MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/23
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
529–552 of 1,620 · ranked by trust score, then stars
terryso/mcp-pinterest
Python Sandbox
johanli233/mcp-sandbox
Python sandboxes for llms
TestRail
uarlouski/testrail-mcp-server
AI-native MCP server connecting Claude, Cursor, Windsurf, and other AI assistants to TestRail — manage test cases, runs, and results through natural-language conversation, with typed schemas built for LLMs.
Unichat
amidabuddha/unichat-mcp-server
Wp Blockmarkup
pluginslab/wp-blockmarkup-mcp
Apple Reminders
shadowfax92/apple-reminders-mcp
Crypto Price
truss44/mcp-crypto-price
A Model Context Protocol (MCP) server that provides real-time cryptocurrency analysis via CoinCap's API. Enables Claude and other MCP clients to fetch crypto prices, analyze market trends, and track historical data.
Gong
kenazk/gong-mcp
Simple Gong MCP server
Kaggle
arrismo/kaggle-mcp
MCP server for Kaggle
Mistral OCR
everaldo/mcp-mistral-ocr
Model Context Protocol (MCP) Server for Mistral OCR API
Oura
tomekkorbak/oura-mcp-server
MCP server for Oura API integration
SearXNG
kevinwatt/mcp-server-searxng
An MCP server implementation that integrates with SearXNG, providing privacy-focused meta search capabilities.
UniFi Applications
kallistox/mcp-unifi-applications
UniFi MCP server that makes the official UniFi API documentation (Network, Protect, Site Manager, InnerSpace) queryable by AI agents — endpoint search, schema drill-down, code examples in 5 languages. Read-only, no controller credentials.
WebFetch
manooll/webfetch-mcp
Live Web Access for Your Local AI — Tunable Search & Clean Content Extraction
YouTube Transcript
sinco-lab/mcp-youtube-transcript
TypeScript MCP server for retrieving YouTube transcripts in Claude Desktop, Cursor, Cline, Codex, and other MCP clients
Cos
tencent/cos-mcp
基于 MCP 协议的腾讯云 COS MCP Server,无需编码即可让大模型快速接入腾讯云存储 (COS) 和数据万象 (CI) 能力。
docs.rs MCP
nuskey8/docs-rs-mcp
An MCP server that enables searching for Rust crates and their documentation from crates.io and docs.rs.
Example
kirill-markin/example-mcp-server
A ready-to-use MCP (Model Context Protocol) server template for extending Cursor IDE with custom tools. Deploy your own server to Heroku with one click, create custom commands, and enhance your Cursor IDE experience. Perfect for developers who want to add their own tools and commands to Cursor IDE w
Feuse
panzer-jack/feuse-mcp
Frontend Useful MCP Tools - Essential utilities for web developers to automate API integration and code generation
MacOS Notification
devizor/macos-notification-mcp
macOS Notification MCP enables AI assistants to trigger native macOS sounds, visual notifications, and text-to-speech. Built for Claude and other AI models using the Model Context Protocol.
OpenBIM
helenkwok/openbim-mcp
Model Context Protocol (MCP) server for openBIM
Pentest Thinking
ibrahimsaleem/pentestthinkingmcp
A systematic, AI-powered penetration testing reasoning engine (MCP server) for attack path planning, CTF/HTB solving, and automated pentest workflows. Features Beam Search, MCTS, attack step scoring, and tool recommendations.
ScreenshotOne
screenshotone/mcp
A CLI version of an MCP server for the ScreenshotOne API
TranslateGemma
neosun100/translategemma
🌍 TranslateGemma - Local AI Translation Service with Web UI, REST API & MCP. 55 languages, all-in-one Docker image with embedded models. Powered by Google's TranslateGemma.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?