MCP servers · least privilege

Read-only MCP servers

1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/26

Verdicts · 1,620 servers

✓SAFE913!CAUTION261✕BLOCK446

Transports

A server can list more than one transport.

1,620 servers

601–624 of 1,620 · ranked by trust score, then stars

V0 Capture

m2rads/v0-mcp

✓SAFE B

MCP Server to connect your MCP host to V0.dev directly

★ 341 readstdio

Weather

timlukahorstmann/mcp-weather

✓SAFE B

A Model Context Protocol (MCP) server that provides hourly and daily weather forecasts using the AccuWeather API.

★ 342 readstdio

AI Council

0xakuti/ai-council-mcp

✓SAFE B

Multi-AI consensus MCP server that queries multiple AI models (OpenAI, Claude, Gemini, custom APIs) in parallel and synthesizes responses to reduce bias and improve accuracy. A Python implementation of the wisdom-of-crowds approach for AI decision making.

★ 331 readstdio

Airflow

abhishekbhakat/airflow-mcp-server

✓SAFE B

MCP Server for Apache Airflow

★ 335 readstdio

Asterisk

getasterisk/asterisk-mcp-server

✓SAFE B

Asterisk Model Context Protocol (MCP) server.

★ 334 read

BatchData

zellerhaus/batchdata-mcp-real-estate

✓SAFE B

Model Context Protocol (MCP) server for BatchData.io property and address APIs - Real estate data integration for Claude and other AI assistants

★ 338 readstdio

DeepSeek Reasoner

kuon-dev/advanced-reason-mcp

✓SAFE B

Enhanced version of "Sequential Thinking" MCP

★ 331 readstdio

Github Repo

ryan0204/github-repo-mcp

✓SAFE B

Model Context Protocol server for Github Repo // Reading Github Repo

★ 333 readstdio

Mcpmarket

cherryhq/mcpmarket

✓SAFE B

MCP Market

★ 339 readstdio

Octagon VC Agents

octagonai/octagon-vc-agents

✓SAFE B

An MCP server that runs AI-driven venture capitalist agents (Fred Wilson, Peter Thiel, etc.), whose thinking is continuously enriched by Octagon Private Markets' real-time deals, valuations, and deep research intelligence. Use it to spin up programmable "VC brains" for pitch feedback, diligence simu

★ 331 read

Pdf Extraction

xraywu/mcp-pdf-extraction-server

✓SAFE B

MCP server to extract contents from a PDF file

★ 331 readstdio

Prometheus

caesaryangs/prometheus_mcp_server

✓SAFE B

A Model Context Protocol (MCP) server enabling LLMs to query, analyze, and interact with Prometheus databases through predefined routes.

★ 331 readstdio

Rust Docs

laptou/rust-docs-mcp-server

✓SAFE B
★ 337 readstdio

Variflight

variflight/variflight-mcp

✓SAFE B

A Model Context Protocol (MCP) server implementation for Variflight services.

★ 339 readstdio

Weibo

selenium39/mcp-server-weibo

✓SAFE B

Model Context Protocol服务器,用于抓取微博用户信息、动态和搜索功能

★ 335 readstdio

Actor-Critic Thinking

aquarius-wing/actor-critic-thinking-mcp

✓SAFE B

A dual-perspective thinking analysis server based on Model Context Protocol (MCP), providing comprehensive performance evaluation through Actor-Critic methodology.

★ 321 readstdio

Astro

timbroddin/astro-mcp-server

✓SAFE B

An MCP (Model Context Protocol) server that provides access to Astro ASO (App Store Optimization) data for LLMs.

★ 3215 readstdio

Chrome Extension Bridge

oanakiaja/chrome-extension-bridge-mcp

✓SAFE B

A chrome extension bridge that allows you to connect to a mcp server to use global window object.

★ 321 readstdio

Dify Connect

difybase/dify-connect-mcp

✓SAFE B
★ 322 readstdio

Follow Up Boss

mindwear-capitian/followupboss-mcp-server

✓SAFE B

Talk to your Follow Up Boss CRM in plain English. 160-tool MCP server for realtors, built by a working broker (Neuhaus Realty Group, Austin TX). Free self-host, ELv2 licensed.

★ 321 readstdio

JLC Parts

nvsofts/jlcpcb-parts-mcp

✓SAFE B

JLCPCB PCBA向けの、部品探しを補助するためのMCPサーバー

★ 329 readstdio

Mentor

cyanheads/mentor-mcp-server

✓SAFE B

A Model Context Protocol server providing LLM Agents a second opinion via AI-powered Deepseek-Reasoning R1 mentorship capabilities, including code review, design critique, writing feedback, and idea brainstorming through the Deepseek API.

★ 325 readstdio

Obsidian

marcelmarais/obsidian-mcp-server

✓SAFE B
★ 328 readstdio

Snipe-IT

jameshgordy/snipeit-mcp

!CAUTION B

MCP server for Snipe-IT asset management. Enables AI assistants to manage assets, consumables, accessories, licenses, users, and system configuration via 39 comprehensive tools.

★ 328 readstreamable-http

Other risk hubs

By job

Questions

What does read-only mean here?
A server is listed here when its source declares at least one tool and every tool is classed read: no write tools and no destructive tools.
Is a read-only server always safe?
No. 913 are SAFE, 261 CAUTION and 446 BLOCK on this list. A tool list says what the tools do, not whether the surrounding code is clean, so a read-only server can still be BLOCK.
Why are some servers on no risk list?
615 servers declare no tools we can read, because they build the list at runtime. They cannot be called read-only, so they appear on none of the risk hubs.

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.