MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/25

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

577–600 of 1,620 · ranked by trust score, then stars

AlphaFold

augmented-nature/alphafold-mcp-server

✓SAFE B

A comprehensive Model Context Protocol (MCP) server that provides access to the AlphaFold Protein Structure Database through a rich set of tools and resources for protein structure prediction analysis.

★ 3519 readstdio

Coles & Woolworths

hung-ngm/coles-woolworths-mcp-server

✓SAFE B
★ 352 readstdio

DigiKey

bengineer19/digikey_mcp

✓SAFE B

An MCP for DigiKey

★ 359 read

Exa

egoist/exa-mcp

✓SAFE B

MCP server for Exa Search API.

★ 351 readsse

Genesys Cloud

makingchatbots/genesys-cloud-mcp-server

✓SAFE B

Model Context Protocol (MCP) server for Genesys Cloud’s Platform API

★ 351 readstdio

Giphy

magarcia/mcp-server-giphy

✓SAFE B

An implementation of Giphy integration with Model Context Protocol

★ 353 readstdio

Market Fiyatı

enescinr/market-fiyatlari-mcp-server

✓SAFE B
★ 353 readstdio

NewsMCP

pranciskus/newsmcp

✓SAFE B

MCP server for real-time world news — free, no API key required

★ 356 readstdio

Opendal

xuanwo/mcp-server-opendal

✓SAFE B

Model Context Protocol Server for Apache OpenDALTM

★ 353 read

RSS

veithly/rss-mcp

✓SAFE B

This is a Model Context Protocol (MCP) server built with TypeScript. It provides a versatile tool to fetch and parse any standard RSS/Atom feed, and also includes special support for RSSHub feeds.

★ 351 readstdio

To Markdown

fradser/mcp-server-to-markdown

✓SAFE B
★ 351 readstdio

Bluesky Context

laulauland/bluesky-context-server

✓SAFE B

Bluesky MCP server

★ 348 readstdio

Chrome Tabs

pokutuna/mcp-chrome-tabs

✓SAFE B
★ 343 readstdio

Fitbit

thedigitalninja/mcp-fitbit

✓SAFE B

Give your AI assistant access to your Fitbit data for personalized health insights, trend analysis, and automated tracking. Works with Claude Desktop and other MCP-compatible AI tools.

★ 349 readstdio

Gemini Image Generator

qhdrl12/mcp-server-gemini-image-generator

✓SAFE B

MCP server for AI image generation and editing using Google's Gemini Flash models. Create images from text prompts with intelligent filename generation and strict text exclusion. Supports text-to-image generation with future expansion to image editing capabilities.

★ 343 readstdio

Geo

webcoderz/mcp-geo

✓SAFE B

Geocoding MCP server with GeoPY!

★ 347 read

Hacker News

paablolc/mcp-hacker-news

✓SAFE B

This MCP server acts as a bridge between the official Hacker News API and AI-powered tools that support the Model Context Protocol, such as Claude and Cursor.

★ 3411 read

Ifc

smartaec/ifcmcp

✓SAFE B

MCP server that enables LLM agents to talk with IFC (Industry Foundation Classes) files

★ 348 readsse

Mcp Server Starter

thesethrose/mcp-server-starter

✓SAFE B

A Model Context Protocol server starter template

★ 342 readstdio

Meta Prompt

tisu19021997/meta-prompt-mcp-server

✓SAFE B

Turn any MCP Client into a "multi-agent" system (via prompting)

★ 342 read

NewsNow

ourongxing/newsnow-mcp-server

✓SAFE B

Official MCP Server for newnow, 40+ sources available.

★ 341 read

Ollama

emgeee/mcp-ollama

✓SAFE B

Query model running with Ollama from within Claude Desktop or other MCP clients

★ 343 readstdio

Simple Timeserver

andybrandt/mcp-simple-timeserver

!CAUTION B

Simple MCP to give Claude ability to check current time as well as know when holidays are, what is the time distance between dates etc.

★ 347 readstreamable-http

Swiss Groceries

nicktcode/swissgroceries-mcp

✓SAFE B

MCP server for Swiss grocery stores: Migros, Coop, Aldi, Denner, Lidl

★ 3412 readstdio

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.