MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/24

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

553–576 of 1,620 · ranked by trust score, then stars

Baseline

yamanoku/baseline-mcp-server

✓SAFE B

特定のWeb APIに関するBaselineの状況を提供するModel Context Protocolサーバー

★ 372 read

Clear Thought

chirag127/clear-thought-mcp-server

✓SAFE B

MCP server providing systematic thinking, mental models, and debugging approaches for enhanced LLM problem-solving

★ 3715 readstdio

Codelogic

codelogicincengineering/codelogic-mcp-server

✓SAFE B

An MCP Server to utilize Lineai's rich software dependency data in your AI programming assistant.

★ 378 readstdio

Imagegen

spartanz51/imagegen-mcp

✓SAFE B

MCP server for OpenAI Image Generation & Editing — text-to-image, image-to-image (with mask), no extra plugins.

★ 372 readstdio

Israeli Bank

mottibec/israeli-bank-mcp

✓SAFE B
★ 372 readstdio

Lark Tools

li-vien/lark-tools-mcp

✓SAFE B

MCP server provides Feishu related operations to AI encoding agents such as cursor 飞书MCP插件,读取文档、发送消息、合同审批、数据处理.....

★ 371 readsse

Mcp Starter

instructa/mcp-starter

✓SAFE B

A super simple Starter to build your own MCP Server

★ 371 readsse

Nrepl

johancodinha/nrepl-mcp-server

✓SAFE B

nRepl mcp server for clojure. Enables interaction with a running Clojure nREPL instance, allowing evaluation of Clojure code, namespace inspection, and other utilities via MCP.

★ 373 readstdio

Prediction Market

jamesanz/prediction-market-mcp

✓SAFE B

A simple MCP server that grabs prediction market data from polymarket, PredictIt, & Kalshi.

★ 372 readstdio

Tung Shing

baranwang/mcp-tung-shing

✓SAFE B

中国传统黄历 MCP 服务 | Chinese Traditional Almanac MCP Service

★ 372 readstdio

YFinance Trader

saintdoresh/yfinance-trader-mcp-claudedesktop

✓SAFE B

An MCP (Model Context Protocol) tool that provides stock market data and trading capabilities using the yfinance library, specifically adapted for Claude Desktop.

★ 376 read

Any Script

izumin5210/any-script-mcp

✓SAFE B

An MCP server that exposes arbitrary CLI tools and shell scripts as MCP Tools

★ 3628 readstdio

Coin API

longmans/coin_api_mcp

✓SAFE B

A Model Context Protocol server that provides access to CoinMarketCap's cryptocurrency data. This server enables AI-powered applications to retrieve cryptocurrency listings, quotes, and detailed information about various coins.

★ 363 readstdio

Game Boy Emulator

mario-andreschak/mcp-gameboy

✓SAFE B

A gameboy emulator for LLM's

★ 365 readsse

Lenny's Podcast

akshayvkt/lenny-mcp

✓SAFE B

MCP server for searching Lenny's Podcast transcripts - 284 episodes of product wisdom

★ 363 readstdio

LinkedIn

hritik003/linkedin-mcp

✓SAFE B

A MCP server for LinkedIn to seamlessly apply for jobs🚀

★ 362 readstdio

Local FAISS

nonatofabio/local_faiss_mcp

✓SAFE B

Local FAISS vector store as an MCP server – Agent Memory, drop-in local semantic search for Claude / Copilot / Agents.

★ 362 readstdio

Osrs

jayarrowz/mcp-osrs

✓SAFE B

mcp server for AI to understand osrs

★ 3623 readstdio

Pdf Reader

deepseekmine/mcp-pdf-reader

✓SAFE B
★ 363 read

Prompts.chat

f/prompts.chat-mcp

✓SAFE B

Search and retrieve AI prompts from prompts.chat, the social platform for AI prompts.

★ 362 readstdio

Screenshot

sethbang/mcp-screenshot-server

✓SAFE B

An MCP server that provides AI assistants with screenshot capabilities — both web page capture via Puppeteer and cross-platform system screenshots using native OS tools.

★ 362 readstdio

Scryfall

cryppadotta/scryfall-mcp

✓SAFE B

A mcp server for interacting with the Scryfall Magic The Gathering API

★ 367 readsse

🎨 UI/UX Pro MCP Server

redf0x1/ui-ux-pro-mcp

✓SAFE B

🎨 AI-powered UI/UX design intelligence - 1519+ curated design resources through MCP | React, Vue, Next.js, Flutter & more

★ 362 readstdio

Weather

adhikasp/mcp-weather

✓SAFE B

MCP server that provides hourly weather forecasts using the AccuWeather API

★ 361 read

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.