MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/2
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
25–48 of 1,620 · ranked by trust score, then stars
Deepwiki
regenrek/deepwiki-mcp
📖 MCP server for fetch deepwiki.com and get latest knowledge in Cursor and other Code Editors
mcp-deepwiki
regenrek/deepwiki-mcp
📖 MCP server for fetch deepwiki.com and get latest knowledge in Cursor and other Code Editors
Claude Code
steipete/claude-code-mcp
Claude Code as one-shot MCP server to have an agent in your agent.
Quickstart Resources
modelcontextprotocol/quickstart-resources
A repository of servers and clients from the Model Context Protocol tutorials
Ref Tools
ref-tools/ref-tools-mcp
Helping coding agents never make mistakes working with public or private libraries without wasting the context window.
RedNote
ifuryst/rednote-mcp
🚀MCP server for accessing RedNote(XiaoHongShu, xhs).
Lightswind UI
codewithmuhilan/lightswind-ui-library
The AI-native CLI-first React component library. 160+ animated, accessible, production-ready components with MCP Server support for Cursor, Claude & GitHub Copilot. Copy-paste architecture — you own the code.
Minima
dmayboroda/minima
On-premises conversational RAG with configurable containers
Mcpdoc
langchain-ai/mcpdoc
Expose llms-txt to IDEs for development
Chatsum
chatmcp/mcp-server-chatsum
Query and Summarize your chat messages.
Nuxt
antfu/nuxt-mcp
MCP server helping models to understand your Vite/Nuxt app better.
Nuxt Dev
antfu/nuxt-mcp-dev
MCP server helping models to understand your Vite/Nuxt app better.
Openapi
janwilmake/openapi-mcp-server
Allow AI to wade through complex OpenAPIs using Simple Language
WebMCP
jasonjmcghee/webmcp
Early WebMCP proposal / implementation - since evolved and worked on by much more capable folks that develop the web: https://github.com/webmachinelearning/webmcp
Browser Use
co-browser/browser-use-mcp-server
Browse the web, directly from Cursor etc.
Mcp-Nixos
utensils/mcp-nixos
MCP-NixOS - Model Context Protocol Server for NixOS resources
Fetch
zcaceres/fetch-mcp
A flexible HTTP fetching Model Context Protocol server.
mcp-fetch-server
zcaceres/fetch-mcp
A flexible HTTP fetching Model Context Protocol server.
Idea Reality
mnemox-ai/idea-reality-mcp
Pre-build reality check for AI coding agents. Scans GitHub, HN, npm, PyPI, Product Hunt. MCP server. 290+ stars.
Acemcp
qy527145/acemcp
一个将ACE(Augment Context Engine) 做成MCP的项目
OpenBrand
ethanjyx/openbrand
Extract brand assets (logos, colors, backdrops) from any website; open source alternative to Brand.dev
Claude ChatGPT
syedazharmbnr1/claude-chatgpt-mcp
A Claude MCP tool to interact with the ChatGPT desktop app on macOS
How To Cook
worryzyy/howtocook-mcp
基于Anduin2017 / HowToCook (程序员在家做饭指南)的mcp server
obsidian-mcp
StevenStavrakis/obsidian-mcp
A simple MCP server for Obsidian
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?