAFE B

OpenAPI Schema Model Context Protocol Server

★ 4910 readstdio

Generator

formulahendry/generator-mcp

✓SAFE B

Yeoman Generator to quickly create a new MCP Server

★ 481 readstdio

Serper Search

nighttrek/serper-search-mcp

✓SAFE B

Un-official Serper Google search server for Cline and other MCP clients

★ 481 readstdio

Steampipe

turbot/steampipe-mcp

!CAUTION B

Enable AI assistants to explore and query your Steampipe data!

★ 485 readstdio

Crawl4AI+SearXNG

tokidoo/crawl4ai-rag-mcp

✓SAFE B

A self-contained MCP server in docker that combines the Crawl4AI, SearXNG, and Supabase to provide AI agents and coding assistants with complete web search, crawling, and RAG capabilities.

★ 479 read

Crypto Sentiment

kukapay/crypto-sentiment-mcp

✓SAFE B

An MCP server that delivers cryptocurrency sentiment analysis to AI agents.

★ 475 read

Eliza Plugin MCP

fleek-platform/eliza-plugin-mcp

✓SAFE B

ElizaOS plugin allowing agents to connect to MCP servers

★ 472 read

Excel

jwadow/mcp-excel

✓SAFE B

MCP server for AI agents to analyze Excel spreadsheets through atomic operations. Like SQL for Excel. Fast, accurate, and efficient. No context overflow.

★ 472 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.