MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/23

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

529–552 of 1,620 · ranked by trust score, then stars

Pinterest

terryso/mcp-pinterest

✓SAFE B
★ 403 readstdio

Python Sandbox

johanli233/mcp-sandbox

✓SAFE B

Python sandboxes for llms

★ 401 read

TestRail

uarlouski/testrail-mcp-server

✓SAFE B

AI-native MCP server connecting Claude, Cursor, Windsurf, and other AI assistants to TestRail — manage test cases, runs, and results through natural-language conversation, with typed schemas built for LLMs.

★ 408 readstdio

Unichat

amidabuddha/unichat-mcp-server

✓SAFE B
★ 401 readstdio

Wp Blockmarkup

pluginslab/wp-blockmarkup-mcp

✓SAFE B
★ 406 readstdio

Apple Reminders

shadowfax92/apple-reminders-mcp

✓SAFE B
★ 395 readstdio

Crypto Price

truss44/mcp-crypto-price

✓SAFE B

A Model Context Protocol (MCP) server that provides real-time cryptocurrency analysis via CoinCap's API. Enables Claude and other MCP clients to fetch crypto prices, analyze market trends, and track historical data.

★ 3920 read

Gong

kenazk/gong-mcp

✓SAFE B

Simple Gong MCP server

★ 392 readstdio

Kaggle

arrismo/kaggle-mcp

✓SAFE B

MCP server for Kaggle

★ 392 read

Mistral OCR

everaldo/mcp-mistral-ocr

✓SAFE B

Model Context Protocol (MCP) Server for Mistral OCR API

★ 393 readstdio

Oura

tomekkorbak/oura-mcp-server

✓SAFE B

MCP server for Oura API integration

★ 396 readstdio

SearXNG

kevinwatt/mcp-server-searxng

✓SAFE B

An MCP server implementation that integrates with SearXNG, providing privacy-focused meta search capabilities.

★ 391 readstdio

UniFi Applications

kallistox/mcp-unifi-applications

✓SAFE B

UniFi MCP server that makes the official UniFi API documentation (Network, Protect, Site Manager, InnerSpace) queryable by AI agents — endpoint search, schema drill-down, code examples in 5 languages. Read-only, no controller credentials.

★ 3910 readstdio

WebFetch

manooll/webfetch-mcp

✓SAFE B

Live Web Access for Your Local AI — Tunable Search & Clean Content Extraction

★ 392 readstdio

YouTube Transcript

sinco-lab/mcp-youtube-transcript

✓SAFE B

TypeScript MCP server for retrieving YouTube transcripts in Claude Desktop, Cursor, Cline, Codex, and other MCP clients

★ 393 readstdio

Cos

tencent/cos-mcp

✓SAFE B

基于 MCP 协议的腾讯云 COS MCP Server,无需编码即可让大模型快速接入腾讯云存储 (COS) 和数据万象 (CI) 能力。

★ 3821 readsse

docs.rs MCP

nuskey8/docs-rs-mcp

✓SAFE B

An MCP server that enables searching for Rust crates and their documentation from crates.io and docs.rs.

★ 384 readstdio

Example

kirill-markin/example-mcp-server

✓SAFE B

A ready-to-use MCP (Model Context Protocol) server template for extending Cursor IDE with custom tools. Deploy your own server to Heroku with one click, create custom commands, and enhance your Cursor IDE experience. Perfect for developers who want to add their own tools and commands to Cursor IDE w

★ 382 readstdio

Feuse

panzer-jack/feuse-mcp

✓SAFE B

Frontend Useful MCP Tools - Essential utilities for web developers to automate API integration and code generation

★ 387 read

MacOS Notification

devizor/macos-notification-mcp

✓SAFE B

macOS Notification MCP enables AI assistants to trigger native macOS sounds, visual notifications, and text-to-speech. Built for Claude and other AI models using the Model Context Protocol.

★ 381 read

OpenBIM

helenkwok/openbim-mcp

✓SAFE B

Model Context Protocol (MCP) server for openBIM

★ 383 readstdio

Pentest Thinking

ibrahimsaleem/pentestthinkingmcp

✓SAFE B

A systematic, AI-powered penetration testing reasoning engine (MCP server) for attack path planning, CTF/HTB solving, and automated pentest workflows. Features Beam Search, MCTS, attack step scoring, and tool recommendations.

★ 382 readstdio

ScreenshotOne

screenshotone/mcp

✓SAFE B

A CLI version of an MCP server for the ScreenshotOne API

★ 384 readstdio

TranslateGemma

neosun100/translategemma

!CAUTION B

🌍 TranslateGemma - Local AI Translation Service with Web UI, REST API & MCP. 55 languages, all-in-one Docker image with embedded models. Powered by Google's TranslateGemma.

★ 389 read

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.