MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/22
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
505–528 of 1,620 · ranked by trust score, then stars
Kagi Ken
czottmann/kagi-ken-mcp
Unofficial MCP server for working with Kagi *without* API access (you'll need to be a customer). Searches and summarizes. Uses Kagi session token for easy authentication. Works well with your agent.
Npx Fetch
tokenizin-agency/mcp-npx-fetch
A powerful MCP server for fetching and transforming web content into various formats (HTML, JSON, Markdown, Plain Text) with ease.
The Librarian
aka-kika/the-librarian
Skill librarian MCP server — every installed skill costs tokens; the librarian keeps your whole collection out of agent context. Agents ask, get the few right skills for the task, and their outcomes curate the collection. Fully local: Ollama + SQLite + optional Apple Intelligence.
Timeserver
secretiveshell/mcp-timeserver
A simple MCP server that exposes datetime information to agentic systems and chat REPLs
Alive Analysis
with-geun/alive-analysis
Data analysis workflow kit for AI coding agents. Structure your analysis with the ALIVE loop — Ask, Look, Investigate, Voice, Evolve.
Fetch
kazuph/mcp-fetch
Google Patents
kunihiros/google-patents-mcp
Iceberg
ryft-io/iceberg-mcp
National Parks
kyrietangsheng/mcp-server-nationalparks
OMOP
ohnlp/omop_mcp
Model Context Protocol (MCP) server for mapping clinical terminology to Observational Medical Outcomes Partnership (OMOP) concepts using Large Language Models
Simple Files Vectorstore
lishenxydlgzs/simple-files-vectorstore
A simple vector store that indexes content of files on local file system
Sketchfab
gregkop/sketchfab-mcp-server
This is an MCP (Model Context Protocol) Server for discovering and downloading 3D models
WebSearch
mnhlt/websearch-mcp
[Self-hosted] A Model Context Protocol (MCP) server implementation that provides a web search capability over stdio transport. This server integrates with a WebSearch Crawler API to retrieve search results.
1C Platform Tools
yellow-hammer/mcp-1c-platform-tools
MCP-сервер расширения 1C: Platform Tools для AI-агентов VS Code и Cursor: тесты, сборка, профили запуска и работа с базой в проектах конфигуратора, 1С:EDT и OneScript.
AntV
antvis/mcp-server-antv
🧑🏻💻 MCP Server for @antvis visualization development, which provides documentation context and examples for visualization developers.
Apollo.io
lkm1developer/apollo-io-mcp-server
apollo.io mcp server typescript
Arxiv
prashalruchiranga/arxiv-mcp-server
An MCP server that enables interacting with the arXiv API using natural language
Binder
mpazik/binder
Headless knowledge base with bidirectional Markdown sync
Exif
stass/exif-mcp
MCP server to extract image metadata (EXIF, XMP, etc)
Hacker News
pskill9/hn-server
Hacker news MCP server
Image Recognition
mario-andreschak/mcp-image-recognition
An MCP server that provides image recognition 👀 capabilities using Anthropic and OpenAI vision APIs
Linkup
linkupplatform/python-mcp-server
Linkup is world's best search for AI applications
Local Skills
kdpa-llc/local-skills-mcp
Portable local skills for MCP clients, with on-demand loading, validation, and trigger evaluation.
OpenCTI Server
spathodea-network/opencti-mcp
MCP server for querying OpenCTI threat intelligence, indicators, reports, malware, and threat actors.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?