MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/20

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

457–480 of 1,620 · ranked by trust score, then stars

Flightradar24

sunsetcoder/flightradar24-mcp-server

✓SAFE B

Model Context Protocol server for Flight Tracking

★ 472 readstdio

Goodnews

vectorinstitute/mcp-goodnews

✓SAFE B

A simple MCP application that delivers curated positive and uplifting news stories.

★ 471 readstdio

Google Custom Search

limklister/mcp-google-custom-search-server

✓SAFE B

An mcp server for searching against google custom search api

★ 471 readstdio

Jina Reader

wong2/mcp-jina-reader

✓SAFE B

Jina Reader MCP Server

★ 472 read

Logoloom

mcpware/logoloom

✓SAFE B

AI-powered logo design → SVG → full brand kit. Free, local, MCP-native.

★ 474 readstdio

Mcp Starter

stevenstavrakis/mcp-starter-template

✓SAFE B

An opinionated starter template for making Model Context Protocol (MCP) servers

★ 471 readstdio

Moondream

colemurray/moondream-mcp

✓SAFE B

Moondream MCP Server in Python

★ 476 readstdio

Pdf Reader

trafflux/pdf-reader-mcp

✓SAFE B
★ 472 read

PubChem

augmented-nature/pubchem-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server for accessing the PubChem chemical database. This server provides access to over 110 million chemical compounds with extensive molecular properties, bioassay data, and chemical informatics tools.

★ 4730 readstdio

Rust Docs

0xkoda/mcp-rust-docs

✓SAFE B

An MCP to retrieve rust crate documentation for LLM's

★ 471 readstdio

China Stock

xinkuang/china-stock-mcp

!CAUTION B

MCP server that provides access to Chinese stock market data using akshare-one

★ 464 readstreamable-http

Company Docs

southleft/company-docs-mcp

✓SAFE B

AI-powered company knowledge MCP. Unified place for internal policies, values, documentation, and governance. Agents can search, cite, and answer questions using real company docs.

★ 464 read

Data Product

entropy-data/dataproduct-mcp

!CAUTION B

A Model Context Protocol (MCP) server for discovering data products and requesting access in Data Mesh Manager, and executing queries on the data platform to access business data.

★ 464 readstdio

Dida Hotel

dida-ai/dida-hotel-mcp-global

✓SAFE B

Official DIDA Hotel Booking MCP Server. 14-year travel tech data stack, 2M+ hotels at wholesale rates, 40+ LLM compatible. Free unlimited calls for businesses & individual devs. Filter by location, date, star grade, guests & tags; pull real-time room types, pricing & cancellation rules.

★ 461 read

Dida RollingGo Hotel

dida-ai/dida-rollinggo-hotel-mcp-global

✓SAFE B

Official DIDA Hotel Booking MCP Server. 14-year travel tech data stack, 2M+ hotels at wholesale rates, 40+ LLM compatible. Free unlimited calls for businesses & individual devs. Filter by location, date, star grade, guests & tags; pull real-time room types, pricing & cancellation rules.

★ 461 read

Grafana

sailingcoder/grafana-mcp-analyzer

✓SAFE B

让AI助手直接分析你的Grafana监控数据 - A Model Context Protocol server for Grafana data analysis

★ 466 readstdio

GraphQL Schema

hannesj/mcp-graphql-schema

✓SAFE B

GraphQL Schema Model Context Protocol Server

★ 4610 readstdio

MCP Playground

elkhn/mcp-playground

✓SAFE B

A Streamlit-based chat app for LLMs with plug-and-play tool support via Model Context Protocol (MCP), powered by LangChain, LangGraph, and Docker.

★ 464 readsse

Pubmed Search

wavelovey/pubmed_search

!CAUTION B

MCP PubMed Search Server

★ 461 readstdio

Pyautogui

hetaobackend/mcp-pyautogui-server

✓SAFE B

A MCP (Model Context Protocol) server that provides automated GUI testing and control capabilities through PyAutoGUI.

★ 4610 read

Web Reader

zacfire/mcp-web-reader

✓SAFE B

让Claude等大语言模型轻松获取和解析任何网页内容,并转化为干净的Markdown。支持双引擎、批量处理,增强AI互联网信息处理能力。

★ 465 readstdio

Agentic Developer

teabranch/agentic-developer-mcp

!CAUTION B

An MCP server that scales development into controllable agentic, recursive flows, and build a feature from bottom-up

★ 452 readsse

Bear

akseyh/bear-mcp-server

✓SAFE B

MCP Server integration for Bear note app

★ 453 readstdio

Chrome Debug

robertheadley/chrome-debug-mcp

✓SAFE B

An MCP server to allow you to debug webpages using LLMs

★ 453 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.