MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/21
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
481–504 of 1,620 · ranked by trust score, then stars
Code Screenshot Generator
moussaabbadla/code-screenshot-mcp
MCP server for generating beautiful code screenshots directly from Claude
Ntfy
teddyzxcv/ntfy-mcp
Scopus
qwe4559999/scopus-mcp
A Model Context Protocol (MCP) server for Elsevier Scopus. Allows AI assistants like Claude to search academic papers, retrieve abstracts, and analyze author profiles directly.
Hyperliquid
mektigboy/server-hyperliquid
MCP Hyperliquid (https://app.hyperliquid.xyz) server
Java Class Analyzer
handsomestwei/java-class-analyzer-mcp-server
java class反编译mcp server
Kagi Server
ac3xx/mcp-servers-kagi
A Model Context Protocol server implementation for Kagi's API
Web Browser
blazickjp/web-browser-mcp-server
A Minimum Control Program (MCP) server implementation for web browsing capabilities using BeautifulSoup4
WebScraping.AI
webscraping-ai/webscraping-ai-mcp-server
A Model Context Protocol (MCP) server implementation that integrates with WebScraping.AI for web data extraction capabilities.
Whistle
7gugu/whistle-mcp
A Whistle proxy management tool based on Model Context Protocol that allows AI assistants to directly control local Whistle proxy servers, simplifying network debugging, API testing, and proxy rule configuration through natural language interaction.
Boxlite
boxlite-labs/boxlite-mcp
Powered by BoxLite - embeddable sandbox with hardware-level isolation and no daemon. The SQLite of sandbox, coming soon as open source.
CN Financial
ccq1/cn-financial-mcp
cn金融数据 MCP 服务器 — 工具包覆盖 A 股行情、财报、估值、板块、市场全景、新闻及宏观指标。
DuckDuckGo Search
oevortex/ddg_search
A powerful Model Context Protocol (MCP) server for web search and URL content extraction using DuckDuckGo.
Flight Search
arjunprabhulal/mcp-flight-search
MCP Server implementation for the Model Context Protocol (MCP) enabling AI tool usage - Realtime Flight Search
LeetCode
doggybee/mcp-server-leetcode
A Model Context Protocol (MCP) server for LeetCode that provides access to problems, user data, and contest information through GraphQL
Lucide Icons
seeyangzhi/lucide-icons-mcp
A Model Context Protocol (MCP) server exposing Lucide icons as resources and tools for LLMs and agentic applications. Built with Bun and the MCP TypeScript SDK.
Moodle
peancor/moodle-mcp-server
OpenRPC
shanejonas/openrpc-mpc-server
A Model Context Protocol (MCP) server that provides JSON-RPC functionality through OpenRPC.
PBIXRay
jonaolden/pbixray-mcp-server
MCP server to give llms such as Claude, GitHub Copilot etc full PowerBI model context (from input .pbix) through tools based on PBIXRay python package.
SearXNG
tisddm/searxng-mcp
A Model Context Protocol (MCP) server that enables AI assistants to perform web searches using SearXNG, a privacy-respecting metasearch engine.
Trpc
jacse/trpc-mcp
Serve tRPC routes as an MCP server
MCP NPX Fetch
tokenizin-agency/mcp-npx-fetch
A powerful MCP server for fetching and transforming web content into various formats (HTML, JSON, Markdown, Plain Text) with ease.
Code Research
nahmanmate/code-research-mcp-server
Copilot Security
robotti-io/copilot-security-instructions
✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
Flowbite
themesberg/flowbite-mcp
Convert Figma design to code with the official Flowbite MCP server
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?