MCP servers · least privilege
Read-only MCP servers
1,620 MCP servers declare tools that only read: none of their tools is classed write or destructive. That makes them the safest place to start giving an agent access. Read-only describes the tools, not the code, so the audit verdict still decides whether to connect one.
Cite
Cite this page
ModelsAtlas. “Read-only MCP servers”. Retrieved 29 Oct 2026. https://modelsatlas.com/mcp/read-only/page/27
Verdicts · 1,620 servers
Transports
- stdio, runs locally1,124
- Streamable HTTP, remote555
- SSE, legacy remote133
- Not declared284
A server can list more than one transport.
1,620 servers
625–648 of 1,620 · ranked by trust score, then stars
SQL Analyzer
j4c0bs/mcp-server-sql-analyzer
MCP server for SQL static analysis.
UX
elsahafy/ux-mcp-server
MCP server providing 28 UX knowledge resources, 23 analysis tools & 4 workflow prompts. Works with Claude, Cursor, Continue.dev, Cline, Zed & any MCP client. WCAG, Nielsen heuristics, design systems, e-commerce, PWA, AI/ML & more.
Archy
phxdev1/archy-mcp
Dataset Viewer
privetin/dataset-viewer
MCP server for Hugging Face dataset viewer
Datetime
zeparhyfar/mcp-datetime
A MCP server for datetime formatting and file name generation.
DeBridge
debridge-finance/debridge-mcp
MCP server that gives AI agents the ability to execute cross-chain cryptocurrency swaps and transfers via the deBridge protocol
ExploitDB
cyreslab-ai/exploitdb-mcp-server
MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.
Ez-Mcp
intellectronica/ez-mcp
The easiest path to getting an MCP server going
Flux Dev
nicekate/flux-dev-mcp
Mcp Toolbox
ai-zerolab/mcp-toolbox
Maintenance of a set of tools to enhance LLM through MCP protocols.
MiniMax AI
zth0828/mmx-mcp-server
A unified Model Context Protocol server for MiniMax CLI (mmx)
Qwen Code
jeffery9/qwen-mcp-tool
MCP server that enables AI assistants to interact with Qwen code
Scholar
lstudlo/scholarmcp
ScholarMCP - An academic research MCP server with comprehensive literature search, PDF ingestion, and citation management tools. Integrates with Google Scholar, OpenAlex, Crossref, and Semantic Scholar for automated research workflows.
ThinQ Connect
thinq-connect/thinqconnect-mcp
ThinQ Connect MCP Server
Agentset
agentset-ai/mcp-server
Agentset MCP Server - Build RAG with Agentic superpowers
AI Quality Gate
mustafacagri/ai-quality-gate
🚀 Kill the Junior AI Era. 🤖 Level up your AI code to Principal standards. No more sloppy lines or junior mistakes. Automated ESLint ✨ TypeScript 🔧 Prettier 🎨 SonarQube 🛡️ Security 🔒 Complexity 📊 in seconds. High-stakes quality, forced to ship only the best. ⚡🏆 Goodbye, bad code. Hello, Principal Eng
Aws S3
samuraikun/aws-s3-mcp
MCP server to integrate AWS S3 and LLM
Claudinho
arturogarrido/claudinho
⚽ Live football(soccer) scores, fixtures and standings for the competition you follow (World Cup, Premier League, LALIGA, Champions League and 11 more) in your terminal, your Claude Code and Cursor CLI statusline, and MCP clients. No API key. Independent fan project. Not affiliated with FIFA, any co
coderabbitai-mcp
bradthebeeble/coderabbitai-mcp
MCP server for interacting with CodeRabbit AI reviews on GitHub pull requests
Etherscan
crazyrabbitltc/mcp-etherscan-server
An MCP (Model Context Protocol) server that provides Ethereum blockchain data tools via Etherscan's API. Features include checking ETH balances, viewing transaction history, tracking ERC20 transfers, fetching contract ABIs, monitoring gas prices, and resolving ENS names.
Flights
smamidipaka6/flights-mcp-server
MCP Server for Google Flights !!
Koii
benjaminr/mcp-koii
MCP Server for Teenage Engineering EP-133 KO-II
MalwareBazaar
mytechnotalent/malwarebazaar_mcp
An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized cybersecurity research workflows.
Mcp-Client
edanyal/mcp-client
Typescript mcp client library.
Other risk hubs
By job
Questions
What does read-only mean here?
Is a read-only server always safe?
Why are some servers on no risk list?
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does read-only mean here?
- Is a read-only server always safe?
- Why are some servers on no risk list?